Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/WIuyuwHu3zFE5smopzIGkP4gTII.roa
File: WIuyuwHu3zFE5smopzIGkP4gTII.roa (raw, json)
Hash identifier: 9NDNDAyMy69jeAiOnXCnUcE6aeyLtdkkQr0j+x8Fh24=
Subject key identifier: 58:8B:B2:BB:01:EE:DF:31:44:E6:C9:A8:A7:32:06:90:FE:20:4C:82
Certificate issuer: /CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Certificate serial: 0185704BD8F760867004CD48EF7B048402C5
Authority key identifier: 85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/WIuyuwHu3zFE5smopzIGkP4gTII.roa
Signing time: Mon 02 Jan 2023 02:24:56 +0000
ROA not before: Mon 02 Jan 2023 02:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50350
IP address blocks: 193.104.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:d8:f7:60:86:70:04:cd:48:ef:7b:04:84:02:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=852f70c0ec21010dbd6fe915f3326300fe314b23
Validity
Not Before: Jan 2 02:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588bb2bb01eedf3144e6c9a8a7320690fe204c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:90:fd:e9:fd:fe:b7:ed:6d:ec:7c:1e:ea:03:
83:42:f3:cb:e9:fd:de:e9:6c:51:ed:16:56:10:0c:
af:47:a7:a2:7d:60:33:bb:89:78:31:d3:a8:ef:06:
e0:cc:72:ee:8b:79:cf:31:4a:a4:9f:a9:63:f1:b9:
65:3c:f3:f9:16:a6:03:33:2d:12:46:9b:e5:e6:3d:
48:05:e8:f5:5b:d1:87:7c:e4:83:c5:48:5c:82:17:
c0:3f:31:31:e3:13:1b:42:2d:51:10:30:5b:5e:d6:
c6:64:b3:1c:2b:12:16:5b:33:5b:af:1b:fb:2c:ab:
db:0f:46:28:53:89:59:10:a4:b0:65:c5:49:cb:75:
7a:d0:ad:19:13:fe:a3:a9:28:08:2b:a9:61:f6:32:
bc:ea:ab:15:4d:2e:51:d3:a6:63:6d:85:78:e5:e6:
bc:6c:1c:ee:a5:e9:88:3b:b0:45:41:5d:b0:6e:be:
4e:67:0f:49:e3:28:ed:c8:e3:9c:af:4e:a2:94:5b:
0f:76:44:0e:6f:e8:42:2e:fb:7f:73:de:48:b7:00:
95:0c:ac:61:87:05:70:8d:11:f9:3b:3b:9e:31:e5:
c4:54:32:58:d2:2c:73:74:e6:8b:80:f4:a6:ca:f7:
72:81:0e:a5:48:25:d3:8c:85:d1:12:8d:c3:c2:4a:
bc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8B:B2:BB:01:EE:DF:31:44:E6:C9:A8:A7:32:06:90:FE:20:4C:82
X509v3 Authority Key Identifier:
keyid:85:2F:70:C0:EC:21:01:0D:BD:6F:E9:15:F3:32:63:00:FE:31:4B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hS9wwOwhAQ29b-kV8zJjAP4xSyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/WIuyuwHu3zFE5smopzIGkP4gTII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c4f0cf-782d-4cb4-925f-fb235aff4618/1/hS9wwOwhAQ29b-kV8zJjAP4xSyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.238.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c9:4c:77:73:d5:ee:ee:24:a0:ec:db:c8:b4:87:ae:7d:ff:
c3:0e:1b:0e:d6:df:da:57:97:d1:04:16:32:fc:7d:7b:55:a3:
15:b1:f8:e2:11:ce:83:3c:cd:6e:53:94:f0:4a:ae:63:c6:8e:
d9:2c:a9:a0:75:51:a8:43:e0:d2:f8:4e:f2:1d:b9:20:28:bf:
38:aa:bf:b6:d4:a2:06:89:b8:39:3e:95:76:bc:92:29:e5:08:
13:3a:e4:8d:da:96:18:88:25:ab:78:21:0f:32:b8:13:95:3a:
0d:c2:8a:8a:56:82:58:20:c3:e0:1c:c5:61:80:47:83:1d:a4:
30:5c:09:13:22:aa:e1:0d:57:e4:b4:87:51:c0:b5:5d:08:c0:
98:4d:b9:47:a5:59:1b:77:10:be:e9:c5:94:5d:ad:58:1b:bd:
85:89:02:e8:26:6a:7b:74:4b:ba:95:21:a1:35:01:bb:4d:24:
bb:e9:12:c3:02:c8:41:7f:4e:b4:02:bf:32:d1:07:7b:da:70:
a7:56:32:68:5d:07:2a:62:d7:b3:6d:c5:3b:57:1c:f0:0b:38:
4c:17:df:5d:20:9a:fc:4f:87:cc:69:e4:d4:9e:bc:0a:bf:50:
63:e9:fa:c4:53:66:5b:2b:8e:0c:5a:dd:51:7d:a9:e0:49:9b:
ab:a1:37:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:02 2024 by rpki-client on console-ams.rpki-client.org