Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/woukNIHO7FwfnJi3SOPmNiFjKY0.roa
File: woukNIHO7FwfnJi3SOPmNiFjKY0.roa (raw, json)
Hash identifier: ESNKV1e48PYI7Jo55O4Xy+tOc2wwkVbm4qYIxUER6QQ=
Subject key identifier: C2:8B:A4:34:81:CE:EC:5C:1F:9C:98:B7:48:E3:E6:36:21:63:29:8D
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018570676C15A57F14CB8F0B8D1F4E9CADAD
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/woukNIHO7FwfnJi3SOPmNiFjKY0.roa
Signing time: Mon 02 Jan 2023 02:55:04 +0000
ROA not before: Mon 02 Jan 2023 02:55:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209493
IP address blocks: 193.109.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 09:28:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:6c:15:a5:7f:14:cb:8f:0b:8d:1f:4e:9c:ad:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 2 02:55:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28ba43481ceec5c1f9c98b748e3e6362163298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:18:c3:8e:9f:1a:f8:cb:65:e8:32:b3:5d:53:
e4:35:05:db:91:94:c5:bb:c8:1e:18:7a:fa:26:31:
9e:12:45:dd:e5:57:a1:fe:3a:d1:77:fa:51:f3:c8:
26:7e:2e:17:52:0e:ec:50:b7:08:4f:7b:ad:b8:da:
cd:a8:97:dd:02:98:78:b2:aa:82:b3:75:52:1f:1c:
a9:40:76:fb:7d:fe:50:58:b3:14:a2:d5:f2:38:3f:
f7:2e:ea:b2:01:62:87:71:d1:de:b2:53:59:e3:4a:
1b:17:ef:f1:8c:ea:59:7c:dd:c0:66:ee:10:29:9c:
c6:94:4b:05:43:d7:ed:ca:ac:8f:f6:9f:56:ca:00:
ba:3c:a4:e6:83:74:b6:82:71:d9:66:4b:a3:56:65:
64:9d:d6:94:a1:48:dc:fb:d9:6b:db:bb:24:66:62:
ba:85:d4:6a:38:65:d5:67:10:85:04:94:bc:07:e9:
ab:0d:c5:b3:07:ca:27:92:0e:24:36:4d:f2:62:a8:
9b:72:0d:9b:de:23:97:21:28:8c:7a:f4:fb:b7:43:
ac:ed:17:1d:b4:e5:5c:0e:92:62:84:6e:45:72:63:
20:2e:aa:4b:29:0b:eb:12:fa:24:11:da:4c:9f:3b:
8b:be:b6:87:12:bb:d7:d6:5a:7a:6a:9b:96:ca:ba:
31:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8B:A4:34:81:CE:EC:5C:1F:9C:98:B7:48:E3:E6:36:21:63:29:8D
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/woukNIHO7FwfnJi3SOPmNiFjKY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.136.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5b:47:8a:d0:06:64:ca:99:f3:f4:ac:77:63:4f:0a:20:1c:
43:d9:0b:05:df:b9:d7:4b:c5:df:a5:04:8b:9a:bb:63:46:9d:
84:71:46:d8:76:76:be:b7:7d:da:69:bc:87:7b:f9:88:c6:9b:
cf:03:8b:f8:6a:05:34:6e:c6:f4:68:d5:c6:5b:fe:10:c4:c4:
73:ed:95:79:71:f9:35:75:21:59:a7:cd:2e:88:50:53:67:99:
00:d4:78:bd:cb:82:e4:64:70:5f:1d:c8:d0:f1:9b:3b:7d:c0:
18:08:7b:34:d7:9c:c2:e4:ef:02:f4:bf:dd:b6:b4:c7:5d:8c:
a1:28:a0:e0:72:0f:e6:92:15:f4:c8:94:3d:1a:2b:ab:2d:a3:
d9:86:c4:c7:d5:44:9c:3e:06:37:f8:5d:ba:01:a0:89:8d:dd:
a9:99:04:a3:77:6c:15:c0:bc:a4:74:be:e6:cf:bc:32:5e:86:
2f:95:be:25:a3:52:e3:d7:f5:57:c5:86:0b:f5:ce:91:d9:ae:
e0:8f:c1:7b:ac:3b:3a:d1:f4:21:bf:2d:05:90:7b:2c:f2:a1:
d7:b7:45:84:50:79:ce:f1:48:50:cf:c8:36:08:7c:00:0e:46:
43:ac:9b:56:14:b9:04:85:aa:4d:98:38:6f:1f:bf:14:c6:96:
bb:eb:a9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org