Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W-9Yy8tGaO-wy9eaxMIKrjOZXKE.roa
File: W-9Yy8tGaO-wy9eaxMIKrjOZXKE.roa (raw, json)
Hash identifier: nVCsk8m68vQPfYRfiKw6OcjWEnGzIcSKHVHRHzsdDQk=
Subject key identifier: 5B:EF:58:CB:CB:46:68:EF:B0:CB:D7:9A:C4:C2:0A:AE:33:99:5C:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BF1CFDC5534A59D237F98BA2FE0F348F3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W-9Yy8tGaO-wy9eaxMIKrjOZXKE.roa
Signing time: Tue 21 Nov 2023 12:16:53 +0000
ROA not before: Tue 21 Nov 2023 12:16:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216078
IP address blocks: 194.48.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f1:cf:dc:55:34:a5:9d:23:7f:98:ba:2f:e0:f3:48:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 21 12:16:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bef58cbcb4668efb0cbd79ac4c20aae33995ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f6:e4:5b:2f:be:de:04:1d:44:e7:e5:38:31:
9c:09:b5:55:f9:e4:b2:99:fa:03:8c:3a:10:07:78:
06:4d:69:53:75:35:fe:97:6e:3e:07:66:2b:b7:04:
05:9a:5c:f9:3b:ac:7c:72:90:e3:f5:c3:4f:b2:73:
65:37:20:2f:bd:63:a3:4e:ab:6d:cc:7a:31:f3:32:
58:8b:c1:b0:3d:e2:57:f3:21:02:97:73:da:a9:c8:
82:35:37:1a:3e:b3:1c:e8:b9:8e:9c:62:6f:5c:02:
38:e1:94:1e:9e:58:cd:d6:3c:9b:5b:23:1c:9c:3c:
44:44:03:da:00:20:b9:12:b3:1e:1c:d0:33:3a:70:
3a:bc:e9:37:d6:fc:5e:db:0f:d9:7b:18:f4:29:3d:
f7:48:ff:a0:8f:e7:11:66:66:a9:87:36:ac:5c:ae:
f9:b9:08:67:ab:1e:45:e1:55:5b:b0:dc:07:ab:63:
45:f5:c8:2b:53:fd:44:e3:4c:e5:cd:a9:a7:22:8a:
28:17:42:95:89:12:f5:3c:83:43:a8:48:9d:04:e9:
35:99:1e:c0:90:b9:ff:98:f9:6e:df:b8:df:f0:79:
df:81:b4:55:36:34:aa:c6:e2:6f:dd:8a:85:0d:73:
56:83:33:35:29:b3:ed:02:95:50:30:cb:75:8c:c4:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EF:58:CB:CB:46:68:EF:B0:CB:D7:9A:C4:C2:0A:AE:33:99:5C:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W-9Yy8tGaO-wy9eaxMIKrjOZXKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.250.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b4:86:34:00:1e:20:c8:d6:4a:aa:eb:8d:da:b7:15:92:c7:
09:be:ae:3b:b0:83:9a:57:3a:d6:ed:ba:fe:ce:3b:eb:68:b0:
7c:b3:cc:3f:06:08:e7:e2:e1:29:ea:cb:1d:83:2b:b8:8d:70:
45:a2:48:9e:d7:29:d4:35:81:39:ab:27:8a:2d:d1:05:e0:54:
1e:19:67:ea:96:68:c3:a1:56:8f:f8:b6:2b:50:6d:76:61:ad:
7f:f4:ee:e9:25:8b:21:dc:0f:0d:a3:ba:56:67:b6:85:35:02:
ee:01:13:6b:35:5c:c6:42:92:61:9b:9f:d9:3c:c8:00:21:9e:
b0:29:62:1e:fa:72:6e:4d:24:3e:68:36:5c:0c:48:ab:33:a2:
4e:5c:46:08:7b:99:8f:22:ef:f4:02:b4:4f:76:09:01:41:c7:
8a:ef:54:c7:b1:db:8e:43:e1:26:d8:a4:53:00:ad:77:6d:39:
05:a3:95:91:47:45:df:32:e9:32:91:c2:eb:20:dc:9f:59:dd:
5a:70:18:31:9c:37:3d:2d:95:7e:3f:aa:4a:89:3d:55:d6:e2:
a5:04:85:24:60:60:12:52:3f:04:a0:af:45:50:cc:41:b8:85:
40:2b:84:e4:ca:7a:a7:5b:c7:d3:b1:fe:ad:54:29:0d:5d:6c:
7d:8c:58:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:11 2024 by rpki-client on console-ams.rpki-client.org