Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wcqUQq_ba5L39_dO6HEBr3a-jXw.roa
File: wcqUQq_ba5L39_dO6HEBr3a-jXw.roa (raw, json)
Hash identifier: Pmtr1kVAwT+IVJWvq5ZVA3aYjCFqlqm4AQCtitF07RY=
Subject key identifier: C1:CA:94:42:AF:DB:6B:92:F7:F7:F7:4E:E8:71:01:AF:76:BE:8D:7C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A2E5F6B3DC7E8C26FDEA5A6C834024893
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wcqUQq_ba5L39_dO6HEBr3a-jXw.roa
Signing time: Fri 25 Aug 2023 20:25:19 +0000
ROA not before: Fri 25 Aug 2023 20:25:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 194.87.138.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:2e:5f:6b:3d:c7:e8:c2:6f:de:a5:a6:c8:34:02:48:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 25 20:25:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ca9442afdb6b92f7f7f74ee87101af76be8d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b0:6a:6d:aa:d8:0b:7b:ae:c3:92:62:b0:24:
a4:40:ab:f6:ac:2e:92:58:a9:de:1a:78:02:aa:e7:
77:bc:a6:4c:49:22:fe:18:0f:c7:bc:a8:90:67:be:
de:d6:cf:8f:b0:ce:82:d5:95:f4:1d:0a:31:27:46:
ff:da:47:eb:76:14:ab:b8:05:04:f4:f4:01:fc:07:
79:a3:d1:1e:48:8b:e6:2f:05:cc:c7:d4:16:a2:3a:
f9:72:c2:91:a6:4d:e8:56:a0:d8:13:70:28:61:22:
e9:c8:ed:ef:4b:63:fc:a8:ce:d5:74:c2:7b:b7:0c:
71:40:1e:3d:6e:f1:48:ee:dd:7c:15:c7:4e:35:94:
d3:21:80:b4:35:07:89:41:3f:70:62:82:1e:b2:08:
eb:48:c7:a8:98:6e:e3:42:48:b6:e6:bb:17:d8:7c:
30:e6:97:13:8f:f7:6d:71:15:b2:e0:47:2a:fc:fe:
37:28:f9:25:f2:42:50:45:58:b9:65:10:6d:32:bc:
c8:7e:2e:cb:d5:dc:f2:8c:95:61:d8:a3:69:94:03:
7f:a2:f7:a0:2c:43:56:7a:d6:e3:b8:20:f6:21:04:
a6:69:37:ea:db:0e:a2:2f:4b:fa:6a:d5:65:32:3a:
c5:29:e3:00:88:10:01:4d:f2:80:38:39:58:85:09:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:94:42:AF:DB:6B:92:F7:F7:F7:4E:E8:71:01:AF:76:BE:8D:7C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wcqUQq_ba5L39_dO6HEBr3a-jXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.138.0/24
194.87.161.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9d:46:68:eb:76:91:29:a6:71:69:c6:eb:52:5d:7b:07:0b:
02:84:b0:fe:32:53:85:d1:df:e0:0c:31:7f:c7:5a:05:45:7d:
e9:f3:04:54:44:c0:b0:ab:00:49:14:e3:e1:4a:46:bc:29:be:
2a:67:28:e7:12:64:f2:e1:a6:d1:71:1c:40:55:a3:d6:5b:cb:
19:7c:80:b3:8b:ca:90:cf:0f:6d:c3:e6:52:89:7b:90:e8:a5:
e9:dc:af:17:40:fe:1f:77:0d:07:e7:6a:12:5c:66:d1:a8:88:
13:79:04:b9:fb:79:03:a2:1f:cd:cc:f7:d1:52:4c:23:aa:d2:
ac:29:58:e4:42:04:d9:e3:6b:03:a5:80:8d:e1:66:5b:b9:d2:
b6:5c:11:03:7e:a4:e2:97:e2:fd:be:06:6b:83:f6:4f:fb:24:
58:9f:ff:43:24:2a:e8:72:70:66:93:c6:67:99:04:ab:f8:60:
ae:6d:6f:8c:9e:76:a6:36:fb:98:5d:ae:6c:1e:c4:80:55:e7:
87:53:f3:9a:43:26:92:0f:7d:a4:fd:04:6d:68:52:1c:72:77:
97:1c:35:59:b6:05:30:d9:cf:91:8e:02:a5:74:0b:88:4e:80:
60:b7:00:81:e0:3d:78:35:46:72:a6:be:f3:12:4d:38:6c:10:
4e:e8:08:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 13:02:42 2023 by rpki-client on console-fra.rpki-client.org