Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WNZGF_x9EaQsNy8w5trlmKd58OU.roa
File: WNZGF_x9EaQsNy8w5trlmKd58OU.roa (raw, json)
Hash identifier: kPNCq7mkVN5q9y9tZzK3OfUYXO3m7/kF3DpkYholceQ=
Subject key identifier: 58:D6:46:17:FC:7D:11:A4:2C:37:2F:30:E6:DA:E5:98:A7:79:F0:E5
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0188E8E6C0D6694AB7B77AE4BEE6B81D5463
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WNZGF_x9EaQsNy8w5trlmKd58OU.roa
Signing time: Fri 23 Jun 2023 15:36:56 +0000
ROA not before: Fri 23 Jun 2023 15:36:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 213.209.145.0/24 maxlen: 24
213.209.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e8:e6:c0:d6:69:4a:b7:b7:7a:e4:be:e6:b8:1d:54:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Jun 23 15:36:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58d64617fc7d11a42c372f30e6dae598a779f0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b0:a5:7d:e7:43:8c:54:1f:4d:c2:76:3a:1f:
f9:62:89:e9:dd:ee:40:f0:51:9d:76:1e:dc:12:54:
03:b5:53:95:85:7a:fd:8f:43:21:78:be:9e:ac:52:
97:16:e0:b9:c1:bf:69:f6:a5:40:ec:87:e4:22:6f:
64:21:ba:d6:f2:1b:14:76:a4:d6:45:4a:5b:71:8b:
9d:0d:ef:43:2c:21:cf:cb:6e:52:3a:34:38:fd:1b:
40:27:e0:10:53:41:fb:57:89:41:24:21:36:e9:f1:
8c:b1:40:15:e1:8d:9f:73:db:d7:7c:ff:31:21:79:
92:77:11:a2:24:cd:96:a2:4c:7c:d6:a8:4e:99:31:
c2:f9:db:a8:51:bb:89:9f:d2:de:10:51:dc:fc:c0:
ec:6b:8b:ae:3f:a1:12:c3:09:20:f4:fd:87:9c:c0:
e2:c3:d8:37:4f:a6:de:30:44:9b:6e:57:cd:5f:79:
06:9d:40:c8:ee:1b:96:ee:91:df:25:3d:61:30:a2:
37:c2:80:bc:66:61:d7:3a:e5:7f:ad:d9:b1:85:f9:
95:d4:d5:53:36:84:d4:f8:c8:3a:68:82:36:14:b6:
0a:cf:e4:63:6a:14:f1:a4:09:1f:29:0f:49:ed:45:
8c:16:c4:1a:10:1a:89:9c:3e:e3:e9:cb:eb:79:19:
a2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D6:46:17:FC:7D:11:A4:2C:37:2F:30:E6:DA:E5:98:A7:79:F0:E5
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/WNZGF_x9EaQsNy8w5trlmKd58OU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.209.145.0/24
213.209.157.0/24
Signature Algorithm: sha256WithRSAEncryption
48:50:6d:7d:c0:4c:f2:d2:2f:c8:74:2a:b4:19:0a:26:a2:61:
7c:74:a9:03:fd:04:07:bf:17:77:af:23:5d:28:2e:a2:25:c9:
b8:20:79:29:fa:de:46:2b:59:d8:35:90:fc:34:9c:9d:52:43:
e6:73:d5:a1:10:96:ef:ba:ed:4e:80:f1:8d:e2:93:12:df:4c:
66:c2:b2:7e:e3:92:c0:b6:53:b3:5a:52:25:b1:ee:b3:48:80:
cd:57:29:18:d2:f6:69:17:da:52:66:68:d9:2f:76:bf:49:7d:
47:cf:ff:6a:98:c2:55:6e:29:6a:d7:0a:2c:50:01:39:31:8c:
bc:aa:86:7a:d4:d2:b4:65:f8:73:34:84:67:93:76:c7:12:8a:
86:f5:5f:e7:07:d5:4e:c5:2f:39:db:1d:0d:6f:fe:e3:9c:c1:
04:8d:ee:ab:d0:95:8d:d2:81:e3:ea:29:33:f5:d4:12:da:a9:
e1:f4:67:02:79:2f:2b:8c:4c:78:d1:c3:62:ec:f5:24:70:d9:
14:38:7c:3a:b1:a4:55:05:b1:cb:1b:77:a1:4d:54:61:a7:52:
10:9c:38:e9:fe:bf:00:99:91:16:34:20:78:f9:50:26:73:7b:
23:b9:e2:e9:8d:2f:df:80:7a:a5:33:4b:f2:8d:70:ec:09:e3:
6b:19:1c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:08 2023 by rpki-client on console-ams.rpki-client.org