Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/WO_FOUaHuIFYBFI1oMQavxubvnk.roa
File: WO_FOUaHuIFYBFI1oMQavxubvnk.roa (raw, json)
Hash identifier: qmx66R1QfwueYthA+wnZNt9sLreoNIGOLl8KTQJYP0s=
Subject key identifier: 58:EF:C5:39:46:87:B8:81:58:04:52:35:A0:C4:1A:BF:1B:9B:BE:79
Certificate issuer: /CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Certificate serial: 018BA60DAFB46DD73BB95729F1AAB85C811D
Authority key identifier: 09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/WO_FOUaHuIFYBFI1oMQavxubvnk.roa
Signing time: Mon 06 Nov 2023 19:13:16 +0000
ROA not before: Mon 06 Nov 2023 19:13:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 91.238.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a6:0d:af:b4:6d:d7:3b:b9:57:29:f1:aa:b8:5c:81:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0957b23c83795bc35c30bc1365a30fdf3375ac89
Validity
Not Before: Nov 6 19:13:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58efc5394687b88158045235a0c41abf1b9bbe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:96:30:d0:14:ba:2b:63:1f:9c:a5:b4:90:d7:
0f:fe:2d:e2:24:42:fe:1f:2d:82:8c:60:82:1c:49:
a9:80:90:38:c7:65:41:58:9d:10:42:ad:cb:48:63:
31:be:e0:fe:ea:6b:cf:0f:bc:4d:ff:01:2e:3a:aa:
82:1d:00:da:a9:b4:95:36:95:50:0a:fe:63:fe:dc:
1b:28:fc:e0:ba:c0:a3:47:90:4c:57:a7:9c:7f:13:
e1:fd:06:58:99:53:7f:f7:97:d9:e3:67:76:0b:bc:
76:c1:dc:14:4c:28:7f:40:b5:0b:59:5e:b9:03:cb:
46:b2:08:a4:98:4d:00:cb:ac:0e:8c:2c:51:b7:e7:
ea:c0:a3:22:18:99:f6:2c:67:30:2f:9a:57:a3:e8:
d7:09:ae:a6:6c:c1:2e:1d:45:d5:8b:2a:53:78:b2:
e4:59:8b:03:2d:79:fa:11:76:49:af:54:68:f9:93:
a3:ab:ba:a7:eb:2f:d0:8f:14:73:11:d7:92:be:a4:
c6:08:03:91:2e:bb:56:29:61:7b:30:e6:fe:56:22:
f7:ad:68:f1:69:fc:09:00:be:6d:76:e3:9a:28:88:
d4:ac:7e:af:86:e7:a1:5f:77:df:6d:e8:0f:27:5b:
d3:d7:25:33:2e:8b:c6:64:4b:14:4c:19:d4:13:a5:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:C5:39:46:87:B8:81:58:04:52:35:A0:C4:1A:BF:1B:9B:BE:79
X509v3 Authority Key Identifier:
keyid:09:57:B2:3C:83:79:5B:C3:5C:30:BC:13:65:A3:0F:DF:33:75:AC:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CVeyPIN5W8NcMLwTZaMP3zN1rIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/WO_FOUaHuIFYBFI1oMQavxubvnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/64984d-ae8f-4cf9-a3c3-1e92c7bdc582/1/CVeyPIN5W8NcMLwTZaMP3zN1rIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.209.0/24
Signature Algorithm: sha256WithRSAEncryption
26:48:91:f4:66:6e:ea:d3:3d:86:d8:73:70:c3:3c:5e:29:84:
81:d5:37:c2:b1:b3:04:c8:cd:01:80:c7:f7:0b:48:6c:e9:91:
72:09:92:d5:3b:a1:c7:db:19:fa:6f:39:b8:ee:92:58:20:4a:
9e:70:40:93:ae:72:13:99:09:32:9c:ec:f8:d1:16:78:ea:91:
99:a8:32:4b:34:30:fb:2d:f1:69:6c:e2:8e:29:53:32:aa:1c:
f8:da:b4:4e:9a:38:73:3c:83:b2:f9:2e:c6:06:de:bc:73:f8:
30:3a:ee:4a:67:2d:3c:64:19:89:f9:cc:98:79:0c:a2:b4:27:
48:22:e9:27:30:a8:9b:7e:0e:83:6e:2c:59:94:a7:c0:d4:2d:
76:dd:fa:82:74:1b:bb:f7:81:f8:62:33:3c:4d:c3:b6:24:d4:
d6:38:1a:78:f7:33:17:18:cc:9d:39:f2:64:80:0d:75:e3:3b:
d4:87:56:8d:cd:fd:7a:6f:ca:45:d2:ea:64:ef:44:32:ce:bb:
9a:bf:60:ef:cc:42:82:bd:71:98:95:64:f1:98:93:30:10:9c:
4c:6f:8f:52:28:bc:e4:da:7a:da:eb:1a:db:7f:10:5f:46:87:
85:2f:52:84:f5:2c:0b:02:e1:c7:1f:a0:3d:79:af:c0:aa:8c:
22:a0:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:05 2024 by rpki-client on console-ams.rpki-client.org