Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WJWtDO7wNI5itNtyGMsYw1ZnCuE.roa
File: WJWtDO7wNI5itNtyGMsYw1ZnCuE.roa (raw, json)
Hash identifier: n19hKAtBVgze0HA/WKL9L56oq317nlWoZNpwREO/Ym0=
Subject key identifier: 58:95:AD:0C:EE:F0:34:8E:62:B4:DB:72:18:CB:18:C3:56:67:0A:E1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE60F5B9A3DA5EE0137505E8898807D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WJWtDO7wNI5itNtyGMsYw1ZnCuE.roa
Signing time: Sun 01 Jan 2023 10:34:54 +0000
ROA not before: Sun 01 Jan 2023 10:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 5.253.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0f:5b:9a:3d:a5:ee:01:37:50:5e:88:98:80:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5895ad0ceef0348e62b4db7218cb18c356670ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:69:08:c8:f6:3e:03:48:91:41:b2:02:ad:
3b:75:e7:58:16:c1:96:ac:29:0a:4d:90:b5:12:a6:
04:50:70:61:e4:b1:4f:e7:ad:85:d8:3e:09:44:75:
31:3f:50:68:ae:bc:21:bd:02:d2:e5:02:b0:17:e8:
a4:c1:b0:4d:f8:c9:2b:01:78:d4:ed:83:08:43:07:
e4:ee:3c:24:35:5d:c8:a9:4c:0d:37:92:64:a8:88:
1a:f3:d0:56:fb:98:68:fa:9f:0e:79:01:79:dc:54:
03:f4:d0:12:ec:bd:01:d8:48:82:b8:0e:8f:43:ab:
8d:af:1a:3e:b5:3f:9e:b8:e0:f5:ce:07:49:25:61:
95:cb:95:84:eb:84:18:c9:da:8c:62:c2:51:13:18:
00:22:f5:74:8f:02:50:ba:19:60:8d:97:8a:78:3d:
3d:ca:54:77:3c:50:88:ee:e9:e3:70:e5:e3:35:95:
e6:00:a9:e3:7d:ba:2d:ec:d2:3c:a5:9e:c3:d0:ea:
26:4c:e7:9f:a4:7e:47:1f:05:6d:45:35:a9:7c:7b:
8b:5f:95:0f:0e:e4:0e:ef:94:de:5e:75:08:c5:07:
b3:30:56:ee:10:e4:be:10:c0:6c:3c:61:a4:ea:61:
fd:a1:fd:57:cf:4a:c7:8d:ef:5a:27:2e:30:9f:5e:
ec:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:95:AD:0C:EE:F0:34:8E:62:B4:DB:72:18:CB:18:C3:56:67:0A:E1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WJWtDO7wNI5itNtyGMsYw1ZnCuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.247.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7b:d8:9d:4a:80:3f:92:fb:f4:1a:47:98:ed:2b:72:14:06:
56:90:35:2e:4f:cc:c8:a7:1b:5c:45:2d:e5:f4:41:6b:97:3e:
25:7d:d3:e5:79:ed:2c:54:25:bb:f0:66:98:ae:94:fa:a2:89:
5f:74:f6:f4:04:5b:5c:84:d7:ee:15:e5:7b:ed:46:95:3d:5f:
97:c2:81:e5:fc:41:6e:6b:2e:5e:62:5b:c2:da:cf:db:aa:c3:
5f:78:50:4d:25:54:0c:58:46:0c:97:bb:dd:be:ed:e2:a8:c9:
52:dc:94:c0:ed:26:4e:f9:55:2a:58:bd:90:7f:23:ca:97:ca:
e2:8d:27:4c:cc:64:bb:17:41:86:3b:c8:0b:8d:f0:bd:a2:db:
4a:77:07:9c:3f:b9:2c:97:aa:32:c3:c4:3e:85:fa:79:b6:90:
1a:6b:01:2d:0d:30:94:b5:6c:ba:51:46:63:f3:7e:bb:e2:3c:
13:6b:f8:5e:ef:61:ab:78:c6:f5:e4:52:5f:03:0c:51:03:a7:
64:be:fa:d0:e6:ac:52:e3:ae:73:18:26:6a:d3:00:58:ef:a5:
14:23:07:1e:07:ef:0d:38:94:d9:1e:f9:e6:6f:b6:bc:24:0b:
27:3d:88:c2:21:0c:a9:60:be:a7:3d:6c:13:8f:2f:82:57:f7:
a4:b7:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org