Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/wQdPXnuPufFJ3DNqQpG6BhQAync.roa
File: wQdPXnuPufFJ3DNqQpG6BhQAync.roa (raw, json)
Hash identifier: jMXmlqzkvY5sRJbmVhkZPA/QaWjoqE+GEyWe4T20daY=
Subject key identifier: C1:07:4F:5E:7B:8F:B9:F1:49:DC:33:6A:42:91:BA:06:14:00:CA:77
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 0185728CA03382252A6930AA39504B0616E0
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/wQdPXnuPufFJ3DNqQpG6BhQAync.roa
Signing time: Mon 02 Jan 2023 12:54:56 +0000
ROA not before: Mon 02 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57651
IP address blocks: 193.247.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:a0:33:82:25:2a:69:30:aa:39:50:4b:06:16:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jan 2 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1074f5e7b8fb9f149dc336a4291ba061400ca77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:69:ba:fa:5e:d5:1d:c6:bd:5b:6c:cc:16:10:
29:b8:69:ff:b3:f0:38:31:1c:f1:7f:e4:4c:0e:12:
d2:b2:8a:ab:6c:dc:a1:a0:b3:50:34:4a:0b:7c:df:
0f:c4:f4:b1:54:20:9e:dd:f5:3e:3e:17:e4:ac:8e:
b7:7b:72:f4:be:f0:70:65:d3:b0:2d:7e:f7:2c:a8:
0c:18:b0:e1:30:09:c1:bc:43:8c:78:2d:85:ee:68:
09:74:0c:ab:93:10:0f:69:c7:a2:3d:e7:76:c2:ce:
59:07:24:c7:5f:cd:24:31:87:e3:0f:e8:7f:5b:98:
3f:c9:58:c6:cb:91:53:ae:6a:7f:6d:04:fa:e8:00:
6e:64:de:0d:5d:0e:02:08:3f:4c:06:60:8b:b0:9c:
95:f7:62:95:a3:3d:17:ce:a1:11:bc:c5:59:80:af:
02:5f:5a:92:6f:7f:04:d3:c3:df:87:cd:25:fb:00:
22:18:00:88:78:57:1f:eb:68:61:86:30:70:5b:d3:
4b:25:b5:0e:19:3f:25:90:65:37:3d:8c:7e:78:df:
cc:52:9f:51:e2:e4:85:51:d4:b8:51:dc:21:0a:5e:
14:9d:82:77:0a:8a:60:ce:f0:30:88:0a:0b:70:d4:
69:0a:e5:a4:05:23:6e:8d:fd:5f:98:2f:93:22:f3:
a0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:4F:5E:7B:8F:B9:F1:49:DC:33:6A:42:91:BA:06:14:00:CA:77
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/wQdPXnuPufFJ3DNqQpG6BhQAync.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.247.238.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7a:9e:6e:6b:93:76:02:17:e1:55:13:c7:73:45:dc:0d:e3:
45:d9:d4:d6:96:1f:ae:4e:54:59:da:2a:29:e4:25:c5:5f:8a:
5a:c7:ee:95:12:b1:40:c5:71:86:1a:89:27:62:89:58:2a:47:
8a:9a:76:40:92:44:ae:31:88:bd:1f:9b:be:5b:a0:84:04:91:
2f:72:6f:46:13:76:1c:48:4d:f5:9c:54:70:7d:76:06:33:fa:
be:eb:50:3c:19:d1:ba:ec:18:3c:2a:7f:f0:5e:22:07:40:c5:
99:ee:13:55:e9:f2:8d:30:d0:d0:47:74:f0:fb:f4:6d:50:2b:
1a:de:45:bb:9a:24:90:55:4d:53:ea:e0:de:bc:30:5c:8d:13:
b5:92:44:57:f6:fe:63:42:f9:c7:6b:0e:a4:ad:ed:1a:19:24:
4c:05:fa:43:d3:6b:2b:d1:b7:75:ef:8d:00:11:a4:20:68:66:
50:4f:16:b5:3d:53:86:7b:c9:f4:9e:d0:ea:2c:f2:ae:bb:19:
7f:60:88:1f:8f:f7:2a:a1:33:7d:7c:e5:f2:9b:e9:0b:f1:4a:
ea:f4:f6:21:a4:9e:9e:12:55:32:7f:da:36:2e:2f:60:da:1e:
e9:d7:e0:a5:98:ed:18:e3:b0:8d:1d:2e:cc:aa:4d:41:1a:8a:
0c:63:96:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:53 2024 by rpki-client on console-ams.rpki-client.org