Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/WolDIPfrF03dm7UEiFESMKBdA10.roa
File: WolDIPfrF03dm7UEiFESMKBdA10.roa (raw, json)
Hash identifier: SbZot/WmSzoGRhh7uxIglwDz4YNonY1WM1gwvpeSFvU=
Subject key identifier: 5A:89:43:20:F7:EB:17:4D:DD:9B:B5:04:88:51:12:30:A0:5D:03:5D
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0187786C1472AB1867EEC942931F46EFEEBB
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/WolDIPfrF03dm7UEiFESMKBdA10.roa
Signing time: Thu 13 Apr 2023 02:22:41 +0000
ROA not before: Thu 13 Apr 2023 02:22:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.239.237.0/24 maxlen: 24
193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:78:6c:14:72:ab:18:67:ee:c9:42:93:1f:46:ef:ee:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Apr 13 02:22:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a894320f7eb174ddd9bb50488511230a05d035d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:63:50:0a:cf:53:6b:a9:12:93:4f:5b:5a:
83:31:ee:d3:da:1a:63:74:ba:e4:6c:58:e5:30:a3:
81:54:86:9d:42:b9:f5:76:04:05:ca:06:9c:e5:5c:
c7:eb:7d:4a:97:30:92:a1:b3:67:c6:8b:d8:f4:a5:
e9:be:64:14:81:9d:28:46:3f:31:17:81:46:59:91:
58:9b:47:fb:f7:43:c4:0a:5d:01:ac:64:35:15:2a:
47:87:3e:dd:4f:0b:1c:ee:89:c3:38:17:af:ce:81:
a2:15:e1:a9:7c:dd:5c:f5:24:a2:68:4c:42:7c:36:
84:21:91:dd:0c:04:3d:19:ef:f1:97:a0:35:1f:b5:
a2:d8:a3:ac:95:77:39:df:1e:5e:d2:b7:e3:7b:28:
ec:a4:74:66:3c:e4:8a:55:79:9b:b8:65:4e:7d:57:
68:f6:90:e6:a2:8d:2c:4b:1f:7f:5b:fa:2c:d7:d1:
1f:28:5a:29:aa:90:db:b0:3a:19:f3:fd:35:4a:64:
d8:db:f6:42:a6:69:62:30:43:f4:4f:90:3d:3e:d6:
61:27:4e:8f:18:eb:de:8f:9f:9f:d6:88:79:89:2f:
92:5c:46:98:64:9e:ae:39:c4:15:d3:7b:0f:1f:13:
cc:24:85:8e:67:74:89:c9:ab:31:6d:2d:c5:b0:16:
46:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:89:43:20:F7:EB:17:4D:DD:9B:B5:04:88:51:12:30:A0:5D:03:5D
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/WolDIPfrF03dm7UEiFESMKBdA10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.196.0/24
193.239.237.0/24
Signature Algorithm: sha256WithRSAEncryption
09:84:c1:81:a4:11:bb:c7:66:0d:a7:70:18:22:80:48:9f:22:
94:71:bc:a7:d0:55:ca:91:a8:0d:f8:7f:02:fa:24:ce:8d:04:
ca:f9:fe:de:7a:d3:da:c1:3e:36:a6:f9:d9:e3:99:c5:c7:f9:
5c:ac:4f:1f:f6:9a:7b:2c:22:9f:85:71:fd:69:f0:61:56:cc:
39:94:36:f7:81:17:88:69:62:d8:e1:a7:68:ef:80:f6:2e:af:
91:19:ea:a3:4b:9e:dc:60:0d:b2:81:9f:3c:ce:7d:c0:32:a6:
03:9d:e0:a4:b9:b5:95:7f:a0:fb:71:38:87:1f:60:aa:cf:65:
ab:9c:8c:86:a0:32:a6:09:31:9b:1b:87:37:0c:0c:4d:74:38:
00:92:ed:e4:78:bb:b2:f5:3b:15:60:cc:56:86:62:5a:11:16:
a8:64:e1:ed:56:f2:83:4e:a4:09:5a:1b:02:84:3e:53:30:f6:
15:da:12:4b:b8:ad:2c:c6:8f:4e:78:5c:c5:cb:1a:03:7b:38:
b8:0b:49:7f:9d:1a:9d:57:de:34:96:d9:56:20:51:0f:03:92:
55:20:ed:1f:1e:87:16:73:45:15:51:75:82:8e:24:f5:b7:d7:
01:9a:9e:10:c5:36:1e:28:b0:41:b6:85:b7:d0:21:76:df:94:
9c:eb:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org