Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/WtgS546e7exn4TooT1IrNg3OO_g.roa
File: WtgS546e7exn4TooT1IrNg3OO_g.roa (raw, json)
Hash identifier: nXGSw1/zjTi4+fFMjeekCrYy0sdh1FkBKR19Z86mrT0=
Subject key identifier: 5A:D8:12:E7:8E:9E:ED:EC:67:E1:3A:28:4F:52:2B:36:0D:CE:3B:F8
Certificate issuer: /CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Certificate serial: 01856CE60A4C7600FA3A2D912EFA4C32CAAD
Authority key identifier: 54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/WtgS546e7exn4TooT1IrNg3OO_g.roa
Signing time: Sun 01 Jan 2023 10:34:53 +0000
ROA not before: Sun 01 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203055
IP address blocks: 66.203.124.0/23 maxlen: 24
2a0b:e46:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0a:4c:76:00:fa:3a:2d:91:2e:fa:4c:32:ca:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=541fc54762cfe92d76c2f4c6af8999cbccf6bb67
Validity
Not Before: Jan 1 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ad812e78e9eedec67e13a284f522b360dce3bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:26:33:31:94:92:20:27:8c:5c:41:3a:99:
c2:d1:ff:d9:be:af:27:cf:3a:c9:63:4c:57:0f:21:
ca:ff:57:15:37:92:35:ae:c6:ca:17:93:01:5a:fc:
78:a9:7e:87:0e:31:d4:d9:c6:ba:08:34:70:ef:f6:
85:ba:a3:6f:b3:86:34:36:6f:50:18:94:fb:34:66:
0c:58:66:08:ed:50:36:1b:e7:60:61:0a:7b:1b:13:
f8:f1:3d:1a:22:05:4d:55:f4:1d:61:9d:a7:35:5b:
91:b2:55:4b:36:02:9e:47:5b:d6:db:6a:a5:a7:17:
e4:3c:80:a8:41:e8:c6:2c:3d:5f:5f:1d:a3:ea:78:
d5:d8:8c:d3:6b:33:70:a5:f8:9e:5d:a5:a5:bc:6f:
5e:40:dc:ca:34:d1:43:ea:bf:93:fb:8e:bf:29:50:
72:f0:ba:56:5f:3e:da:9e:86:72:9a:32:31:88:98:
96:6e:10:fb:a7:b6:c8:54:cc:dc:28:d7:98:0a:cc:
22:5c:83:35:88:26:fa:58:76:7f:07:1c:16:78:f6:
23:42:fe:9e:86:ed:79:78:2c:98:28:ad:15:6b:48:
bc:05:1e:e2:4f:a6:2f:26:29:cc:89:2e:de:09:5c:
e8:0a:d7:8b:cf:1f:fd:cd:f4:eb:01:05:68:23:c3:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D8:12:E7:8E:9E:ED:EC:67:E1:3A:28:4F:52:2B:36:0D:CE:3B:F8
X509v3 Authority Key Identifier:
keyid:54:1F:C5:47:62:CF:E9:2D:76:C2:F4:C6:AF:89:99:CB:CC:F6:BB:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_FR2LP6S12wvTGr4mZy8z2u2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/WtgS546e7exn4TooT1IrNg3OO_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ddda5e-feef-4763-88da-8bc825c3a324/1/VB_FR2LP6S12wvTGr4mZy8z2u2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.203.124.0/23
IPv6:
2a0b:e46:1::/48
Signature Algorithm: sha256WithRSAEncryption
aa:02:53:49:73:ee:42:0e:e8:21:77:6e:15:59:ac:d8:0f:ef:
4f:93:b3:be:48:e7:81:f4:e2:56:03:f6:40:df:72:c3:e5:14:
2b:6f:0d:11:31:31:79:6f:84:e7:44:9f:a9:1d:25:1a:3e:ce:
c8:0b:d2:60:b5:df:24:eb:e9:2f:99:37:00:05:5d:04:47:0b:
49:b0:e2:3a:ae:b6:61:09:3f:9f:c8:34:35:b3:08:51:5b:0d:
ab:ad:a4:3b:2c:2c:17:71:94:15:d9:9a:7e:e7:96:e6:96:a2:
09:cf:10:6e:fa:bf:d4:8f:d1:69:73:29:1e:e9:49:ea:c6:52:
d9:9f:06:59:b3:94:76:a3:50:00:12:d6:e7:35:6b:d2:21:f7:
e4:46:a6:89:ee:9b:71:0c:c1:30:98:3a:10:c1:6e:00:cc:1c:
9e:64:b1:d3:76:9f:30:bb:12:7d:8a:b2:c1:1e:72:ae:e2:24:
6f:8d:39:6a:16:8f:2d:5e:37:c6:92:f5:5e:7f:5c:47:6c:ea:
5b:7d:6e:69:5a:41:2a:a7:c7:57:44:5f:0f:db:08:31:2a:44:
2e:f2:f2:52:f8:3b:7b:ff:0b:40:c3:cc:11:84:d7:5f:9c:54:
b5:f9:7e:df:ad:12:cc:2d:3b:c5:e6:b1:df:7e:76:23:91:18:
85:32:44:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:23 2024 by rpki-client on console-fra.rpki-client.org