Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/wtwR6L5CJR45ClkPKOJ1HDa-8Ts.roa
File: wtwR6L5CJR45ClkPKOJ1HDa-8Ts.roa (raw, json)
Hash identifier: EWhg8flu0pUFtgzl9wpwvzckxu9qYic5EE91Yzk7Fes=
Subject key identifier: C2:DC:11:E8:BE:42:25:1E:39:0A:59:0F:28:E2:75:1C:36:BE:F1:3B
Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Certificate serial: 01856ED4BA32816E9015156705478818837A
Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/wtwR6L5CJR45ClkPKOJ1HDa-8Ts.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47159
IP address blocks: 94.248.176.0/21 maxlen: 21
91.147.216.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:ba:32:81:6e:90:15:15:67:05:47:88:18:83:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2dc11e8be42251e390a590f28e2751c36bef13b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a5:51:4d:29:5b:79:03:70:c7:2f:dc:cf:28:
a8:b9:9c:32:cc:7b:60:42:5d:13:55:03:b8:bb:0c:
cd:40:0b:db:4e:9e:e9:73:81:b1:31:bf:cc:d5:de:
7e:89:ce:6f:a9:ae:2f:30:63:ed:06:45:fe:a0:a0:
c6:dd:13:a2:e1:a8:fe:ea:05:a6:1e:cd:37:af:b0:
2f:6a:21:2c:e3:34:55:8a:ff:fb:ff:88:ff:60:83:
92:15:c8:a3:58:ba:0d:7b:f4:23:21:58:17:ce:44:
29:b4:14:d0:c3:b1:f1:18:eb:18:68:88:04:29:af:
c6:34:58:3c:14:61:fd:89:15:a9:cc:d8:ad:63:1d:
ad:e8:ea:05:56:0e:d9:90:40:cc:0d:85:a2:f6:36:
b7:36:06:b6:7b:23:66:1c:07:c4:a5:12:05:34:15:
8b:98:a0:9e:ce:a8:06:d7:90:ff:e5:6c:fb:82:20:
cc:ed:14:7e:8b:df:d1:6e:22:81:36:80:98:bf:6b:
15:84:d1:38:db:fc:97:7a:a5:20:da:e3:d5:c9:7d:
38:53:0f:b1:10:b1:ea:09:08:06:ae:2d:88:cb:0e:
88:67:c0:9e:fc:e6:4f:78:93:05:95:72:74:08:fd:
c5:62:9c:06:5b:d8:6f:47:0b:81:00:4b:79:10:20:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DC:11:E8:BE:42:25:1E:39:0A:59:0F:28:E2:75:1C:36:BE:F1:3B
X509v3 Authority Key Identifier:
keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/wtwR6L5CJR45ClkPKOJ1HDa-8Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.216.0/21
94.248.176.0/21
Signature Algorithm: sha256WithRSAEncryption
6c:50:27:87:1e:be:77:95:b7:e8:1e:6b:f1:e6:0c:3b:cd:e3:
a4:0c:4c:62:08:58:d0:bf:ea:2a:0d:25:93:90:b3:9b:15:25:
3f:05:e2:cc:16:fa:b2:91:5a:89:a2:fe:5d:73:0a:23:00:39:
9f:94:ed:d8:5f:49:fc:91:40:0e:86:42:4a:8a:55:79:ae:7e:
c8:8e:96:ac:ff:a5:5a:1d:dd:cb:94:a8:5c:9b:2c:6a:fa:8c:
f5:fe:11:d6:e9:06:eb:ae:bd:c1:5f:de:b5:3e:af:fa:f4:b2:
bc:2f:48:b1:4e:86:c5:75:69:f1:9c:b9:e7:f0:2e:46:b9:05:
4c:50:04:32:37:4a:94:82:97:f5:c5:7d:ea:32:23:df:2e:a4:
2a:27:72:d7:e8:87:ce:3c:9b:46:83:a4:d3:98:7d:48:5b:92:
41:ef:5e:c3:4a:af:bb:1c:e2:7a:f5:b8:81:b5:3c:96:05:d1:
77:a8:0e:8e:84:06:b0:a2:85:0f:d3:1b:93:ab:e2:aa:c5:f1:
2a:52:a8:72:fc:7d:4e:9b:4e:f6:10:16:83:9a:1f:5e:82:f3:
35:db:3a:2b:71:a6:a3:9b:df:0f:c3:b6:82:42:e3:21:4f:62:
95:09:79:07:64:48:17:ed:a7:dd:fd:74:d2:04:69:79:95:19:
0e:19:f0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:25 2024 by rpki-client on console-ams.rpki-client.org