Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/WYC9kJkkfZO800xM2lHXOLrG5aA.roa
File: WYC9kJkkfZO800xM2lHXOLrG5aA.roa (raw, json)
Hash identifier: 9h0DFpywRrHHRrXml4RL8RwZquGxOSCBv9l5iRSfJ8k=
Subject key identifier: 59:80:BD:90:99:24:7D:93:BC:D3:4C:4C:DA:51:D7:38:BA:C6:E5:A0
Certificate issuer: /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial: 01856D2F4E7DE1A372EAD97E82F7DA1DE058
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/WYC9kJkkfZO800xM2lHXOLrG5aA.roa
Signing time: Sun 01 Jan 2023 11:54:54 +0000
ROA not before: Sun 01 Jan 2023 11:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 194.113.20.0/23 maxlen: 24
2001:678:b38::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:4e:7d:e1:a3:72:ea:d9:7e:82:f7:da:1d:e0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Validity
Not Before: Jan 1 11:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5980bd9099247d93bcd34c4cda51d738bac6e5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:54:89:bb:1b:8c:0d:2b:dd:f2:59:c7:d1:
4a:77:11:da:c2:67:62:dd:d5:a4:e7:e2:62:12:35:
5b:44:8f:7e:ed:f9:84:26:ed:36:9b:37:4d:19:7b:
60:fe:aa:4e:47:31:ba:cf:f0:e4:bf:3f:ac:29:9e:
ce:ae:dd:2f:a1:02:d9:89:e6:46:77:78:cf:fb:9d:
5f:1a:ea:74:9d:0b:e3:5d:85:bd:5e:9e:02:ee:83:
db:fe:51:d3:c0:31:93:01:5b:8a:de:be:31:31:58:
b5:ad:4e:e5:68:33:48:1e:e6:df:d8:8d:d5:72:f5:
3d:ac:68:ca:cc:7f:59:dd:a0:68:06:81:91:11:a8:
c1:6a:0f:25:b2:8d:5c:a2:38:39:04:c7:a8:28:53:
cc:65:26:f1:69:35:6a:c3:3e:f1:fc:e1:e7:04:e5:
63:08:8e:09:0e:6a:3e:fb:8d:63:68:51:50:b8:7c:
b8:4c:4a:65:01:ae:77:a0:8b:c5:f1:c2:62:b1:75:
bb:2d:f0:9f:75:6c:ba:88:39:04:75:bc:69:42:8f:
af:63:24:50:eb:a0:11:9f:43:38:b4:63:ef:5d:a3:
1c:9f:e8:d9:c6:c5:fa:e6:ee:0c:9b:b5:4f:a1:1d:
c8:25:c2:2c:7f:0f:0e:27:68:01:68:19:a3:bb:ab:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:BD:90:99:24:7D:93:BC:D3:4C:4C:DA:51:D7:38:BA:C6:E5:A0
X509v3 Authority Key Identifier:
keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/WYC9kJkkfZO800xM2lHXOLrG5aA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.20.0/23
IPv6:
2001:678:b38::/48
Signature Algorithm: sha256WithRSAEncryption
33:ef:80:81:f4:a8:f4:f0:97:a6:eb:43:8c:a7:b3:82:d3:fc:
86:f2:21:28:12:fb:f8:a3:41:c9:5f:25:f7:90:36:26:dd:a7:
68:79:cb:6a:ce:81:10:a0:23:c1:be:45:9c:48:45:64:6c:e3:
75:71:14:17:2f:5c:32:09:ef:5d:79:c2:ad:31:94:58:22:eb:
3a:5e:b7:cb:d3:a3:d8:5a:ab:d8:57:ca:07:cf:1f:e9:8d:86:
87:d1:6b:f8:96:11:74:c5:2b:48:24:0a:e0:46:f4:28:bb:82:
ac:a8:68:5e:8f:69:35:f7:0f:a7:ea:db:15:2c:76:4a:c9:c3:
e9:e7:f3:64:85:ec:44:50:e8:ff:f7:70:7e:ba:db:9f:02:a0:
57:6e:41:7b:36:0a:da:cc:ac:c1:75:ec:fb:80:61:20:46:d0:
4c:41:08:5a:cb:0c:55:4f:d1:d1:be:99:93:90:2d:ae:98:04:
0e:e5:be:9b:14:15:38:5d:24:4b:f2:82:c9:55:7c:43:14:09:
05:d8:86:d0:63:cf:34:59:9c:5f:85:d3:99:93:5d:c1:57:f5:
5c:3c:45:e6:c8:8d:38:27:e8:dd:2b:42:ea:b2:15:a8:5d:e6:
8a:9a:1a:bf:6e:46:42:f5:cf:36:19:d6:4d:e9:62:2c:eb:83:
3d:7a:51:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:33 2024 by rpki-client on console-fra.rpki-client.org