Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/WXDWXIUs-Yyy5s951un1r3RZMDs.roa
File: WXDWXIUs-Yyy5s951un1r3RZMDs.roa (raw, json)
Hash identifier: KhyQJPLcbGIAHGKPIiQcviFYT5fCQRp6nKImSoiWYbI=
Subject key identifier: 59:70:D6:5C:85:2C:F9:8C:B2:E6:CF:79:D6:E9:F5:AF:74:59:30:3B
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 018571B0E1C0B12F5E10E974CE3E68A53391
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/WXDWXIUs-Yyy5s951un1r3RZMDs.roa
Signing time: Mon 02 Jan 2023 08:54:55 +0000
ROA not before: Mon 02 Jan 2023 08:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12306
IP address blocks: 193.202.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:e1:c0:b1:2f:5e:10:e9:74:ce:3e:68:a5:33:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jan 2 08:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5970d65c852cf98cb2e6cf79d6e9f5af7459303b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b2:85:ec:e2:80:22:db:a4:22:d0:42:e9:af:
f5:5b:04:44:37:aa:5c:57:bd:b8:2e:c1:dd:d0:f0:
fa:7c:25:44:73:0e:34:ec:06:ce:93:b1:36:b3:b5:
04:c4:83:a5:c2:49:7c:2c:f8:be:a9:71:28:fa:40:
72:6e:f2:1b:86:93:05:d3:2c:54:1a:ca:c6:aa:b0:
47:dc:f0:3c:fe:84:48:99:6d:36:c4:fe:94:2e:7f:
1d:e5:ad:44:50:f1:d0:7f:f4:ac:15:ed:da:8a:8a:
1d:1c:ac:58:a1:01:44:50:17:3b:8b:71:bc:b3:03:
8d:0b:83:a0:4c:23:81:9d:00:02:b8:e3:9b:22:a0:
a6:f4:97:f9:4b:f1:e0:19:9d:ec:cd:a1:b6:75:c1:
b8:90:5d:45:8b:52:0b:e9:79:8d:e7:df:4c:98:5f:
3c:5f:d1:a5:74:77:ce:ad:7d:99:cd:1d:0c:62:f3:
40:b9:67:dc:6a:68:d5:ab:90:0d:b3:3f:7d:6c:0f:
e8:e4:42:35:c3:d7:fc:3b:94:88:81:ac:e1:03:1f:
53:d5:91:48:15:11:8e:df:35:97:3e:1f:44:86:62:
6e:c5:1b:ac:e5:55:27:2f:ca:ae:6d:c9:12:ec:2a:
37:2a:67:3b:11:0f:9c:20:84:94:3f:68:59:f1:fe:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:70:D6:5C:85:2C:F9:8C:B2:E6:CF:79:D6:E9:F5:AF:74:59:30:3B
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/WXDWXIUs-Yyy5s951un1r3RZMDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:ce:33:66:78:c4:82:30:19:b5:7d:45:70:5b:85:53:7e:a6:
c9:c1:58:83:41:93:14:e8:02:d4:37:2b:9a:ce:f3:52:53:d4:
24:4f:af:44:9c:1b:f2:bc:59:fe:28:76:47:dc:45:cd:b3:dc:
fa:be:3f:db:ed:98:d3:db:96:26:cf:03:b4:5b:db:1b:22:6b:
5b:61:d8:39:78:84:93:9e:b7:00:33:25:fe:8a:2d:7c:0e:72:
21:11:57:f8:83:00:26:10:40:f0:b9:fb:d4:00:7f:68:bb:b9:
d5:45:9c:45:a3:58:58:34:f0:cd:9f:00:ed:cb:66:92:23:89:
2a:f6:82:e6:3b:ad:ec:4a:63:cb:b2:a8:d1:60:e9:00:c3:7d:
4f:3a:28:2d:21:9a:54:df:a4:04:30:8d:23:47:00:d7:17:c6:
7c:cb:15:ef:da:04:c0:59:54:19:3f:f7:40:20:f6:4d:ec:53:
4a:f8:5f:d0:df:de:be:6c:d6:b3:aa:08:58:0f:22:f9:ec:16:
20:31:d6:10:3e:36:53:62:7f:a3:94:70:90:3f:2d:7f:59:e7:
19:c2:8e:b0:48:a8:98:c0:22:e4:90:a5:5b:73:89:06:1e:c4:
9e:b4:e8:63:86:e5:46:85:4e:5c:53:6d:7e:7c:b8:10:f0:17:
3f:cb:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:59 2024 by rpki-client on console-ams.rpki-client.org