Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wptZCN1NNshmFGR1bj6VQBpADyg.roa
File: wptZCN1NNshmFGR1bj6VQBpADyg.roa (raw, json)
Hash identifier: HxD6whLl00PM6dr6gKQNRtlAtYLNdZyFtUhu65+i79k=
Subject key identifier: C2:9B:59:08:DD:4D:36:C8:66:14:64:75:6E:3E:95:40:1A:40:0F:28
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01894F64C72F8EFA53A55E80BD7962B9650D
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wptZCN1NNshmFGR1bj6VQBpADyg.roa
Signing time: Thu 13 Jul 2023 13:15:51 +0000
ROA not before: Thu 13 Jul 2023 13:15:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 194.15.99.0/24 maxlen: 24
45.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4f:64:c7:2f:8e:fa:53:a5:5e:80:bd:79:62:b9:65:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 13 13:15:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c29b5908dd4d36c8661464756e3e95401a400f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ee:3c:13:1d:8a:17:96:72:6f:d8:40:6c:1c:
0e:95:25:e7:9a:1a:24:36:8a:00:a9:9e:1d:ab:db:
bb:46:2c:f5:a2:a6:41:b2:13:a8:a5:4a:55:e1:81:
fc:51:dd:1f:86:59:41:7b:33:17:7d:51:4a:5f:eb:
87:e9:f7:8f:c2:60:86:16:fc:86:94:d1:26:86:99:
6a:cc:a4:87:f7:14:c2:ae:e8:c7:a3:f0:6f:94:24:
4f:59:11:46:19:66:f1:fd:39:d2:a9:a8:a3:35:0d:
7c:f4:4d:94:6f:ef:81:93:ec:02:9c:40:fb:9a:86:
ac:c2:2b:bf:c0:b9:15:9c:89:a9:1a:4d:a5:8e:88:
f9:26:7d:9f:42:ae:a6:52:35:cd:2d:49:4a:c5:7e:
4c:a8:ae:96:6f:86:26:61:2c:24:18:77:85:dc:62:
e8:7a:91:14:29:ed:07:30:69:f3:cc:3a:f3:00:ee:
1e:b6:4c:16:ac:b2:b7:16:dd:ff:8c:45:22:17:d2:
57:25:1e:0f:36:62:f7:55:cf:f1:3c:8c:ed:6e:90:
b0:e1:4c:e6:df:68:c5:cc:b3:34:5f:c8:8f:d1:94:
33:54:1c:e7:d3:d8:c0:59:68:4c:39:0f:6a:f7:aa:
d3:a8:0a:1b:c6:be:c5:3e:c2:d4:6d:4e:d6:73:e4:
8a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9B:59:08:DD:4D:36:C8:66:14:64:75:6E:3E:95:40:1A:40:0F:28
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/wptZCN1NNshmFGR1bj6VQBpADyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
194.15.99.0/24
Signature Algorithm: sha256WithRSAEncryption
36:06:27:22:7e:32:ec:13:8a:99:0c:b3:6b:f5:3b:6d:e1:75:
ee:ac:31:13:17:3f:89:74:0d:e0:e9:2e:af:d8:5d:b9:79:36:
df:cf:fd:2a:ee:86:51:38:21:37:27:f9:7a:54:76:ec:a9:1b:
17:91:7a:b5:5d:10:ed:3b:e4:b3:b7:b8:88:17:00:04:2b:e9:
6d:05:83:5f:ea:62:c7:20:30:8d:02:1d:90:cf:4f:f5:72:08:
7e:9b:8f:60:97:6f:af:34:f7:b4:c1:88:81:e2:05:f3:5d:d5:
39:7d:a1:84:e9:9e:37:a5:42:e5:aa:f1:2b:c2:45:a8:15:36:
70:ff:34:f7:f3:ca:70:17:7b:f8:f8:1a:68:91:20:c4:87:dd:
2b:a6:33:f4:97:35:8c:8a:33:7a:c1:f7:5e:59:55:e2:cd:5b:
65:fe:bf:8a:c7:c6:cc:4a:28:fd:81:f6:4a:91:90:6e:e0:f9:
d6:20:fa:16:06:d9:c1:55:67:f8:13:2f:61:dd:e3:65:72:10:
ce:84:14:f9:3f:2b:ab:3f:5e:83:5a:a2:6e:fe:53:9f:f1:30:
3d:aa:46:a2:61:65:4e:9a:06:b8:56:51:3d:40:f4:46:3c:fc:
12:52:10:b4:3a:9a:1d:2e:e4:65:51:29:4d:d6:77:97:63:18:
8b:6a:d8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:23 2024 by rpki-client on console-fra.rpki-client.org