Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/wtjyvsZ6_Wrq00aS0FZCArNZFK0.roa
File: wtjyvsZ6_Wrq00aS0FZCArNZFK0.roa (raw, json)
Hash identifier: /lsLjrnsPClgSzp1RlTnrfu6M2AujtfzrXGxAOBbXw0=
Subject key identifier: C2:D8:F2:BE:C6:7A:FD:6A:EA:D3:46:92:D0:56:42:02:B3:59:14:AD
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 018964C058C20AC75169D98D35B2F250DC53
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/wtjyvsZ6_Wrq00aS0FZCArNZFK0.roa
Signing time: Mon 17 Jul 2023 16:47:54 +0000
ROA not before: Mon 17 Jul 2023 16:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59729
IP address blocks: 193.200.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:c0:58:c2:0a:c7:51:69:d9:8d:35:b2:f2:50:dc:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Jul 17 16:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2d8f2bec67afd6aead34692d0564202b35914ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:46:9b:43:86:4a:f3:f9:90:82:47:b3:25:a9:
06:11:b6:82:24:8b:d7:9a:75:ed:cd:df:56:79:1d:
25:cf:70:66:ca:40:a5:aa:46:17:24:f5:5f:2e:8d:
bb:e9:d2:b7:e9:bc:3e:96:de:10:47:87:bc:f3:6d:
e8:20:85:1d:b3:58:d9:cf:27:4b:1f:86:1c:89:55:
48:07:ed:2a:69:44:9b:15:b4:9f:93:ef:73:ad:4b:
c4:c8:ec:44:d0:8f:4e:b7:b6:9e:c2:e3:03:ff:92:
eb:6f:1e:8e:ae:78:fa:d9:12:b7:5d:27:1e:e7:60:
ff:2d:e7:8d:d1:62:0a:ac:57:7c:ab:07:98:0d:d4:
76:53:59:bd:7d:6c:e4:8d:56:ef:9e:0a:ee:c2:d9:
42:45:28:8c:85:ae:d6:13:66:6f:2c:b9:2f:7b:67:
a9:48:63:fa:03:66:51:30:8e:6d:a9:60:48:53:1c:
af:a5:19:99:b1:53:80:e6:5f:6f:d7:c3:8f:b2:2b:
cd:32:ea:ea:99:ba:15:91:a0:bb:0e:0e:27:bc:57:
3a:f2:8f:b3:5d:1f:a6:af:eb:0f:fb:30:1c:57:2d:
f2:1d:96:b4:b6:89:6a:02:53:e9:e5:32:f5:2c:82:
94:8f:1d:12:f2:b5:1c:28:f9:3e:75:5d:67:a6:68:
73:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:F2:BE:C6:7A:FD:6A:EA:D3:46:92:D0:56:42:02:B3:59:14:AD
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/wtjyvsZ6_Wrq00aS0FZCArNZFK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.199.0/24
Signature Algorithm: sha256WithRSAEncryption
76:0e:5a:de:10:57:85:7c:5e:a0:4e:81:60:ed:89:bf:d0:c3:
77:19:48:bc:2e:ef:bb:c7:e6:a4:9a:78:18:31:59:4a:2d:44:
d0:7d:f9:29:61:04:58:b3:3c:61:7f:bd:0a:07:ef:30:de:e5:
f1:dd:d9:5c:d4:68:31:f7:22:ad:6f:5a:c6:2f:6c:9e:80:fb:
9b:bd:95:eb:07:57:eb:40:87:1c:00:41:29:2c:8c:10:bc:ff:
82:96:1e:47:8f:6b:5a:98:14:08:f5:7e:49:42:3a:92:73:ac:
9a:78:dc:fe:32:4f:31:8e:fd:ec:9e:75:b9:ba:26:6d:b7:ff:
1a:9d:4f:39:77:52:52:15:ae:ed:b2:8e:3f:da:cb:60:93:6c:
27:32:70:5a:89:c9:59:6b:6e:ee:07:eb:87:ba:df:8c:90:17:
36:8f:ac:73:9b:02:21:ed:d9:a8:5d:7a:9f:df:33:d3:8a:ab:
13:ea:e1:86:4a:69:e3:00:59:dc:9e:14:ab:1d:47:45:ee:00:
48:b3:a8:49:c3:9b:10:d4:76:66:1e:49:cc:db:8d:07:28:e0:
b2:05:a4:e4:d9:4b:2c:32:64:12:75:74:93:af:6a:f1:3b:f0:
c3:17:30:cd:e8:1e:af:5c:c3:7f:15:fc:bf:9b:18:37:76:a5:
ca:b2:a1:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:12 2024 by rpki-client on console-ams.rpki-client.org