Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/WW-Q7U5nyitWW-xq39O-gVNBwwU.roa
File: WW-Q7U5nyitWW-xq39O-gVNBwwU.roa (raw, json)
Hash identifier: +Hm1dZ0Jt027y1Ri04biPNklf4SrEC6XggleZqTthJ0=
Subject key identifier: 59:6F:90:ED:4E:67:CA:2B:56:5B:EC:6A:DF:D3:BE:81:53:41:C3:05
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 01856B0A261302B9485BF22B0730D67527B4
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/WW-Q7U5nyitWW-xq39O-gVNBwwU.roa
Signing time: Sun 01 Jan 2023 01:55:05 +0000
ROA not before: Sun 01 Jan 2023 01:55:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 193.9.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:0a:26:13:02:b9:48:5b:f2:2b:07:30:d6:75:27:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jan 1 01:55:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=596f90ed4e67ca2b565bec6adfd3be815341c305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:40:ae:1c:1b:d3:fb:8c:75:47:13:56:9b:e0:
76:e5:f1:2a:c0:f3:ee:e8:43:c1:4e:d8:5a:f5:c4:
0b:b4:a6:a9:3d:b3:94:85:1c:e5:f4:e8:e3:91:35:
8f:3a:6c:10:5c:ce:b3:c2:40:8f:34:d5:bc:e7:9a:
70:e7:e0:65:f0:de:62:29:f0:08:fb:04:e3:0e:1c:
ce:77:44:51:4e:24:ed:66:9e:9e:76:ac:d0:4b:27:
fa:de:1a:60:0a:8f:57:15:a8:33:e8:8f:e6:fe:c4:
2f:de:fd:21:b2:87:2c:47:af:f3:90:56:0e:4d:59:
2f:c7:ff:6f:92:88:f4:22:b5:fc:22:f6:ba:c2:5d:
9c:cb:4f:84:8f:24:38:01:3d:a4:f3:54:d9:90:e9:
98:1f:f6:9a:f7:97:6f:aa:3e:6a:8b:7c:4e:3e:a0:
8e:0e:98:ba:db:06:98:f9:a4:32:bd:9d:e4:27:41:
09:3d:91:e2:fe:bc:fa:13:4b:f2:c2:b1:a1:95:d7:
e3:1a:04:1a:16:b3:f7:ff:39:27:46:01:08:64:f1:
58:cc:73:e5:11:f0:20:c8:73:f4:4c:c7:c4:a1:f1:
2a:ec:c0:9f:5d:12:a9:ff:50:97:c5:7c:fa:52:ca:
6b:25:1a:cd:6d:e4:ac:2b:c1:64:b8:ce:63:32:07:
d3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:90:ED:4E:67:CA:2B:56:5B:EC:6A:DF:D3:BE:81:53:41:C3:05
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/WW-Q7U5nyitWW-xq39O-gVNBwwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.249.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7d:f5:f1:24:0c:fc:af:8f:94:d4:54:37:a2:94:6d:0d:ab:
e8:33:53:b9:32:e7:1d:1a:06:ae:84:f5:ee:97:a7:a7:7e:46:
dc:ee:40:53:0f:8d:9c:0d:ee:3b:61:cc:ab:7f:73:78:a3:f9:
d1:02:cd:e2:c7:1b:56:c5:95:b1:de:0d:9f:0c:f8:7a:38:6d:
5d:ab:44:ff:15:4d:ba:47:41:ff:70:ac:58:e3:14:65:cf:52:
10:ec:c4:1c:78:8f:99:63:c7:48:0f:61:dd:b9:8a:ac:56:55:
f4:e1:10:26:ab:02:79:d2:c9:32:97:04:da:05:04:63:a0:4e:
57:10:9e:8d:cb:f5:f7:e2:f3:d1:09:f1:6e:68:d2:c0:52:1d:
d4:ad:84:e7:bd:0b:f3:dd:0c:ba:3d:d5:7a:53:6e:d8:5f:36:
96:8c:fc:fb:74:0e:ec:e8:92:d8:6b:5b:dd:a7:51:8e:40:42:
94:01:5f:3d:b5:e3:98:93:7f:ce:66:4d:8c:2d:4f:d1:19:55:
f1:3a:9d:da:df:60:8c:7c:2b:62:7f:cf:53:53:b4:58:a9:52:
f1:d4:a8:b3:33:1d:ed:81:1a:40:f4:0c:9a:61:28:86:c9:a2:
56:e4:f7:96:ec:c5:08:f3:2c:a6:40:b4:12:98:00:01:17:d7:
74:2b:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:49:56 2024 by rpki-client on console-fra.rpki-client.org