Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/wyHdF3BtP3HaBvEAmDAdj4AI1-Y.roa
File: wyHdF3BtP3HaBvEAmDAdj4AI1-Y.roa (raw, json)
Hash identifier: ACOXV8Wsil6YmvYFaDRe07dPQcGxHK3a3kEECBvfTg4=
Subject key identifier: C3:21:DD:17:70:6D:3F:71:DA:06:F1:00:98:30:1D:8F:80:08:D7:E6
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 01856BA58607B19A69814316DF3339649ABC
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/wyHdF3BtP3HaBvEAmDAdj4AI1-Y.roa
Signing time: Sun 01 Jan 2023 04:44:47 +0000
ROA not before: Sun 01 Jan 2023 04:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209242
IP address blocks: 193.188.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:a5:86:07:b1:9a:69:81:43:16:df:33:39:64:9a:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jan 1 04:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c321dd17706d3f71da06f10098301d8f8008d7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:8a:5c:b3:a6:66:c5:d2:a9:58:c6:9f:fc:
23:64:49:02:89:09:9b:7f:5b:f7:f3:a9:f0:4e:af:
5c:12:f2:14:56:0e:a6:c5:cf:07:8d:59:82:8d:72:
6d:8c:ea:14:14:e1:ad:74:56:0a:5f:b2:75:27:3d:
40:46:c2:b5:b7:aa:44:80:12:a2:f6:bf:50:a6:2e:
c5:9b:31:3e:00:e9:f3:04:80:5b:c4:b8:20:14:ed:
b1:fd:b0:8a:24:ea:c7:af:ae:09:95:d8:0a:c8:f2:
f4:01:f9:de:c0:1e:50:22:9b:1f:eb:7c:5c:37:20:
8e:c1:ae:9c:76:37:75:c5:ba:14:4a:96:73:3a:03:
f7:46:a7:b1:ba:8d:02:c3:a7:a4:d8:0a:75:af:9e:
eb:db:c2:a6:ce:f4:d0:2d:e7:cc:76:1f:28:79:13:
51:ea:ab:07:d1:35:e3:8e:84:55:ef:6e:8e:cc:cb:
9e:81:56:1b:e3:d3:5c:5d:a3:25:45:31:c7:ef:26:
51:bd:82:9a:47:cd:00:a4:0e:20:06:3b:34:97:7b:
3f:1c:5a:7f:45:bb:ee:26:fc:4b:42:23:e8:7c:e7:
66:d6:5f:aa:d2:b7:fb:64:1f:65:15:51:ed:c2:93:
5f:f0:c2:70:a4:2f:0e:00:01:52:71:98:17:c3:40:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:DD:17:70:6D:3F:71:DA:06:F1:00:98:30:1D:8F:80:08:D7:E6
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/wyHdF3BtP3HaBvEAmDAdj4AI1-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.14.0/24
Signature Algorithm: sha256WithRSAEncryption
61:83:3f:cf:cd:47:1b:04:ae:b0:1f:a8:bb:01:17:81:57:65:
61:ff:6a:79:54:a1:9b:bd:61:34:e2:3d:c7:88:b9:32:5a:97:
5b:bd:a7:7f:2a:71:af:ca:ce:a0:4c:55:d5:bc:33:ff:ec:29:
09:35:79:f8:c3:be:99:82:57:c3:f5:05:7a:3a:b7:06:3d:d5:
be:7b:1a:dc:61:87:b6:82:76:9a:45:49:bd:46:de:f0:dc:f6:
6e:f1:d8:f6:41:69:12:f3:44:40:ad:19:03:b1:66:ef:37:46:
18:f5:af:6d:12:87:9e:ab:2a:89:d2:a8:1c:54:08:34:48:bf:
44:3c:7d:ad:7a:af:ef:15:ca:b2:1d:45:64:a5:12:22:0e:28:
00:7b:5a:8e:16:be:69:fc:4c:e9:60:75:24:b0:1b:4b:b9:60:
63:1e:fc:1e:77:74:4d:c6:4e:57:b2:f5:75:87:7c:5e:01:39:
01:4f:36:60:c7:31:91:63:14:81:cc:05:af:91:65:ff:b5:17:
ed:6e:33:04:b0:09:f0:61:33:86:0a:9b:c0:23:48:29:3a:da:
93:a7:03:fb:e0:5f:4e:33:9e:55:fd:2e:f0:68:95:a2:30:83:
29:e4:15:b3:cc:63:74:9d:7c:a2:35:4c:d9:89:20:32:f8:d7:
69:c1:dc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:03 2024 by rpki-client on console-fra.rpki-client.org