Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/wEs2gBQc4dg8Ym-MJZvLQuVWDhI.roa
File: wEs2gBQc4dg8Ym-MJZvLQuVWDhI.roa (raw, json)
Hash identifier: o5qW/qHy0G5UP/hucFX3dkA9lv63Kd/d8UyOJeC4hnU=
Subject key identifier: C0:4B:36:80:14:1C:E1:D8:3C:62:6F:8C:25:9B:CB:42:E5:56:0E:12
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01856F8B713DFE2FE607BDE4DC8D92E7449B
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/wEs2gBQc4dg8Ym-MJZvLQuVWDhI.roa
Signing time: Sun 01 Jan 2023 22:54:47 +0000
ROA not before: Sun 01 Jan 2023 22:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48417
IP address blocks: 94.247.32.0/21 maxlen: 24
185.21.160.0/23 maxlen: 32
185.21.160.0/22 maxlen: 32
2a02:db8::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:71:3d:fe:2f:e6:07:bd:e4:dc:8d:92:e7:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jan 1 22:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c04b3680141ce1d83c626f8c259bcb42e5560e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ff:81:5d:8a:18:84:1f:46:48:fd:6b:24:8e:
58:e6:dd:6f:94:f3:ef:81:71:3e:0c:09:bd:e1:4c:
33:49:cd:13:37:4c:d3:ec:44:c9:7a:6b:df:b2:d4:
18:0f:60:54:1c:cc:d4:35:71:8d:8c:4f:0b:e1:2e:
e6:f2:72:c2:c0:be:f9:ad:71:18:e1:5e:bb:a4:e6:
6f:2b:c3:2e:2d:d7:b2:75:1d:ec:57:9e:64:61:aa:
6b:cc:4c:26:02:41:f0:df:b2:71:da:7d:02:d4:18:
1e:60:07:4c:7e:93:0c:a8:cb:66:d1:f7:78:64:63:
60:e0:9b:b5:58:81:bf:a7:f8:99:d1:e5:77:5b:3a:
0c:3c:e4:30:74:25:5f:89:85:29:b6:69:a5:9b:8a:
96:c1:49:22:3d:15:1c:17:51:6f:f3:1b:2e:bf:3e:
7c:c8:75:c1:24:4c:37:cd:04:5f:d7:88:53:b9:32:
d2:83:44:e0:f9:a7:e2:f5:7d:e0:ca:ad:be:ad:2d:
29:c4:c1:eb:ba:ff:c2:95:06:58:09:9c:2e:57:7f:
d3:d1:d0:18:ae:3b:f1:77:ba:77:86:67:ef:68:f2:
b5:7d:31:88:2b:94:b1:07:59:aa:ec:65:1d:52:17:
e9:dc:e2:57:3f:72:c4:48:d6:39:28:f5:6e:e2:eb:
97:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4B:36:80:14:1C:E1:D8:3C:62:6F:8C:25:9B:CB:42:E5:56:0E:12
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/wEs2gBQc4dg8Ym-MJZvLQuVWDhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.247.32.0/21
185.21.160.0/22
IPv6:
2a02:db8::/32
Signature Algorithm: sha256WithRSAEncryption
51:25:e7:d0:5c:de:4a:41:9a:d0:51:ef:62:12:ea:81:e5:5a:
83:18:e8:ff:65:09:c1:bc:a5:ad:25:2b:90:ab:a1:e8:a7:e7:
24:ec:02:9b:e9:1c:b6:ab:10:6d:b4:ff:1b:e9:96:52:11:1f:
43:d1:77:1c:05:9e:81:b3:b0:bb:92:5c:59:74:9f:13:e1:4a:
74:44:0c:b8:fe:00:ed:14:17:f2:0a:10:d6:ac:ed:28:12:a4:
f8:5f:ca:5e:c4:7c:0b:87:e9:97:a1:2a:6e:56:f6:27:b3:bf:
5b:d9:ab:91:32:a7:a9:c8:87:55:97:a1:c5:20:68:7d:58:ff:
03:86:94:25:f4:bf:b6:f1:36:37:ef:62:52:da:d2:26:cd:49:
3f:40:33:df:87:b4:d7:52:7d:f7:61:bf:5e:68:c8:a3:88:95:
15:f8:38:1d:8f:df:7a:30:10:54:6c:c4:81:89:d2:07:dd:77:
2a:84:fc:3f:40:6f:e7:2c:06:6d:b3:d4:30:76:15:c8:9f:ea:
c0:80:5e:ea:38:17:14:a8:02:31:10:b0:f0:19:ac:fe:63:13:
56:27:a3:af:58:ff:50:d8:aa:d9:29:a9:35:1f:fc:aa:31:fe:
8f:5a:37:14:4f:47:1d:32:da:02:60:1f:09:aa:a1:82:7d:d5:
f2:05:4b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:17 2024 by rpki-client on console-ams.rpki-client.org