Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WxtLLMGZX5Am_Kz5voQg9DonNws.roa
File: WxtLLMGZX5Am_Kz5voQg9DonNws.roa (raw, json)
Hash identifier: tmHGrc/oVnLv9kutaNXtiADUhBP2S4uAOZIO7fpwzr4=
Subject key identifier: 5B:1B:4B:2C:C1:99:5F:90:26:FC:AC:F9:BE:84:20:F4:3A:27:37:0B
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01866EE57911A60A02399026C38DE2B7DEC1
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WxtLLMGZX5Am_Kz5voQg9DonNws.roa
Signing time: Mon 20 Feb 2023 12:56:17 +0000
ROA not before: Mon 20 Feb 2023 12:56:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29066
IP address blocks: 194.87.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:e5:79:11:a6:0a:02:39:90:26:c3:8d:e2:b7:de:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 20 12:56:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b1b4b2cc1995f9026fcacf9be8420f43a27370b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bc:99:a6:9f:10:04:8c:7f:74:fe:0d:9f:41:
4c:fd:0a:07:30:91:7b:d5:f7:ea:04:5c:23:40:c7:
82:6f:6b:7f:c6:7f:77:ee:00:3b:8e:c2:44:80:74:
6a:e1:13:bb:a2:57:54:18:a5:3a:ff:f5:6b:55:81:
fd:af:96:fb:f5:ed:c9:ae:ae:c3:d3:23:4d:02:17:
13:85:7a:7c:02:3c:0e:16:7d:cb:db:8f:cb:f1:63:
42:c3:30:86:9d:77:81:e6:f8:9a:ef:ec:9d:18:ce:
9b:22:a7:9b:2c:55:ae:b6:5a:7d:e9:d5:20:b4:8f:
f1:6c:98:e6:b8:3b:d2:10:d5:d0:b5:0f:ce:6b:12:
79:d9:c5:47:6e:1b:bb:90:5a:0c:d6:c7:4e:77:41:
c2:c1:b1:0e:56:b3:fa:27:7a:fc:09:4e:08:e8:b6:
d2:81:b7:d1:12:e7:37:b2:17:69:95:b9:17:09:b3:
d6:35:eb:cd:79:8b:72:cf:05:4f:76:68:52:e0:5f:
74:7f:cb:4c:28:eb:e4:c2:82:83:09:b8:10:c9:dd:
45:3d:d0:a9:ea:28:01:2a:73:76:8e:ae:ab:dc:b1:
a6:f7:93:af:da:54:0e:91:7e:7f:b5:b7:6c:d4:b3:
66:8d:68:c5:d4:68:62:7d:c6:dd:41:4b:b7:a3:25:
ea:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:4B:2C:C1:99:5F:90:26:FC:AC:F9:BE:84:20:F4:3A:27:37:0B
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WxtLLMGZX5Am_Kz5voQg9DonNws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.165.0/24
Signature Algorithm: sha256WithRSAEncryption
89:03:b9:89:ed:24:7b:6e:b8:c3:e7:ad:da:81:63:bd:4c:69:
a5:73:25:8c:a6:04:57:cb:3f:cd:ea:8a:d5:11:54:b3:c6:0e:
47:b0:02:61:00:55:c3:23:62:5e:35:eb:d3:b9:71:4c:5d:9d:
d7:00:6c:c1:43:68:99:dc:00:02:b9:ad:71:e6:93:7f:8a:b0:
a4:62:1f:e1:35:c0:b1:c6:e5:3f:ca:0c:6c:71:78:bf:3d:7e:
ad:60:b1:5c:20:88:3b:70:47:fa:23:30:ee:01:92:7f:4c:6e:
af:8c:3d:b0:c9:17:bc:72:9d:69:83:05:94:d7:62:c3:05:58:
c9:39:b0:5f:69:94:47:60:16:42:c0:05:75:72:1f:a8:51:5a:
67:02:6e:f7:59:61:08:36:f2:ba:bd:f8:25:ad:86:ee:45:45:
3f:4d:a7:b3:bd:4f:f8:26:6f:dc:b8:f7:7b:5c:d8:ef:10:07:
0d:82:7f:70:35:9a:bd:22:f8:9a:50:19:00:1a:49:94:e5:f9:
1e:21:6e:6b:e1:95:d7:01:3e:56:01:3c:78:a8:7d:8c:8c:d5:
b7:e1:f3:a2:01:78:b2:70:4e:cb:a1:0b:e0:1e:2e:42:21:7a:
0a:31:21:65:6f:26:b9:e2:fb:bd:8b:f2:47:c8:ca:9c:dd:88:
d8:03:f7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:05 2023 by rpki-client on console-fra.rpki-client.org