Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Wa3YW-6gOxcVJyr7nmVYTGdeYzg.roa
File: Wa3YW-6gOxcVJyr7nmVYTGdeYzg.roa (raw, json)
Hash identifier: tVZv19NexZcI8v8v67T/69ExAPvi3A/5t/cZYP8EufA=
Subject key identifier: 59:AD:D8:5B:EE:A0:3B:17:15:27:2A:FB:9E:65:58:4C:67:5E:63:38
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 018570D5474DCB92B05C0B69F9B7BE60631F
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Wa3YW-6gOxcVJyr7nmVYTGdeYzg.roa
Signing time: Mon 02 Jan 2023 04:55:03 +0000
ROA not before: Mon 02 Jan 2023 04:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48037
IP address blocks: 144.43.192.0/19 maxlen: 24
144.43.0.0/17 maxlen: 24
144.43.224.0/20 maxlen: 24
144.43.0.0/16 maxlen: 24
144.43.128.0/18 maxlen: 24
144.43.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:47:4d:cb:92:b0:5c:0b:69:f9:b7:be:60:63:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 2 04:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59add85beea03b1715272afb9e65584c675e6338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c7:ec:c9:05:d8:31:ff:63:b0:2c:0b:67:dc:
c5:00:e2:1c:9d:59:45:bf:ed:5d:d4:bd:6e:6d:38:
cd:4b:d7:f4:71:c0:0b:e3:78:f5:72:65:ea:e7:5f:
3d:73:43:b5:eb:d2:0d:2c:37:a2:26:af:2c:2e:88:
97:99:60:15:1f:35:77:4e:69:26:2a:4d:2c:d1:97:
5c:c8:1d:8b:f7:d1:46:80:ce:de:46:1f:e2:70:67:
a8:0d:46:14:2b:6f:79:a7:35:d3:05:23:7a:a3:ee:
72:63:6c:ba:57:d9:75:06:d6:c9:35:63:b3:73:1a:
97:68:0e:f4:8b:6d:89:d5:77:8b:ef:ca:3c:fa:8f:
2a:0a:51:c6:47:4b:95:58:47:1a:53:63:92:f2:25:
51:1d:c5:eb:4f:3f:ed:7d:b4:ea:9e:a7:36:6a:1b:
f3:de:7f:f0:c1:23:2e:11:42:e8:1d:2c:9f:b5:e4:
42:ca:ec:16:47:ee:46:32:95:f2:3e:ab:81:d4:4a:
91:28:e3:c0:57:2a:3e:e3:36:2e:4e:53:57:68:d3:
cb:46:fa:04:87:da:bb:a3:d7:6b:b6:83:7e:7d:4c:
eb:ea:04:aa:7a:4e:3d:2d:0f:09:5d:c0:b4:a7:a4:
20:63:e8:52:8d:49:ea:59:86:2b:86:e5:83:19:e5:
66:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:D8:5B:EE:A0:3B:17:15:27:2A:FB:9E:65:58:4C:67:5E:63:38
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/Wa3YW-6gOxcVJyr7nmVYTGdeYzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.43.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:93:c8:0c:80:df:46:ab:8a:88:3d:d5:2c:0b:0f:b5:2f:c0:
67:49:8d:57:fb:17:46:72:68:33:a9:90:4d:4a:36:07:83:08:
59:04:a6:69:f5:3b:ca:2d:55:b3:9a:d5:7a:44:e7:32:dd:38:
01:a8:0d:68:a4:b1:3b:92:74:04:c1:98:87:e2:ca:04:b5:99:
a2:08:3f:ed:fd:74:5d:64:c2:b6:c1:b4:a2:41:65:25:8d:37:
d6:57:83:8c:38:ac:31:e4:ca:66:89:1d:3b:0b:d8:b7:a3:4c:
d3:7b:4f:9d:63:f4:7e:8d:97:99:ff:f6:89:e9:07:f0:e7:5f:
5b:49:f1:3e:d1:86:87:31:39:01:20:18:25:ca:b7:85:1c:5c:
76:f8:01:36:1f:46:aa:4b:24:cf:0c:82:af:2b:10:b3:11:f6:
00:0b:0e:72:72:89:32:cb:0a:09:58:5f:69:a3:d1:40:74:7d:
de:1a:47:98:cf:cd:00:cc:33:61:c5:36:6b:63:30:ec:84:a1:
9e:3c:51:e8:e2:db:92:d7:57:03:03:bf:25:b2:87:e7:ce:b3:
e2:24:85:2b:3c:45:6d:43:8a:2d:e0:eb:fd:ac:21:7d:f6:af:
34:cc:c5:5e:45:e6:a4:bf:f7:f0:db:31:d4:a5:45:55:e8:6c:
c7:6c:22:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:02 2024 by rpki-client on console-ams.rpki-client.org