Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WH8OwFs-VBb6vPQigEHsbeT1kNk.roa
File: WH8OwFs-VBb6vPQigEHsbeT1kNk.roa (raw, json)
Hash identifier: HZRkk+MwIJi7ETMpC5UwYLWjlyjkEghS8Jhgp7FjkVE=
Subject key identifier: 58:7F:0E:C0:5B:3E:54:16:FA:BC:F4:22:80:41:EC:6D:E4:F5:90:D9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01856F670EA6614644E0DF7E0C2283515114
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WH8OwFs-VBb6vPQigEHsbeT1kNk.roa
Signing time: Sun 01 Jan 2023 22:15:03 +0000
ROA not before: Sun 01 Jan 2023 22:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 212.192.31.0/24 maxlen: 24
194.87.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:0e:a6:61:46:44:e0:df:7e:0c:22:83:51:51:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 1 22:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=587f0ec05b3e5416fabcf4228041ec6de4f590d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:27:85:3f:93:0a:91:5d:5f:b9:79:3a:c1:a9:
d5:a9:d1:97:bd:0c:6f:2f:6a:1f:6e:0e:80:6b:e4:
d3:d6:a2:6a:44:6c:3b:c5:e1:9d:91:42:b5:2b:ee:
ec:f9:83:32:45:5d:7f:a5:c6:fc:0b:f9:8b:a2:78:
b5:ce:b1:79:ea:3f:cb:13:e2:a4:c7:10:5b:fc:1e:
f2:39:e9:19:0d:18:e6:e9:5f:cf:3e:73:c2:ff:8f:
f4:58:18:c6:03:98:ba:d2:f8:ed:1c:f1:ef:a6:d1:
11:49:f7:cb:67:93:d5:88:f7:82:d7:58:a3:1c:8f:
c4:67:ac:7b:c6:6e:81:71:80:f5:ea:d8:33:8e:f7:
c4:77:c1:41:7c:0c:7a:20:4c:40:38:d4:48:65:41:
eb:74:8b:8e:de:ec:03:bc:aa:c7:50:90:22:b8:a6:
82:ee:ec:ff:f7:60:16:37:fc:e3:49:9a:7d:81:29:
60:21:3c:0e:0b:1b:f5:57:48:84:e4:a6:d5:2f:60:
43:2e:17:16:11:11:d9:0c:28:19:b5:f1:84:bc:fe:
27:95:18:b5:35:fd:07:5f:1a:09:75:d5:3a:07:73:
84:fc:0b:f2:d2:2c:0d:50:26:34:df:88:a2:29:c0:
85:61:5b:a5:53:3d:de:d9:a8:f8:e6:de:3c:b8:f3:
37:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:7F:0E:C0:5B:3E:54:16:FA:BC:F4:22:80:41:EC:6D:E4:F5:90:D9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WH8OwFs-VBb6vPQigEHsbeT1kNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.199.0/24
212.192.31.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b5:a3:6a:bb:3f:7e:48:51:eb:3b:6e:38:38:af:87:ec:a9:
53:37:68:13:5f:61:37:fd:fb:42:b3:85:0c:ef:06:6a:f4:e0:
7a:cb:15:5d:b2:5e:b8:be:09:a8:2f:66:f8:2f:98:df:f7:52:
ca:8f:0c:81:02:09:35:2b:c5:30:fe:cb:6c:76:77:0f:79:36:
85:c3:24:75:3e:4b:d1:cf:af:c8:0f:06:43:7d:e5:09:36:96:
a3:f3:22:a7:be:af:b4:b5:d6:11:f1:89:26:fc:be:1d:84:a5:
ca:95:84:8e:2f:4a:4a:e8:70:b3:2d:6b:0f:eb:c1:1e:b7:28:
e1:ee:f8:8b:f2:e2:70:f9:25:64:96:c2:21:8e:56:a1:a4:ab:
ba:83:92:1c:84:dd:a3:ec:7a:16:68:fd:1e:ee:ba:e4:3b:a2:
b2:35:2c:4f:83:9e:e2:50:cc:0b:24:4c:4a:3c:aa:91:6e:4e:
e6:5d:a2:fa:22:43:68:49:c8:bd:51:d8:93:0a:c0:a8:33:78:
4c:51:28:ee:c5:e9:6a:47:66:97:52:67:94:f6:2b:a0:45:1f:
c3:e1:6a:4d:95:99:db:90:ba:03:3e:bc:eb:e3:ee:15:cb:ef:
4d:a3:ca:23:fc:dd:30:aa:a1:5c:8c:d3:84:ab:13:65:4f:d3:
69:01:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org