Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/wsOwt_3Xb4ZJH_yngE_VzDpF7j0.roa
File: wsOwt_3Xb4ZJH_yngE_VzDpF7j0.roa (raw, json)
Hash identifier: Q3EIVXrzeAwuBrdcg05TLHan9Z7dRiSQUlOwbyp+Fzk=
Subject key identifier: C2:C3:B0:B7:FD:D7:6F:86:49:1F:FC:A7:80:4F:D5:CC:3A:45:EE:3D
Certificate issuer: /CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
Certificate serial: 01856DAF5085B4F84E537AE1E8CF7B2A6DA0
Authority key identifier: D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/wsOwt_3Xb4ZJH_yngE_VzDpF7j0.roa
Signing time: Sun 01 Jan 2023 14:14:44 +0000
ROA not before: Sun 01 Jan 2023 14:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.224.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:50:85:b4:f8:4e:53:7a:e1:e8:cf:7b:2a:6d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e35af3deb53a317fb0e7365a5a4ffe2fad9635
Validity
Not Before: Jan 1 14:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2c3b0b7fdd76f86491ffca7804fd5cc3a45ee3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:33:4d:90:7c:81:86:62:32:16:ae:65:fa:52:
b0:36:e7:3c:6f:20:2a:b1:ef:13:c6:5b:f0:69:78:
df:a9:a8:72:cb:87:07:70:9f:ff:f7:fe:fa:0c:6c:
32:43:79:12:ee:96:68:fa:2b:f4:9e:81:24:16:9f:
ba:69:cb:28:b7:d8:a3:97:3e:f0:6b:29:0b:ba:32:
ad:6a:77:39:ed:27:f8:64:ba:5e:dc:5d:fd:c2:c1:
94:f2:ad:db:12:bc:be:ee:e4:be:99:f7:96:b8:ab:
d2:b9:b5:d2:9c:ba:2f:c6:c5:7e:cc:29:a6:4c:2a:
98:b2:88:87:dd:04:fb:40:31:b1:1f:ae:fb:c5:fb:
4f:ba:b8:3d:ca:57:8e:57:9c:a1:0f:38:44:d7:70:
95:04:f5:96:a3:ef:32:b4:d8:31:ee:28:05:e7:0d:
c9:cf:5b:94:15:00:8e:2a:60:6d:62:28:41:1b:3f:
4b:b6:2a:5a:7e:04:ef:b1:51:5d:b1:08:b8:3c:83:
15:7c:3b:dc:4b:2d:8a:fc:c9:4d:3e:27:fc:b9:2b:
60:8f:76:c5:c0:6a:8b:3d:37:bb:b3:a1:23:22:54:
e1:ad:5c:b1:db:89:14:b2:c2:fd:88:57:0c:8e:46:
5a:a3:b8:84:38:a3:ee:87:23:5d:07:46:ed:d6:b8:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C3:B0:B7:FD:D7:6F:86:49:1F:FC:A7:80:4F:D5:CC:3A:45:EE:3D
X509v3 Authority Key Identifier:
keyid:D2:E3:5A:F3:DE:B5:3A:31:7F:B0:E7:36:5A:5A:4F:FE:2F:AD:96:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uNa8961OjF_sOc2WlpP_i-tljU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/wsOwt_3Xb4ZJH_yngE_VzDpF7j0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/034b47-9f88-4b1a-839a-f758129b8e73/1/0uNa8961OjF_sOc2WlpP_i-tljU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.141.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1c:67:0b:f9:32:0a:1a:6f:8b:42:16:d6:44:23:57:a2:68:
db:8f:fd:d6:45:87:e9:be:c4:22:9b:89:16:e7:3a:25:04:79:
23:77:5b:dd:51:00:61:a1:4f:d5:7e:6f:c1:4f:e5:54:55:dd:
e5:43:2c:a4:28:ff:80:5b:07:0c:24:4a:fe:58:d7:e8:6d:ff:
07:2e:5e:82:9e:05:e6:82:ff:4c:5a:50:5c:54:53:91:54:aa:
37:73:15:95:05:bd:5c:7c:5d:a7:30:61:20:a4:eb:98:17:80:
58:85:db:b9:79:53:8c:d4:f8:04:e3:4d:bc:91:8b:79:55:a3:
5b:f8:fa:87:9a:ac:e2:f9:fa:22:fa:e7:fe:21:4d:41:6e:b2:
ff:a9:89:a2:01:0c:a6:b3:43:e9:58:29:d8:e7:28:7b:a6:97:
a3:14:90:b6:89:19:e7:b7:e6:76:14:71:8d:e5:4f:59:c6:4b:
18:97:a8:4d:bb:f7:03:da:d9:f4:fa:74:72:85:8d:17:b6:c7:
28:33:2c:5d:c4:a4:9c:84:f0:0a:91:42:15:6c:52:87:00:34:
2f:f8:4c:f0:e5:df:24:17:ac:40:05:0c:cb:9b:b0:2e:4f:42:
8e:0a:48:4a:fc:df:e3:4c:27:40:46:59:73:8f:b4:99:8d:39:
d1:e5:75:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:16 2023 by rpki-client on console-fra.rpki-client.org