Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/wViazHT6mq1cHqBLDfDMWCOQuco.roa
File: wViazHT6mq1cHqBLDfDMWCOQuco.roa (raw, json)
Hash identifier: SCO0C0BFb5eU2qxjkdxiRiDVDzKhzW4H6FogYp7GT44=
Subject key identifier: C1:58:9A:CC:74:FA:9A:AD:5C:1E:A0:4B:0D:F0:CC:58:23:90:B9:CA
Certificate issuer: /CN=677d4ea2c016ce2797af7aeb737d132875669f12
Certificate serial: 0185710BE8A08B28C5FFF3BA806641939923
Authority key identifier: 67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/wViazHT6mq1cHqBLDfDMWCOQuco.roa
Signing time: Mon 02 Jan 2023 05:54:43 +0000
ROA not before: Mon 02 Jan 2023 05:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209985
IP address blocks: 193.160.94.0/24 maxlen: 24
193.160.95.0/24 maxlen: 24
193.160.92.0/24 maxlen: 24
193.160.93.0/24 maxlen: 24
2a0d:ed40::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0b:e8:a0:8b:28:c5:ff:f3:ba:80:66:41:93:99:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=677d4ea2c016ce2797af7aeb737d132875669f12
Validity
Not Before: Jan 2 05:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1589acc74fa9aad5c1ea04b0df0cc582390b9ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f8:6d:f0:47:80:be:20:f3:05:81:bf:9c:1b:
86:3a:f9:06:16:6c:10:9b:f0:98:cd:8f:3f:9b:a4:
d6:dd:ff:82:64:5d:e5:d2:d3:cf:d8:b8:d0:82:2f:
96:77:63:61:73:33:01:12:6c:63:32:d6:53:ed:51:
0e:04:ff:d9:9f:b0:33:e8:db:71:d0:d5:46:b0:ef:
45:3f:a9:e2:30:87:86:41:d8:04:7c:ae:73:4c:30:
21:17:8b:59:91:70:14:a9:7c:3a:13:a7:07:e8:a4:
93:9f:51:b1:54:14:9b:af:7e:4e:e6:fd:cb:8e:2f:
92:45:be:02:d6:49:55:50:be:6f:19:ec:10:d8:b3:
8c:72:51:72:37:be:9d:81:81:0f:78:d9:c8:20:df:
88:17:f7:dc:5c:13:be:93:42:c4:2c:31:5c:52:73:
45:43:2e:c8:d3:bd:ed:0d:35:91:33:d6:e1:0c:1f:
0c:9c:61:fb:50:56:ad:0c:50:63:7b:c9:bc:e4:9d:
a4:7b:9b:c5:b4:74:21:64:7e:ac:0a:49:9a:b4:91:
8b:78:77:d5:5f:65:df:71:4d:c6:7c:c3:49:e0:33:
e1:42:88:f6:d3:21:32:90:72:01:46:79:a1:ae:a6:
2a:f2:ee:88:2b:3b:b4:a5:f5:e8:a9:09:0a:ab:c8:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:9A:CC:74:FA:9A:AD:5C:1E:A0:4B:0D:F0:CC:58:23:90:B9:CA
X509v3 Authority Key Identifier:
keyid:67:7D:4E:A2:C0:16:CE:27:97:AF:7A:EB:73:7D:13:28:75:66:9F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z31OosAWzieXr3rrc30TKHVmnxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/wViazHT6mq1cHqBLDfDMWCOQuco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/4aeee7-45c0-4213-8085-b8f3f09eaade/1/Z31OosAWzieXr3rrc30TKHVmnxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.92.0/22
IPv6:
2a0d:ed40::/32
Signature Algorithm: sha256WithRSAEncryption
24:6a:0f:0e:7a:0a:e8:d6:b6:ca:f7:26:90:04:00:90:8a:ee:
19:d2:a0:11:c0:d7:f8:d2:43:08:c4:e4:6d:19:c8:1f:fd:32:
49:9c:28:b3:e5:a0:8b:cf:73:14:0a:a8:f0:61:65:d8:4f:2a:
c5:5a:7c:a0:c1:ec:34:e9:40:47:2a:97:0e:57:85:60:f7:d2:
b5:54:cb:e0:8f:46:00:c1:5f:39:73:79:a3:4b:de:41:c8:d3:
5f:a6:eb:28:6a:8e:ab:5f:f9:09:aa:9b:0d:31:24:2b:90:0e:
24:55:11:09:07:45:59:af:08:db:0d:31:00:39:2d:fd:98:19:
c4:41:3d:a0:19:93:0f:9f:55:fb:8a:99:83:c0:1a:0d:98:da:
57:ad:ae:30:6a:b2:ac:3a:2b:6d:1b:74:63:f6:3c:88:54:09:
60:91:86:15:74:57:d2:ef:69:94:72:e5:7f:49:d4:ba:a5:11:
17:db:de:4d:bb:bc:a5:f6:d3:25:00:7c:6e:47:64:17:c5:5d:
d9:55:e1:b3:8c:8f:eb:ce:78:30:2a:24:56:62:06:32:cb:21:
e1:ea:51:7f:ac:f4:56:3d:e4:97:e1:91:83:3f:d8:95:8e:ca:
f3:f5:4e:f8:c1:3e:a1:ef:b3:37:42:7d:a9:25:30:ec:39:a0:
4d:71:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:17 2023 by rpki-client on console-ams.rpki-client.org