Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/wtisYxzFmTaaRu4zAKbzcIRv-Bk.roa
File: wtisYxzFmTaaRu4zAKbzcIRv-Bk.roa (raw, json)
Hash identifier: x3DYEUxEx1I6CBahDjNJryRoYK9OlYTs17RU/kwsFvc=
Subject key identifier: C2:D8:AC:63:1C:C5:99:36:9A:46:EE:33:00:A6:F3:70:84:6F:F8:19
Certificate issuer: /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial: 018CC795400882E2B5CCCFA6953461BE66FD
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/wtisYxzFmTaaRu4zAKbzcIRv-Bk.roa
Signing time: Tue 02 Jan 2024 00:31:36 +0000
ROA not before: Tue 02 Jan 2024 00:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202098
IP address blocks: 158.47.224.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 18 Mar 2024 14:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:40:08:82:e2:b5:cc:cf:a6:95:34:61:be:66:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Validity
Not Before: Jan 2 00:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d8ac631cc599369a46ee3300a6f370846ff819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:eb:63:19:dc:fc:97:8d:c3:ab:a0:09:e1:28:
7e:5e:dc:5a:ae:29:e2:8d:5d:5e:39:77:d4:8b:02:
a0:7a:fe:cc:4b:ab:b8:72:f7:74:41:f0:b4:b6:a5:
40:32:f7:df:3b:ca:cb:91:b3:1d:f5:72:85:96:4d:
6e:a2:29:97:62:23:e6:2c:9d:b1:d5:be:e9:c9:17:
64:11:c7:75:46:50:e2:19:a7:4b:59:e0:c4:44:8f:
3d:ee:3d:1f:bc:8d:cc:ad:4c:26:15:8b:b3:f3:6b:
87:2d:18:1a:66:77:23:4a:1e:8b:80:4d:44:7e:16:
d3:02:67:db:27:d1:dc:ab:b9:5c:32:e0:93:67:dc:
f1:24:b3:4c:a1:8b:a8:76:18:3a:4b:b4:f8:49:d3:
59:fd:6e:83:cd:5e:c3:63:0c:37:3e:fd:d5:e5:0e:
01:0b:8c:61:c0:6b:e6:4b:2c:3d:17:11:34:e8:70:
a2:3e:0b:3a:57:ea:fc:9b:d4:53:60:c0:c2:c6:03:
08:dd:ff:d5:5b:3f:25:29:5f:7e:cb:20:69:c1:35:
b1:fd:42:2d:d9:e6:83:4f:44:3e:90:57:44:a3:c0:
7e:9c:5d:90:be:37:66:89:bb:53:cd:25:3d:38:d7:
42:84:6d:19:10:20:a1:4d:a2:a9:a2:91:3e:e7:41:
12:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:AC:63:1C:C5:99:36:9A:46:EE:33:00:A6:F3:70:84:6F:F8:19
X509v3 Authority Key Identifier:
keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/wtisYxzFmTaaRu4zAKbzcIRv-Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.47.224.0/19
Signature Algorithm: sha256WithRSAEncryption
8e:12:25:ee:a3:4c:44:1b:0c:06:9d:05:67:70:b4:67:54:19:
88:7e:cc:59:8b:00:98:35:72:f8:6e:99:67:6f:a4:22:bc:fb:
33:9d:56:89:7f:ae:5c:dc:cd:90:39:2f:98:82:d3:18:3d:d9:
12:8d:e7:2f:b8:34:dc:81:68:b9:6b:8d:d1:ca:04:fa:f5:5a:
99:b0:cf:a5:db:e5:bc:41:71:35:b8:37:1c:22:db:f1:72:c7:
bb:21:80:c3:16:21:f5:cf:5b:80:f4:92:ac:34:90:38:6f:0f:
4d:9d:87:6e:ef:2c:a5:33:5b:dc:4a:c2:60:9c:90:93:79:af:
fd:8f:de:90:00:cf:26:b3:45:9a:dc:b2:7f:b3:f3:ff:01:6b:
21:1e:93:57:d3:16:e2:5f:7c:63:03:12:a6:01:82:6f:cc:92:
a8:ae:57:fa:a3:b9:32:e8:16:4c:b9:39:08:22:af:3c:a7:03:
bf:32:0d:7e:70:a9:fe:25:68:ae:51:f6:40:7f:e0:da:9c:6e:
19:fd:1c:a9:79:79:f7:8c:2a:ae:09:b6:30:ba:bb:ab:b9:3f:
80:45:20:f1:3f:f1:62:1a:4d:9a:7d:0e:59:dd:b9:13:10:e6:
f5:a5:c4:de:91:dc:3d:86:2b:b3:8c:ba:32:da:00:9e:c0:6d:
4c:77:a8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:29 2024 by rpki-client on console-fra.rpki-client.org