Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/Wik89E45pU4y2FFsBVv6b4O9vrM.roa
File: Wik89E45pU4y2FFsBVv6b4O9vrM.roa (raw, json)
Hash identifier: ctv/HUejPIWm08F/My1gtmtJaS0AKnhldgbY1DKLgp4=
Subject key identifier: 5A:29:3C:F4:4E:39:A5:4E:32:D8:51:6C:05:5B:FA:6F:83:BD:BE:B3
Certificate issuer: /CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Certificate serial: 01880FDAACF3E59FE84886EE36F9FC28E41A
Authority key identifier: AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/Wik89E45pU4y2FFsBVv6b4O9vrM.roa
Signing time: Fri 12 May 2023 12:06:09 +0000
ROA not before: Fri 12 May 2023 12:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208381
IP address blocks: 194.124.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:da:ac:f3:e5:9f:e8:48:86:ee:36:f9:fc:28:e4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac53cbeb715084b322a1a149c96e09c40ed6d883
Validity
Not Before: May 12 12:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a293cf44e39a54e32d8516c055bfa6f83bdbeb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:98:5e:6a:cb:a2:e1:44:ad:dc:84:89:e8:aa:
c3:61:6a:81:e5:97:da:d7:e0:27:23:f6:52:a1:7b:
fd:17:e0:11:71:ad:7e:1f:b2:c2:4b:39:0e:ba:00:
51:c9:62:b4:cb:af:3d:7f:91:14:6a:8c:64:51:4d:
61:fe:16:ce:70:ca:8d:4c:76:40:1d:48:f7:e5:3e:
db:87:41:3b:d5:40:ff:fc:82:43:2b:af:6f:63:50:
d7:34:2b:7f:17:f2:73:6c:51:0a:53:89:e7:68:6f:
7c:4d:a2:6a:38:94:fd:6d:08:a9:be:c6:20:1e:6d:
e8:02:ee:a0:3e:a0:4b:bd:bb:d7:30:8c:41:9f:d5:
e6:7a:53:ca:12:25:c1:46:2a:63:5f:c5:7c:dc:9d:
b8:c8:c6:61:10:a1:14:13:38:c9:3f:61:0e:7e:19:
83:fd:17:6f:4e:c6:e5:40:47:63:a5:8c:fe:0f:16:
59:82:34:3a:05:48:52:fb:0b:a2:42:e3:3a:8a:a8:
4f:cc:36:ea:0c:83:54:c6:68:6e:a2:ea:6b:f4:1d:
7a:90:01:0c:d9:e2:71:c3:bd:66:5f:e1:5f:f5:db:
44:26:8e:d0:b8:21:71:32:2c:76:83:10:c6:97:f9:
9b:be:30:be:30:77:e4:0f:92:e7:ff:b4:a0:86:20:
89:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:29:3C:F4:4E:39:A5:4E:32:D8:51:6C:05:5B:FA:6F:83:BD:BE:B3
X509v3 Authority Key Identifier:
keyid:AC:53:CB:EB:71:50:84:B3:22:A1:A1:49:C9:6E:09:C4:0E:D6:D8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFPL63FQhLMioaFJyW4JxA7W2IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/Wik89E45pU4y2FFsBVv6b4O9vrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/7ec8cb-369e-4bbb-b8b4-7aeadb45a237/1/rFPL63FQhLMioaFJyW4JxA7W2IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.254.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f6:d3:51:49:97:e1:e5:0c:65:25:5b:41:4c:48:29:e9:8e:
fd:7d:38:e9:6f:f5:b0:bc:dd:6d:76:e4:b1:e9:78:8b:ae:13:
e6:25:35:6b:30:ea:ad:40:7e:41:f9:5c:b9:db:ea:1d:35:85:
6b:5f:d4:2e:61:9c:95:cc:90:49:7d:ed:15:96:29:2c:28:c9:
d4:19:6d:85:88:88:8d:a0:c6:de:33:6d:71:61:53:c5:e7:8a:
e3:a5:d6:38:2c:d6:ed:e8:67:eb:90:2d:0a:8f:e3:3a:eb:33:
69:df:5c:17:58:8a:53:5d:f3:7a:20:e4:58:97:1a:17:a4:88:
2d:8b:eb:01:83:70:d9:cc:92:d3:4b:68:40:9a:a6:a7:4d:e0:
e4:4b:b4:7b:5c:5d:af:b7:1d:5d:75:90:ed:3e:d4:93:f7:4a:
fb:eb:ff:df:be:37:0d:68:ce:fb:04:a7:de:0e:d9:d7:98:a7:
8c:4e:eb:d4:72:ab:9d:a9:b7:8d:7a:32:6d:74:7c:dd:c0:b9:
9c:a8:0a:93:72:72:a4:58:fb:3d:b2:6c:7d:fb:88:cf:c1:a8:
9a:23:f8:7f:04:45:2c:f3:04:4a:5a:29:33:4e:48:78:2f:c6:
28:34:7e:02:16:27:f3:9f:f0:f0:a0:fd:e6:b2:f3:5f:3b:ca:
b0:bd:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:18 2024 by rpki-client on console-fra.rpki-client.org