Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/1W4QINTasTnKdshTOUSUgQFs9tQ.roa
File: 1W4QINTasTnKdshTOUSUgQFs9tQ.roa (raw, json)
Hash identifier: UL7KvxElGw7zWZ5Gq1CAR+BZAM2RyLGdyxA92sjB7ww=
Subject key identifier: D5:6E:10:20:D4:DA:B1:39:CA:76:C8:53:39:44:94:81:01:6C:F6:D4
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018A87BA556C0A0549A0044E34769617E619
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/1W4QINTasTnKdshTOUSUgQFs9tQ.roa
Signing time: Tue 12 Sep 2023 04:50:50 +0000
ROA not before: Tue 12 Sep 2023 04:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 89.191.224.0/24 maxlen: 24
141.98.232.0/24 maxlen: 24
194.31.172.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:87:ba:55:6c:0a:05:49:a0:04:4e:34:76:96:17:e6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Sep 12 04:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d56e1020d4dab139ca76c85339449481016cf6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:3f:8d:7d:1b:24:bd:98:76:74:99:19:2c:1d:
17:d1:e6:69:74:81:34:af:03:e8:41:d0:b6:0d:2c:
9a:20:dd:35:27:a3:00:f3:bc:87:8a:70:a1:00:85:
87:34:eb:4c:3e:1c:63:4f:65:60:d5:7c:ef:be:a9:
8e:5d:1c:50:bf:92:24:aa:56:2d:c9:2b:78:0f:b7:
b7:4a:bf:31:7e:0e:69:be:40:46:02:2d:41:fc:7b:
2b:0b:2f:9c:f5:7b:81:ad:9e:62:eb:2f:3b:55:e3:
ac:19:b3:d6:b9:32:8e:4f:0d:8d:7f:a4:4c:7a:9a:
b9:c6:ab:da:3f:1b:93:92:36:34:9d:b7:2d:f6:9e:
51:c2:44:55:d8:37:d5:21:4f:0c:07:d0:1b:d6:ff:
e8:4a:4a:b7:c4:50:62:73:c5:63:2e:63:c4:63:58:
0e:73:78:01:b5:a7:a0:6b:bb:6e:00:df:62:8c:79:
de:06:1a:26:92:cf:6b:b4:57:1c:3d:be:cf:01:c0:
4e:97:77:bb:5a:3e:55:02:36:37:e1:4e:7b:b3:57:
2f:12:97:39:f7:84:df:da:cb:ec:91:57:47:9a:5b:
86:89:f6:f6:40:6d:67:b3:34:e9:37:9a:f5:88:a1:
16:2c:74:bd:1e:03:01:ec:b4:03:f3:8e:7b:3e:a3:
2d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6E:10:20:D4:DA:B1:39:CA:76:C8:53:39:44:94:81:01:6C:F6:D4
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/1W4QINTasTnKdshTOUSUgQFs9tQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.191.224.0/24
141.98.232.0/24
194.31.172.0/24
Signature Algorithm: sha256WithRSAEncryption
76:01:f9:5b:f5:55:be:1d:09:d3:90:04:25:d6:c2:52:c9:22:
59:66:0e:24:05:cd:e0:22:83:21:07:6b:10:f4:9e:6b:38:be:
6c:1c:c2:0c:c4:85:69:a3:ad:e2:e3:0c:66:f4:3b:1c:35:07:
82:5a:f2:48:dc:95:0a:68:b8:f3:0c:24:ba:4f:b2:e0:50:89:
23:3e:0c:28:7e:0e:15:bf:c0:0d:3c:46:00:a2:0e:c3:c0:d6:
0b:cb:6d:75:30:73:8d:60:78:dc:77:72:60:b1:3b:f0:14:ee:
2c:25:2f:44:a7:e3:ed:81:84:e6:10:43:7b:c5:a4:f0:7c:f0:
0a:ea:95:d4:d7:6e:be:4d:02:fe:53:e7:47:82:94:df:01:0d:
50:10:cb:41:f0:e1:8e:ce:af:fe:f3:32:98:eb:4b:c6:d6:6b:
35:ec:6c:ef:7d:1d:ea:61:ba:94:ac:82:79:da:78:a7:ed:e3:
f2:c6:07:32:be:36:09:48:96:58:6e:5a:fb:3e:22:6a:74:c1:
e1:de:77:d9:f6:f0:01:f8:b9:b4:32:33:54:69:96:57:e6:7d:
87:6f:9b:d2:87:c0:b7:94:b7:e6:b7:78:e1:4d:a2:77:c2:70:
49:66:33:ef:c6:7e:f1:4d:18:f0:cd:d6:e4:a8:cb:33:1c:73:
b4:95:c0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:36 2024 by rpki-client on console-ams.rpki-client.org