Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wz60clROpVV7WAyRBzhWqrNfulI.roa
File: wz60clROpVV7WAyRBzhWqrNfulI.roa (raw, json)
Hash identifier: iTPb7qpzuM80DXwaRCJFdlVMbNSBrFeaiUMQ1l0Qs7s=
Subject key identifier: C3:3E:B4:72:54:4E:A5:55:7B:58:0C:91:07:38:56:AA:B3:5F:BA:52
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A228F21DA468E18A90D293D78C0343EBC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wz60clROpVV7WAyRBzhWqrNfulI.roa
Signing time: Wed 23 Aug 2023 13:22:00 +0000
ROA not before: Wed 23 Aug 2023 13:22:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208287
IP address blocks: 212.193.31.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:22:8f:21:da:46:8e:18:a9:0d:29:3d:78:c0:34:3e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 23 13:22:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c33eb472544ea5557b580c91073856aab35fba52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:67:9a:36:ea:74:8e:67:de:3a:e1:24:9c:cf:
05:4c:b8:cb:b7:77:27:07:0b:f8:1f:46:d0:d5:38:
b0:8d:07:d3:ba:38:28:98:77:80:73:64:80:79:5c:
67:3d:5b:20:94:79:d1:ec:c6:b3:93:3c:49:ce:cc:
ee:79:46:d9:24:70:ba:25:b2:e1:7c:cb:b0:71:a9:
4d:63:9c:ec:37:17:ec:9f:d7:d4:85:19:da:92:1c:
9a:00:0e:06:9c:78:f3:2a:45:1c:45:60:79:aa:f8:
1b:59:65:b0:2f:4c:42:52:88:74:59:35:d5:d7:81:
89:aa:e0:34:b9:98:be:cc:6c:48:89:86:e1:f0:fd:
b1:bb:4d:8a:08:d4:75:87:d1:45:97:56:8f:b4:18:
6c:c8:de:bf:dd:22:64:19:1e:7f:47:79:fa:61:1a:
9b:7f:74:f7:a0:47:87:96:8d:82:4b:d6:20:b4:70:
bc:9c:6a:c1:f5:9b:3e:7a:0e:09:6f:93:59:81:7d:
d8:b5:20:ce:b0:3c:5c:6d:6b:1a:db:e0:52:ae:8d:
05:11:e7:d1:0b:02:01:41:d0:4e:9d:89:fb:0b:eb:
4b:54:44:98:42:28:ad:6a:af:5d:ff:09:a9:9c:09:
37:84:1e:89:64:49:2c:8e:fd:1f:e0:1d:79:72:b4:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3E:B4:72:54:4E:A5:55:7B:58:0C:91:07:38:56:AA:B3:5F:BA:52
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wz60clROpVV7WAyRBzhWqrNfulI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.138.0/24
194.87.180.0/24
212.193.31.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e7:c2:43:4d:4f:5b:1f:43:93:02:8b:e7:a1:e1:57:89:3b:
55:8c:a1:22:0e:fc:76:cf:95:a0:78:54:8e:53:fa:96:d5:4f:
bb:a2:99:7e:e5:ca:bc:52:fc:21:63:b8:36:4c:70:68:16:88:
b2:3e:09:b8:eb:30:a2:96:78:e8:15:2c:19:56:16:95:31:e4:
38:a4:5a:65:11:ba:f3:b5:27:f8:08:13:52:43:16:f8:ca:b6:
c6:12:6c:ae:c1:29:fd:9d:f5:e5:f5:1e:8a:32:75:93:78:7b:
d9:97:66:2a:11:b5:ee:bb:21:c2:3b:68:71:e5:6d:27:5f:0c:
68:51:e7:b2:6c:06:ac:e7:cd:25:9b:c7:3b:da:a0:41:dc:5d:
80:f4:10:6e:58:4f:6b:12:f3:11:67:07:cc:98:61:03:d0:d9:
0e:b7:ea:b3:1f:d9:75:7e:f4:46:bb:30:72:24:a2:a0:7e:61:
14:7f:39:70:cc:0e:11:42:a9:cf:64:3e:e0:04:64:b4:c5:fb:
58:3c:40:ee:cf:3c:67:4f:d4:fd:2b:95:ad:af:64:c8:9c:d4:
af:46:ee:e0:83:a5:5d:cd:1f:dd:f8:2d:1d:66:3f:99:e3:b0:
f2:91:dd:6d:64:97:c3:ee:13:23:d9:35:b1:a4:46:7c:a4:d4:
69:ab:89:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 24 10:30:53 2023 by rpki-client on console-fra.rpki-client.org