Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WizC8DVuclhhryXluo3hkIo9onI.roa
File: WizC8DVuclhhryXluo3hkIo9onI.roa (raw, json)
Hash identifier: t+z41rt5qZbOGUrn4lyoKHBEq+8JyzQzt52eaj4HUd4=
Subject key identifier: 5A:2C:C2:F0:35:6E:72:58:61:AF:25:E5:BA:8D:E1:90:8A:3D:A2:72
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018571D7CD3785DD72727CE13A1E73AAF0FA
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WizC8DVuclhhryXluo3hkIo9onI.roa
Signing time: Mon 02 Jan 2023 09:37:26 +0000
ROA not before: Mon 02 Jan 2023 09:37:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8100
IP address blocks: 188.255.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:cd:37:85:dd:72:72:7c:e1:3a:1e:73:aa:f0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 2 09:37:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a2cc2f0356e725861af25e5ba8de1908a3da272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c3:f5:e4:9f:12:ed:5a:10:72:4d:46:53:ab:
48:9a:74:b1:01:c8:f9:35:6a:3c:11:02:ab:78:c7:
f9:f1:fa:fe:f3:36:86:2f:5f:0e:6a:20:bd:4b:86:
80:d1:f8:30:ac:c5:0f:89:76:fd:53:fe:f2:fc:57:
c5:e1:5d:fe:01:d2:5b:3a:98:cf:54:ae:2f:88:37:
f9:cc:7e:0e:68:a0:10:a2:02:ad:22:21:04:0c:10:
d2:f1:18:d9:75:57:0a:6d:87:10:63:a8:4d:50:ae:
da:28:c6:f0:31:44:c6:ee:9e:55:59:8f:37:04:5d:
72:83:3a:64:96:5d:53:2a:84:aa:18:67:e3:bf:3f:
1b:34:26:2d:a2:99:7f:0b:3c:a2:f5:7b:c9:b6:41:
1d:52:1f:a2:56:0e:a6:fb:bf:1f:d5:b9:61:cf:33:
1e:aa:c6:53:34:51:65:33:77:96:e1:26:80:f1:a4:
1e:55:62:54:90:74:0a:81:42:30:48:a1:b4:86:fa:
44:2c:02:25:12:e7:50:58:dd:e1:4a:52:cc:48:8b:
07:d7:15:14:07:9d:71:0b:ad:0f:5a:48:73:08:c2:
ef:cb:81:c7:c2:1f:70:8d:ad:6a:9c:b9:82:40:09:
a2:28:71:e1:5b:05:34:f5:b2:31:64:2f:de:c1:96:
f9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:C2:F0:35:6E:72:58:61:AF:25:E5:BA:8D:E1:90:8A:3D:A2:72
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WizC8DVuclhhryXluo3hkIo9onI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.135.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5f:d9:ef:1f:4d:6d:53:b3:5b:a5:1b:da:1e:aa:40:19:0a:
dc:78:38:36:b4:63:86:98:12:79:a9:3c:f9:0f:aa:85:4e:69:
32:17:a1:01:1e:e9:1e:e7:dc:f9:57:e5:88:f1:68:cb:18:aa:
49:30:46:49:7c:d9:8f:d1:3d:0b:10:ca:07:47:41:8d:3b:bf:
36:ab:18:af:cb:73:83:d0:ab:30:59:61:63:e2:0e:fd:da:42:
49:ab:ff:04:1a:82:49:eb:7d:80:48:6b:24:21:ae:9f:f3:30:
c3:bf:b6:a9:e5:81:80:eb:f1:e6:fb:f6:c5:7f:c3:ce:db:7a:
27:d6:f3:a3:3b:5f:54:cb:fd:a9:3c:54:43:b6:26:f3:e1:46:
e5:5d:1c:92:7d:ee:a6:ce:a6:50:34:89:9d:30:ef:7a:a5:c7:
a6:3e:ba:32:40:d6:d2:9a:38:13:54:de:66:97:e0:6c:17:f8:
60:3d:b0:3f:a7:85:14:cc:96:b4:2f:21:0a:db:ce:67:b6:1e:
c4:4b:4b:61:be:f1:07:7d:7b:d3:01:6a:98:dd:77:44:b7:92:
8c:80:bb:89:e7:e5:75:8e:90:ed:6a:f4:85:9c:c9:e1:9b:81:
44:72:d8:4f:85:9c:f8:0a:e9:81:6e:53:ca:39:b6:12:74:21:
86:09:25:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:19 2023 by rpki-client on console-ams.rpki-client.org