Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WripeqKyGiH2NUyrOLx07415Chg.roa
File: WripeqKyGiH2NUyrOLx07415Chg.roa (raw, json)
Hash identifier: NEES185iEAoZktL6VEEuNrhW+MT6Ii+pno/mXrWxc98=
Subject key identifier: 5A:B8:A9:7A:A2:B2:1A:21:F6:35:4C:AB:38:BC:74:EF:8D:79:0A:18
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 0185707971BC48078FE966932D3FF4ECA19F
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WripeqKyGiH2NUyrOLx07415Chg.roa
Signing time: Mon 02 Jan 2023 03:14:45 +0000
ROA not before: Mon 02 Jan 2023 03:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62217
IP address blocks: 2a06:3e80::/32 maxlen: 32
2a04:a140::/32 maxlen: 32
2a05:2d00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:71:bc:48:07:8f:e9:66:93:2d:3f:f4:ec:a1:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 2 03:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab8a97aa2b21a21f6354cab38bc74ef8d790a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:ac:4a:1b:c2:61:3f:4e:9e:bb:49:f4:dc:
d6:de:cc:62:b8:8d:28:53:b4:61:22:4c:ed:75:89:
b3:47:a5:98:bc:ca:f6:e7:94:bd:d8:cf:80:14:76:
f0:6a:12:22:43:1b:54:a0:6c:9f:b3:9d:97:60:88:
32:10:77:5e:54:d0:e6:31:72:55:f4:1d:64:72:bf:
a0:ae:3e:47:82:d5:54:39:df:ec:69:f3:f6:20:00:
56:fb:f4:b7:1b:fc:c6:54:2e:96:f7:1b:bb:f0:1e:
a6:2a:78:79:fe:d7:fd:b0:42:ae:72:92:4d:3e:98:
12:60:3b:06:31:bb:35:8c:e0:ef:87:1d:d6:6a:37:
99:80:fd:e3:48:19:4e:8d:3e:6c:8f:69:f1:9b:1e:
63:89:95:bc:a6:9f:dd:9f:44:be:55:e5:21:da:c5:
60:01:cc:13:54:f8:48:b4:ae:45:81:bc:23:8f:09:
9c:c8:d9:03:be:4b:0c:96:9c:38:e0:40:0a:1a:b1:
87:66:0f:71:b5:3c:b6:98:94:70:97:b8:29:8d:31:
13:af:05:6e:ac:96:cc:cd:a8:2d:d2:03:40:32:11:
04:d8:b1:ca:df:cf:45:c5:0e:bd:ef:e9:88:20:9d:
b2:3a:44:1f:61:b5:c6:54:4e:c4:88:2e:ea:d7:6d:
38:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B8:A9:7A:A2:B2:1A:21:F6:35:4C:AB:38:BC:74:EF:8D:79:0A:18
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/WripeqKyGiH2NUyrOLx07415Chg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:a140::/32
2a05:2d00::/32
2a06:3e80::/32
Signature Algorithm: sha256WithRSAEncryption
20:c0:f6:31:f6:14:cb:0c:9f:a4:bb:6a:ce:a3:9c:fc:69:7c:
a0:8c:64:a3:93:96:e1:92:e4:1a:81:aa:e4:72:c4:08:b5:50:
6a:a6:72:4a:10:cb:25:95:50:cd:ef:27:30:71:d6:f6:00:77:
49:fc:6a:58:78:39:96:22:ae:46:b5:f1:ad:89:b4:d3:20:3d:
b6:c2:c9:8e:27:04:5a:5f:0d:67:f6:33:ea:fd:d2:3d:93:31:
5d:6a:66:3c:b0:21:45:a8:73:d7:1e:83:a3:94:57:7d:2f:83:
c9:02:0f:f4:33:f5:ed:3f:72:77:1c:a1:53:e2:21:24:e6:10:
32:99:9b:1f:45:5c:0c:c9:67:ca:b3:05:17:94:5b:fb:52:1f:
90:25:44:f5:b1:3d:a3:30:b2:27:f4:67:f3:27:c4:1e:15:43:
29:47:4d:86:a4:2d:25:70:20:24:88:f8:e3:25:7c:b4:ac:1f:
18:e5:d2:c6:35:93:16:89:8f:0d:ec:4f:b5:f1:1a:28:6b:8f:
11:fb:3c:98:0e:13:79:b7:d7:39:51:d4:d7:32:41:89:4c:7b:
56:be:fc:cf:32:41:ba:34:3d:f6:9b:e0:68:ac:3d:7a:23:ae:
4e:09:8a:0a:47:39:b9:9f:c5:c9:1a:23:4c:7f:3b:3a:51:27:
58:7d:76:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org