Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WUxITDdQjSUYEeyXSgGokBHMGm8.roa
File: WUxITDdQjSUYEeyXSgGokBHMGm8.roa (raw, json)
Hash identifier: Sbu0/ZLSXtIUYW/GNyLaMZG+JBMq+LbWxd5ZF6NA0c8=
Subject key identifier: 59:4C:48:4C:37:50:8D:25:18:11:EC:97:4A:01:A8:90:11:CC:1A:6F
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018C4DB5FAD7634C489DAC7C072AA80FF520
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WUxITDdQjSUYEeyXSgGokBHMGm8.roa
Signing time: Sat 09 Dec 2023 08:33:41 +0000
ROA not before: Sat 09 Dec 2023 08:33:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211849
IP address blocks: 194.87.32.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4d:b5:fa:d7:63:4c:48:9d:ac:7c:07:2a:a8:0f:f5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 9 08:33:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=594c484c37508d251811ec974a01a89011cc1a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:22:0e:5a:bf:82:82:9b:84:5d:50:f1:73:
4a:6f:78:b6:7e:7a:28:a1:70:6b:c1:de:26:3b:a3:
1b:2e:c2:16:35:07:18:f2:7b:95:90:63:96:82:4f:
1d:39:90:da:79:01:49:f8:d9:80:e4:0f:2e:ee:cf:
a9:07:a7:d0:ad:b0:35:1e:6f:8a:fa:1e:d7:53:35:
e6:9e:c0:eb:24:4f:13:dd:dd:80:46:87:d9:e2:15:
dd:c3:25:5c:a7:2f:2d:1f:c8:84:08:f1:19:72:d4:
7f:54:2a:93:44:6c:2f:54:27:31:86:26:8e:73:c9:
cb:da:f6:ed:25:3d:58:c8:97:d2:64:4d:73:11:6a:
ad:44:12:f2:2c:57:0a:e4:fd:0e:cd:56:18:cb:fe:
63:ed:57:17:36:4c:f1:f0:b2:c7:06:12:3f:c6:7f:
1b:0f:be:b5:de:97:3f:f1:5a:76:9c:ca:b2:66:fe:
69:87:48:e2:7e:97:7c:7b:c1:3c:58:4c:10:42:c6:
68:7c:ee:1c:9a:53:5f:25:c8:2f:c3:d0:c1:f1:e1:
fe:12:90:3e:a7:c2:d3:78:a3:69:de:63:b7:cf:6a:
c2:56:24:f7:82:59:11:8a:a5:10:62:8a:bd:37:52:
4e:9a:d0:ca:36:bb:f0:4a:f7:d1:04:a6:58:18:4c:
a3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:48:4C:37:50:8D:25:18:11:EC:97:4A:01:A8:90:11:CC:1A:6F
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WUxITDdQjSUYEeyXSgGokBHMGm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.32.0/24
Signature Algorithm: sha256WithRSAEncryption
54:26:bd:18:63:c2:98:9a:1a:f9:62:6a:26:26:5f:e9:e6:35:
1f:9a:ad:e8:83:ec:80:e4:04:b5:4d:e8:24:12:15:0e:dc:55:
51:4a:15:c4:7f:62:3c:8a:88:bb:8a:95:d5:91:1d:cb:35:d1:
c6:e0:97:a7:25:60:76:fc:da:0a:58:3e:f8:45:1a:0c:d2:45:
ac:5a:85:8d:44:13:43:71:83:29:45:57:49:4a:fc:71:0c:b1:
36:e9:14:3d:2d:11:6c:bb:82:49:ce:6f:b6:f4:38:96:c2:2f:
cc:30:bd:69:02:d4:6f:49:c0:3d:ab:6b:25:60:b9:71:0b:89:
2e:3b:62:88:36:4b:38:a8:5d:cd:c5:91:84:0c:f0:12:95:4b:
fa:31:16:bf:c5:3c:3a:28:bd:d2:e1:e4:60:63:2b:c1:f6:c3:
63:3b:5f:ef:17:0a:87:b9:fe:cb:ce:5f:4c:8a:a4:ed:11:f9:
03:55:75:81:46:06:a5:81:c6:9f:f1:81:5b:2e:95:44:dd:78:
2f:a8:fa:7e:f0:50:2a:74:f7:3f:91:86:f9:ff:2e:5f:fe:1f:
45:98:be:fc:43:93:d5:f2:05:f2:b9:57:2e:e0:74:14:85:05:
1d:94:2d:fe:d0:55:19:66:fa:ac:98:1b:f5:62:0c:2b:3c:da:
30:c4:51:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 05:03:06 2023 by rpki-client on console-fra.rpki-client.org