Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/Wzissw-5gvABfywZRnn8YJfj7OE.roa
File: Wzissw-5gvABfywZRnn8YJfj7OE.roa (raw, json)
Hash identifier: bT/xIsxgvhWue0r1HrIp4B3+BoJnZmqdl4ICf3RdVu4=
Subject key identifier: 5B:38:AC:B3:0F:B9:82:F0:01:7F:2C:19:46:79:FC:60:97:E3:EC:E1
Certificate issuer: /CN=ea550e54e4766d5765d0f3d061df1d74da558973
Certificate serial: 01856C135921A96CD0507944FB3077DA7D53
Authority key identifier: EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/Wzissw-5gvABfywZRnn8YJfj7OE.roa
Signing time: Sun 01 Jan 2023 06:44:45 +0000
ROA not before: Sun 01 Jan 2023 06:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210422
IP address blocks: 80.68.154.0/24 maxlen: 24
2a12:9f80::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:59:21:a9:6c:d0:50:79:44:fb:30:77:da:7d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea550e54e4766d5765d0f3d061df1d74da558973
Validity
Not Before: Jan 1 06:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b38acb30fb982f0017f2c194679fc6097e3ece1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0e:3c:94:0f:fd:4c:68:44:3c:c2:a5:c4:4e:
6e:0a:51:94:65:59:a2:39:67:b2:49:55:c3:72:ce:
79:b2:dc:84:5e:ca:0f:e6:d1:95:49:4f:55:5d:74:
93:fc:76:9d:d5:ee:ba:75:07:58:4f:4c:96:29:a2:
ca:90:ca:7c:1b:59:4f:57:86:15:ee:9b:3c:32:e5:
5c:de:e6:9d:d8:7c:f6:e3:d4:f7:b4:50:af:dd:be:
5e:78:a1:24:62:ca:51:3c:26:aa:80:d2:52:52:a8:
ea:d3:12:ed:a6:fb:10:58:b7:eb:7a:ce:b8:ba:81:
2e:80:07:05:0c:7e:e3:51:b2:75:d3:1b:c8:af:22:
3a:d1:52:be:5e:81:0e:24:26:fc:f9:6e:9d:99:4c:
35:20:b5:06:17:d2:98:6b:4a:9a:4d:a1:59:70:9a:
d2:9a:78:21:83:39:4e:5a:c5:81:68:06:6c:5b:1b:
2d:d7:59:9d:80:ae:eb:d5:af:b2:26:c9:8f:9c:0f:
ad:c4:b1:a6:a9:4a:39:a2:82:8c:10:4b:45:4c:9b:
99:21:24:0e:94:fe:f5:39:7c:78:47:2f:eb:15:9b:
80:a2:b1:9f:65:71:8e:3f:52:fb:9f:09:c3:fa:2c:
70:f2:c0:6d:f3:54:47:61:72:12:81:08:91:a8:70:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:38:AC:B3:0F:B9:82:F0:01:7F:2C:19:46:79:FC:60:97:E3:EC:E1
X509v3 Authority Key Identifier:
keyid:EA:55:0E:54:E4:76:6D:57:65:D0:F3:D0:61:DF:1D:74:DA:55:89:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lUOVOR2bVdl0PPQYd8ddNpViXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/Wzissw-5gvABfywZRnn8YJfj7OE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/68f637-3121-40f7-b78f-9c9f2090329a/1/6lUOVOR2bVdl0PPQYd8ddNpViXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.154.0/24
IPv6:
2a12:9f80::/29
Signature Algorithm: sha256WithRSAEncryption
9a:76:dc:6c:dd:8d:f4:2c:84:64:66:ff:4f:5e:dc:1c:d9:b2:
9a:e5:1c:02:8d:b4:a7:6c:f1:dc:04:d7:53:45:3d:5c:19:f3:
8a:75:dc:72:8d:6d:60:d3:1e:48:0b:fe:0d:43:76:89:a6:87:
27:f7:7f:53:48:37:2c:bb:67:bf:db:6b:55:6e:6c:e2:31:07:
5f:1f:04:c1:0e:60:31:69:78:de:de:ad:77:04:a0:e3:ea:f1:
82:e8:53:6a:5f:a8:be:cd:31:c6:4e:49:5f:73:c9:57:d5:61:
1a:fd:b7:e1:5e:34:9b:c3:06:1a:bc:db:e6:a7:b2:1f:6b:5e:
c0:15:5a:c0:bc:ac:10:48:1a:8d:e0:9f:8f:b0:6a:d8:66:62:
34:a7:4e:b8:75:41:80:4c:14:5e:96:be:e9:83:90:67:c1:46:
27:0f:f8:5e:67:be:73:61:ce:6b:b0:57:fb:35:af:54:9f:f8:
46:1b:3e:35:a9:a5:4d:6b:3b:bb:62:62:89:d2:0f:79:ea:c0:
89:38:a0:8f:c8:8c:51:89:d6:a0:9e:cb:22:71:69:7c:de:86:
1e:fa:52:d8:c3:07:5d:8d:5c:af:fb:ff:4c:af:a1:0d:07:f6:
24:16:0d:d7:4b:c4:22:66:1e:16:48:47:37:ca:61:52:0d:ad:
ad:15:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:26:44 2024 by rpki-client on console-fra.rpki-client.org