Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WQ4-LS8CqBKQDKSm60Zh8q9P9PI.roa
File: WQ4-LS8CqBKQDKSm60Zh8q9P9PI.roa (raw, json)
Hash identifier: D44osXvk0iRr32D5uz/TrHlTbM1VbRkFMMnGEMPhomQ=
Subject key identifier: 59:0E:3E:2D:2F:02:A8:12:90:0C:A4:A6:EB:46:61:F2:AF:4F:F4:F2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF980CD51E813D34E6A3B7890D7D453
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WQ4-LS8CqBKQDKSm60Zh8q9P9PI.roa
Signing time: Mon 02 Jan 2023 00:55:00 +0000
ROA not before: Mon 02 Jan 2023 00:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198576
IP address blocks: 84.242.132.0/24 maxlen: 24
212.95.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:80:cd:51:e8:13:d3:4e:6a:3b:78:90:d7:d4:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=590e3e2d2f02a812900ca4a6eb4661f2af4ff4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a7:ec:b5:7b:37:f5:11:e6:b6:fb:ca:ad:fd:
5c:90:6f:3b:8d:c1:da:c0:83:f8:ea:ed:b8:c1:e4:
38:7b:36:72:8c:de:58:0f:87:f7:2f:75:03:98:04:
7b:cc:ff:6a:a2:35:1d:62:4e:cf:82:d0:ee:74:e9:
49:f4:c3:99:2a:25:05:77:97:5c:09:f7:f5:60:dc:
31:15:87:71:17:81:14:5b:37:2c:ba:9b:d9:26:48:
b6:d0:0d:26:c8:4a:fd:08:42:13:8c:6c:49:20:20:
59:b2:96:14:87:3a:05:ff:5b:55:07:ce:fb:74:d0:
d3:c9:54:68:16:9d:70:aa:89:4a:29:54:71:8e:a0:
aa:85:07:0d:ba:6d:13:32:64:1c:2f:78:48:8b:99:
e4:1b:cd:dd:9b:7b:7a:3d:ba:93:88:11:92:30:4a:
41:a8:d3:fd:4e:33:6e:44:e3:75:79:ee:b0:e2:a3:
ba:cd:83:0a:51:00:28:47:29:b9:06:de:b2:bd:6b:
26:20:d1:c0:63:ba:20:9f:20:76:ab:30:fa:f6:58:
69:2c:bf:02:b0:32:04:39:43:d9:1c:a9:3a:dd:5f:
8a:6b:82:a9:93:f5:d7:2f:40:db:c7:e9:f0:c8:fe:
2f:e9:53:a6:dc:34:bd:9d:ab:c7:55:b8:2e:45:35:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0E:3E:2D:2F:02:A8:12:90:0C:A4:A6:EB:46:61:F2:AF:4F:F4:F2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WQ4-LS8CqBKQDKSm60Zh8q9P9PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.242.132.0/24
212.95.175.0/24
Signature Algorithm: sha256WithRSAEncryption
12:00:09:b7:7e:19:71:1f:49:df:88:b3:b9:bb:88:1e:ac:52:
3e:93:c6:c6:0a:9c:9f:1e:5e:47:d8:88:0a:db:fd:11:73:a5:
02:0e:91:24:d6:e6:8e:a8:0b:e9:89:f4:db:e5:ea:76:7a:8c:
3d:81:d3:05:ab:47:7a:32:00:98:81:65:2e:0c:fe:85:d1:b8:
4c:7f:bc:fa:6a:53:7b:88:14:f7:0b:a2:5b:f2:9d:0c:7f:8d:
c9:ff:f4:a0:c8:0c:ba:20:5d:5d:b0:1c:cc:fe:af:99:40:d3:
c8:c6:a1:d0:bd:ae:a5:a1:6e:78:80:e2:a0:35:bf:f5:4d:bf:
b5:7e:1a:41:e8:be:93:44:cb:04:55:45:b5:a5:6e:6c:8a:71:
0b:92:4e:4a:5d:56:4a:cf:b8:8c:45:90:80:c9:f5:42:e7:3a:
75:df:42:1b:05:73:0d:a6:1a:e0:00:ad:52:b2:7b:f9:c1:0f:
36:54:5d:4f:93:8c:b8:13:d7:97:cc:e5:89:09:47:a4:8f:ab:
57:28:90:b2:78:1b:dd:1e:63:d1:8a:20:3e:b0:8a:fc:2e:f2:
15:da:6e:a1:21:7f:98:4f:29:06:92:ee:22:d7:52:70:8c:5d:
e3:0c:30:f7:50:eb:c5:f7:07:98:87:e3:fa:c7:6d:f0:d7:ab:
fa:c8:6f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:00 2024 by rpki-client on console-fra.rpki-client.org