Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/W-P-Bk8gfGZtITCoNJy_O650vbo.roa
File: W-P-Bk8gfGZtITCoNJy_O650vbo.roa (raw, json)
Hash identifier: 4bY6q6XboJapBUswI4MqUjhlI+T54HZiivJVwfloJS4=
Subject key identifier: 5B:E3:FE:06:4F:20:7C:66:6D:21:30:A8:34:9C:BF:3B:AE:74:BD:BA
Certificate issuer: /CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Certificate serial: 0185EFA779681F45F89759C90E8BB4736F4C
Authority key identifier: 3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/W-P-Bk8gfGZtITCoNJy_O650vbo.roa
Signing time: Thu 26 Jan 2023 19:56:48 +0000
ROA not before: Thu 26 Jan 2023 19:56:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210194
IP address blocks: 194.39.231.0/24 maxlen: 24
194.39.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 May 2023 10:49:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:a7:79:68:1f:45:f8:97:59:c9:0e:8b:b4:73:6f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3f87bb7f7874aa7e15cfec9bbf6aae3c9ce33a
Validity
Not Before: Jan 26 19:56:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5be3fe064f207c666d2130a8349cbf3bae74bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:60:0d:44:99:17:87:bd:63:f3:0b:3c:1d:a8:
e6:32:d6:49:11:37:0e:e6:43:d0:d0:db:a6:25:88:
35:7e:49:3f:38:03:c1:35:7c:01:c6:4a:4d:10:5b:
2e:b0:87:12:3d:74:80:4f:7d:ac:5a:b0:4a:e6:97:
28:50:1c:25:72:e7:c6:0b:e6:45:db:d5:6a:e5:d2:
3e:60:4d:19:48:c3:17:28:60:35:75:91:6a:50:29:
c9:41:46:48:93:39:b5:25:29:9e:55:24:01:b0:a3:
04:44:13:92:70:aa:8c:1f:43:94:28:7f:68:fe:83:
2b:72:86:6a:87:2e:59:e8:60:bf:0e:6c:6d:f8:a5:
cc:2d:b7:fb:f7:66:71:bc:44:e8:e5:34:61:ff:87:
04:83:b0:a9:da:a3:b0:53:e4:2d:db:f0:29:76:d7:
5f:b2:cb:b1:19:60:5b:c6:af:ac:1f:5b:1d:7a:82:
1f:13:be:97:70:d9:6d:22:66:10:97:4f:c4:00:a3:
2b:ba:97:08:56:e2:15:10:01:17:fb:f6:79:47:a9:
be:e8:64:e2:f4:82:90:ad:05:5a:54:fb:c3:46:24:
fe:06:16:bf:a0:0a:45:1c:0d:6a:fb:7d:f7:3e:65:
07:a5:46:63:f3:69:71:27:43:ec:c5:d8:e5:3b:fd:
cb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:FE:06:4F:20:7C:66:6D:21:30:A8:34:9C:BF:3B:AE:74:BD:BA
X509v3 Authority Key Identifier:
keyid:3D:3F:87:BB:7F:78:74:AA:7E:15:CF:EC:9B:BF:6A:AE:3C:9C:E3:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PT-Hu394dKp-Fc_sm79qrjyc4zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/W-P-Bk8gfGZtITCoNJy_O650vbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/71015a-11be-471e-9592-62be53425676/1/PT-Hu394dKp-Fc_sm79qrjyc4zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.230.0/23
Signature Algorithm: sha256WithRSAEncryption
62:f4:1b:a4:33:40:31:75:68:ef:a6:e7:ce:78:04:dd:56:f9:
9a:05:4c:8a:94:b9:4e:c2:82:77:00:1a:19:22:2b:91:39:b8:
bb:e7:21:6b:b7:ad:e9:d4:9e:a7:00:d3:3d:a9:c0:e5:76:54:
84:27:6c:66:67:b0:30:39:6b:f4:da:22:9c:86:f1:87:48:22:
e7:e5:47:8b:71:a6:2a:07:26:b5:b7:25:a2:64:ea:1f:7c:52:
45:ad:8f:9e:cf:53:89:44:3b:58:44:79:3f:3d:d8:a0:e2:31:
d8:38:ce:2e:ca:63:99:01:24:29:e5:a4:8d:1b:94:e0:7f:9a:
30:e0:63:0e:57:bb:d7:9a:7e:ac:6b:42:a0:66:7c:ee:cd:44:
30:10:e5:34:59:20:e7:5a:6c:df:e5:b5:89:f2:3c:f2:1c:a3:
b8:f8:f4:22:bc:a3:99:1b:a2:c1:2b:fd:6f:36:d6:80:bc:71:
61:bb:88:24:d7:52:cd:e5:8f:a5:2c:73:9e:f2:cc:e5:f2:81:
3e:aa:0d:28:dd:00:8f:41:4d:98:f8:23:86:5c:1a:94:f6:09:
eb:9f:60:83:20:c9:68:ab:44:6b:25:0c:56:c5:81:11:b7:df:
55:7e:73:82:93:1e:76:9a:21:1d:52:1f:1c:56:ac:a6:75:c2:
76:43:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:41 2024 by rpki-client on console-fra.rpki-client.org