Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WPLgwf-wftKiHgC2ySRbpOjWbtI.roa
File: WPLgwf-wftKiHgC2ySRbpOjWbtI.roa (raw, json)
Hash identifier: QEFZxXmO/nD0C6T6fWFykVkr7KPUW0i/EE2EKFMPsyc=
Subject key identifier: 58:F2:E0:C1:FF:B0:7E:D2:A2:1E:00:B6:C9:24:5B:A4:E8:D6:6E:D2
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0188B9FC0DBE37026A730EBDFC5F44A85CFD
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WPLgwf-wftKiHgC2ySRbpOjWbtI.roa
Signing time: Wed 14 Jun 2023 12:58:03 +0000
ROA not before: Wed 14 Jun 2023 12:58:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 195.133.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:fc:0d:be:37:02:6a:73:0e:bd:fc:5f:44:a8:5c:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 14 12:58:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58f2e0c1ffb07ed2a21e00b6c9245ba4e8d66ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:32:68:2b:82:1e:bc:03:cb:21:f1:e6:84:76:
43:2b:8c:d1:8c:7e:a4:56:d6:67:ea:53:34:1a:6e:
73:db:2f:ce:06:a4:fa:9c:08:f8:e7:d5:e2:da:f7:
9f:56:4a:17:48:04:9a:bd:9c:24:53:7f:70:0e:b5:
d9:ae:a6:05:56:c4:aa:dd:aa:77:00:d3:81:d5:a5:
77:9f:57:99:19:0c:c0:48:19:8c:33:2a:fc:2e:61:
f0:4c:f5:33:a9:1e:55:64:39:93:4f:4f:5c:a9:66:
0e:88:71:d0:7c:cd:10:d0:19:e5:1f:74:2c:cc:66:
91:82:b5:d2:0b:05:a1:9e:21:48:ab:09:e9:4a:98:
4e:a1:b9:b4:ba:5e:43:54:36:21:ff:74:3d:d9:00:
0f:c3:9c:ab:ab:71:b7:07:d5:73:80:27:b4:89:53:
76:2c:25:68:4d:bb:cd:c2:97:4b:ce:66:46:5f:91:
47:0d:09:a9:e7:99:a0:73:d0:74:94:15:e6:e1:60:
cf:c3:cc:50:68:34:1a:b7:12:6b:93:32:91:a0:c2:
aa:27:cc:6a:d0:81:81:40:cb:35:90:f1:47:29:4d:
48:c3:bc:0f:37:b6:2b:e3:fe:1c:a3:fa:6e:53:08:
61:90:bc:d1:d8:bc:67:48:fa:3e:d5:74:d5:1f:c6:
17:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F2:E0:C1:FF:B0:7E:D2:A2:1E:00:B6:C9:24:5B:A4:E8:D6:6E:D2
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WPLgwf-wftKiHgC2ySRbpOjWbtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.81.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:0b:b1:a6:d2:14:62:dc:ba:38:96:50:06:82:8a:ab:3a:41:
f4:69:96:a1:6e:79:9d:64:3f:56:05:84:81:70:f9:ad:1b:15:
84:03:74:6e:da:e5:bf:17:b9:f4:41:69:e9:f8:cc:7e:84:23:
f7:3f:a3:5b:07:ed:0b:87:5a:79:fd:40:64:f5:e6:cd:0e:12:
c0:90:3a:0f:fb:ad:20:6a:13:fb:32:12:6e:36:ac:65:8e:e8:
f7:a2:89:66:c7:f4:ab:16:70:a6:64:1e:9d:26:07:e5:c2:f7:
2b:9b:54:80:71:61:a4:f4:e7:f5:6a:50:e3:f4:29:34:ec:90:
f9:1b:02:a2:8d:65:15:1c:58:ed:f0:ac:41:e3:0d:8c:66:a9:
ef:22:97:a9:b5:9e:03:dc:ec:38:25:07:a0:35:29:df:3a:11:
38:ab:d9:d3:77:33:a4:94:7a:6b:9a:79:40:80:94:fb:0c:1e:
d0:b7:57:70:f8:30:ff:d5:d4:9c:b7:a6:be:04:e3:c8:f5:f6:
9b:a1:54:8e:87:8f:e4:ed:9e:03:5f:94:be:ec:e0:31:c9:55:
75:65:98:08:ef:c2:40:ac:d0:80:3c:75:7b:96:71:04:73:5f:
d1:ab:a5:5e:97:b6:61:2a:41:8f:ca:57:9c:d0:50:e8:7b:0c:
e4:2d:72:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org