Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/W5oyVW12PbI5ecvJMfqOd5ejXkI.roa
File: W5oyVW12PbI5ecvJMfqOd5ejXkI.roa (raw, json)
Hash identifier: +z6jXjiDHtmRfegmYXi/oKkhEU8/UWRSVEat3KsYvTA=
Subject key identifier: 5B:9A:32:55:6D:76:3D:B2:39:79:CB:C9:31:FA:8E:77:97:A3:5E:42
Certificate issuer: /CN=3cde2470c8563949487a3e78743c544c99ec8a64
Certificate serial: 018824B7FB11D748035528FB3B311B013079
Authority key identifier: 3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/W5oyVW12PbI5ecvJMfqOd5ejXkI.roa
Signing time: Tue 16 May 2023 13:20:17 +0000
ROA not before: Tue 16 May 2023 13:20:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30857
IP address blocks: 86.111.196.0/24 maxlen: 24
86.111.197.0/24 maxlen: 24
2001:67c:130::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:b7:fb:11:d7:48:03:55:28:fb:3b:31:1b:01:30:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cde2470c8563949487a3e78743c544c99ec8a64
Validity
Not Before: May 16 13:20:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b9a32556d763db23979cbc931fa8e7797a35e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d5:50:41:5d:87:10:59:25:79:bd:2c:9d:80:
f1:ee:63:f8:fe:35:91:4a:28:40:dd:02:27:b6:a7:
5a:91:9f:a2:c4:7f:3e:51:fe:fe:54:76:05:a1:13:
19:b8:cb:09:72:c1:48:41:de:f4:a1:6f:fb:37:c3:
fd:62:4e:d1:66:68:c8:e9:39:16:9e:42:1b:12:45:
e4:e0:a5:d9:c8:05:9a:d5:9f:a6:ec:fe:51:40:8e:
47:d7:43:6b:a7:61:67:bc:48:4a:c8:50:6b:dc:a2:
4a:fa:ab:dc:52:4d:84:58:f4:03:89:b1:cf:1d:ec:
7a:81:af:b0:a1:e0:c2:15:6e:70:9c:0d:f7:69:39:
3d:a6:7a:c5:51:58:30:8c:28:97:f6:26:9e:7d:3b:
04:c6:67:e1:44:3c:70:43:6b:7b:ea:b5:fa:ef:f6:
45:9b:41:cb:8a:bf:6f:db:a5:93:88:ae:20:d4:ea:
19:67:7a:ef:e7:0d:c9:c7:fb:52:80:98:fa:0c:38:
1a:a1:37:1d:3d:ac:b9:c7:38:08:2d:6e:40:9d:51:
9d:65:ed:b6:0c:50:0b:e0:76:9c:e7:0d:13:60:a2:
96:33:66:ac:74:b4:c7:77:bc:71:93:dc:47:55:18:
80:d3:89:03:a0:83:2a:e8:23:8b:14:6d:de:22:96:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:32:55:6D:76:3D:B2:39:79:CB:C9:31:FA:8E:77:97:A3:5E:42
X509v3 Authority Key Identifier:
keyid:3C:DE:24:70:C8:56:39:49:48:7A:3E:78:74:3C:54:4C:99:EC:8A:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PN4kcMhWOUlIej54dDxUTJnsimQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/W5oyVW12PbI5ecvJMfqOd5ejXkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/fa79cf-8c4c-4094-a1f5-44171b2f599e/1/PN4kcMhWOUlIej54dDxUTJnsimQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.196.0/23
IPv6:
2001:67c:130::/48
Signature Algorithm: sha256WithRSAEncryption
ae:f3:58:9c:c8:95:a2:e9:91:aa:17:da:bc:73:ac:28:e9:7c:
fb:b2:47:13:5d:d3:ff:2e:2c:8b:bf:84:a1:b9:04:8f:c8:8c:
95:77:32:37:5b:21:11:64:66:3b:f6:05:fd:a4:35:ad:19:6e:
2c:e1:87:b2:7d:68:32:8b:4a:35:14:b9:da:65:f0:91:09:5c:
5b:e4:11:20:3f:7a:34:0a:90:72:40:e2:28:ec:aa:25:91:84:
9f:88:03:9a:82:12:51:fe:45:13:fe:c5:51:09:70:34:ae:cb:
78:34:6b:87:a9:e6:66:4c:51:e3:65:a9:8e:f6:00:80:32:24:
da:71:24:df:06:51:4e:48:51:0e:83:68:68:db:48:5e:01:3f:
dc:78:64:8e:64:e3:2f:9d:b7:e5:f0:a2:90:a3:f0:e1:76:9a:
c1:0e:88:6c:ee:dd:48:c0:f3:9d:68:5b:11:33:3a:51:81:79:
83:90:00:ab:30:6b:70:81:97:16:75:93:4a:b4:d5:96:44:98:
61:c3:03:8d:af:fc:80:83:bb:a7:76:40:99:55:61:06:76:fa:
ba:08:f2:f6:d9:bf:cf:4e:25:ca:75:4d:67:02:4b:14:c5:de:
64:b6:6e:ff:14:ca:48:39:74:02:b9:ed:db:3f:ec:60:b5:c5:
9b:20:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-fra.rpki-client.org