Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Wv-TqttVxWmG7xhrkc38wElMebs.roa
File: Wv-TqttVxWmG7xhrkc38wElMebs.roa (raw, json)
Hash identifier: CYDRy57pshZVrxhmzR2OUruH5fuTVNyxeZ3Hre0WJ2Y=
Subject key identifier: 5A:FF:93:AA:DB:55:C5:69:86:EF:18:6B:91:CD:FC:C0:49:4C:79:BB
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1D8F04E1A7589FBF80B983448B764
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Wv-TqttVxWmG7xhrkc38wElMebs.roa
Signing time: Sun 01 Jan 2023 14:34:58 +0000
ROA not before: Sun 01 Jan 2023 14:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209655
IP address blocks: 212.22.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:d8:f0:4e:1a:75:89:fb:f8:0b:98:34:48:b7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aff93aadb55c56986ef186b91cdfcc0494c79bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8d:87:12:a7:5a:94:fa:91:8d:5b:6e:e6:ce:
29:74:2e:89:6d:16:66:59:53:d7:8d:2b:94:c5:70:
fb:68:6e:08:59:5d:94:48:35:c6:b4:e1:74:6a:c6:
6c:e0:b8:9c:61:b6:fe:96:3d:85:2c:6c:bc:79:33:
ad:a7:df:18:49:17:4e:14:d8:13:20:78:53:9b:5c:
83:87:c5:d7:49:bd:78:f7:27:70:e3:9b:fd:f3:5b:
14:da:03:84:c8:36:5e:13:9a:0f:c6:a8:0e:e5:b2:
05:ff:f6:51:a9:cf:9b:64:08:a0:c6:8f:cf:8c:fa:
0d:2f:3d:94:2b:7f:8d:dc:b5:04:e0:9c:9c:dc:e9:
a5:9e:c0:9f:31:33:1c:08:a3:98:da:e1:76:85:9d:
c5:07:5d:bb:f6:d7:a2:84:63:bb:03:bf:55:37:1b:
fb:b3:14:b5:71:1b:92:38:88:04:7a:38:34:f5:5a:
db:58:f8:98:ec:8e:a2:78:4f:48:f0:38:2b:37:83:
d3:2d:a9:44:a6:59:b9:ca:5a:25:1f:20:90:74:60:
de:0d:7d:bc:3d:d1:b2:3f:36:53:0d:3e:68:a1:e1:
28:5c:d9:1c:91:31:1a:76:e7:06:31:03:cc:fd:8b:
45:a3:4f:13:2e:84:17:5c:73:ad:be:5c:ed:d1:4a:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:93:AA:DB:55:C5:69:86:EF:18:6B:91:CD:FC:C0:49:4C:79:BB
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/Wv-TqttVxWmG7xhrkc38wElMebs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.72.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:93:6f:1e:bc:c1:3a:50:1e:52:e6:24:57:1e:4f:b9:c8:7d:
58:1e:63:8e:84:18:2d:b6:09:cc:87:7c:be:de:e1:06:bf:77:
fe:ed:ab:c4:13:05:0e:67:af:1b:d0:56:ba:aa:ef:44:b0:a4:
02:bb:3d:e6:37:02:0a:e8:d9:8e:38:ea:ac:55:d3:2a:8a:53:
80:6b:a8:ac:c3:2c:df:6e:2e:13:3b:9f:d6:67:16:ec:0b:24:
22:e6:51:03:73:0f:fc:7d:32:c6:0d:47:3b:68:d0:e2:7e:91:
1f:e7:01:1a:58:23:41:0c:57:2d:9e:43:48:23:8c:a5:15:b7:
fb:f3:70:a2:f5:1e:a8:c5:b0:dd:45:ba:8d:9f:1f:aa:b2:3a:
e2:76:64:46:18:9a:7c:bc:12:9c:a2:ac:3e:1d:ae:58:12:e4:
fb:f1:87:31:11:6e:93:d4:ea:ad:9f:3c:a5:90:ab:9f:28:7b:
2f:82:ae:63:e9:59:89:f2:28:b6:3c:3f:25:e3:b6:15:8b:e9:
6d:17:8d:4b:28:9c:22:3c:6e:7b:b0:ce:70:73:51:ec:0d:26:
ce:52:ad:a7:75:47:e2:c3:f9:d1:20:8c:6c:07:dc:78:3f:3f:
d5:f6:ab:c4:79:ce:ba:6e:35:b6:98:a2:6f:8c:a6:05:50:a9:
25:b7:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 31 08:18:09 2023 by rpki-client on console-ams.rpki-client.org