Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WuwkBqNW0_mKRHXQFk-8_uFHxVo.roa
File: WuwkBqNW0_mKRHXQFk-8_uFHxVo.roa (raw, json)
Hash identifier: 61uYDs9OH1Z/uS5d189pM5DsobdXakkSpUIen+jMbDU=
Subject key identifier: 5A:EC:24:06:A3:56:D3:F9:8A:44:75:D0:16:4F:BC:FE:E1:47:C5:5A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018885EB05C42FFAB5461174C275A1129B25
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WuwkBqNW0_mKRHXQFk-8_uFHxVo.roa
Signing time: Sun 04 Jun 2023 10:19:12 +0000
ROA not before: Sun 04 Jun 2023 10:19:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/21 maxlen: 21
213.145.80.0/21 maxlen: 21
2001:41f8::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:85:eb:05:c4:2f:fa:b5:46:11:74:c2:75:a1:12:9b:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 4 10:19:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aec2406a356d3f98a4475d0164fbcfee147c55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:e5:df:5a:af:90:2e:c2:66:cb:b8:f0:62:
4f:86:12:de:f2:b0:f5:36:50:8a:11:d8:96:36:55:
4f:62:0b:d5:1a:a8:3a:50:cf:01:f2:53:bf:2d:02:
0f:a0:7f:5e:b1:a7:f4:77:2c:c9:56:c0:af:f0:d0:
fd:eb:64:71:24:83:98:9d:85:40:3d:fd:61:6d:e0:
08:9d:cc:5f:23:f2:fc:48:aa:19:b6:65:c2:c6:28:
a3:f9:84:ca:58:f2:0b:c8:bf:a5:33:8e:6a:47:65:
23:f8:e2:38:a9:43:93:d1:e2:ee:46:5e:b3:b4:19:
62:a6:0c:13:8f:0a:8d:41:72:bd:e9:3a:85:07:74:
39:12:81:81:a5:d1:e7:39:3b:0a:e3:ee:52:aa:e8:
2f:be:a6:58:09:82:53:ed:00:75:29:66:88:c4:d5:
8c:a3:78:c3:4d:2e:f8:35:64:de:ed:27:94:ed:2d:
22:e2:d4:fa:46:e4:7f:29:41:e3:13:c4:c7:aa:5d:
7c:cd:9b:33:c4:dd:c3:d4:13:0c:e1:80:4c:70:02:
c6:ed:70:70:54:f6:4e:af:94:d5:03:2b:2d:78:12:
51:51:ab:64:d4:f8:a1:1c:c2:6f:fe:80:7a:83:d5:
38:ac:48:19:31:a4:d3:6e:15:53:69:66:5f:26:40:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:24:06:A3:56:D3:F9:8A:44:75:D0:16:4F:BC:FE:E1:47:C5:5A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/WuwkBqNW0_mKRHXQFk-8_uFHxVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.64.0/21
213.145.80.0/21
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
6f:8e:c1:5e:23:36:61:f2:54:6b:cf:a6:52:4f:e5:8a:d3:df:
55:08:1b:c2:b8:3f:1e:96:46:50:ad:23:86:68:c7:40:99:c2:
ba:f4:91:e9:78:08:4c:b3:90:6a:f0:9c:35:f5:71:3a:0c:18:
f9:58:31:da:b9:99:3d:72:f0:64:6d:1b:87:cf:3b:97:eb:2f:
21:0f:9b:b6:34:fb:8d:35:23:ab:d8:a9:91:c4:63:42:71:54:
31:1c:29:c8:4c:5f:2c:37:91:08:81:b7:01:29:91:b8:e4:ff:
08:01:32:b1:ea:79:4f:ce:91:35:8e:99:9f:4f:14:4b:bc:ff:
85:5e:50:56:fe:1b:78:67:b5:f7:f5:61:28:26:5a:33:bf:23:
35:4e:5d:8d:da:75:59:67:99:5e:f4:7d:20:55:55:18:c8:55:
ba:6c:ce:32:7b:b3:d3:65:eb:50:6c:d9:c8:68:7c:44:3b:c0:
4b:08:6e:6b:25:3d:71:aa:55:7d:71:dc:ec:ae:ef:49:ff:79:
5f:53:2a:d8:ed:0a:33:9a:82:49:ea:69:ce:09:e4:ff:42:38:
f4:b4:54:ed:5c:e5:53:5c:3e:0c:84:0b:be:d6:72:8c:8f:5d:
39:35:24:4e:b7:8b:e0:8a:3a:6c:de:6b:08:27:ec:eb:51:9f:
b4:b7:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org