Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/W_xkiv18kSH6vhGjKqwQu9tc0VQ.roa
File: W_xkiv18kSH6vhGjKqwQu9tc0VQ.roa (raw, json)
Hash identifier: Ywo+pcMnHB6jenUkI1Rpbwkv7HOb8F12LYtM3m2wBHs=
Subject key identifier: 5B:FC:64:8A:FD:7C:91:21:FA:BE:11:A3:2A:AC:10:BB:DB:5C:D1:54
Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039
Certificate serial: 01888B086F1B67C839B9E2C65D14735F3621
Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/W_xkiv18kSH6vhGjKqwQu9tc0VQ.roa
Signing time: Mon 05 Jun 2023 10:09:25 +0000
ROA not before: Mon 05 Jun 2023 10:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209117
IP address blocks: 46.172.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:08:6f:1b:67:c8:39:b9:e2:c6:5d:14:73:5f:36:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039
Validity
Not Before: Jun 5 10:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bfc648afd7c9121fabe11a32aac10bbdb5cd154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:57:04:c7:44:a1:b3:0f:18:44:ac:23:02:3c:
8e:f3:c6:1a:86:16:bc:2d:0a:bd:39:45:3c:20:a7:
3d:14:aa:6c:de:62:ab:40:e2:6c:1c:22:04:e6:6e:
21:b9:f4:0e:60:0e:d2:07:4e:8c:be:ea:d1:47:cb:
6e:12:79:09:a9:3b:8d:1b:49:f4:03:d6:2c:09:b6:
27:55:fb:15:cd:97:f4:3b:5e:39:f8:19:a8:44:ae:
19:92:97:71:d3:29:98:28:b0:15:5f:30:1d:39:97:
74:07:ae:9a:5c:91:5b:2f:2e:82:52:b6:6e:43:73:
77:ca:95:de:66:75:eb:26:e0:c5:03:78:53:cc:25:
d7:5c:35:d9:24:84:b1:70:1b:e1:36:00:70:0a:36:
74:9d:62:a9:9c:d2:48:9b:a9:95:4f:bf:47:ce:57:
6e:06:2d:63:1e:d6:44:dd:3b:29:95:94:42:c6:1e:
bf:02:c7:84:96:a2:f4:51:95:b8:c0:b5:23:b0:2f:
30:3a:c8:45:27:f2:75:9d:5b:0c:df:67:f7:9d:4d:
4a:7c:13:ce:84:97:1c:58:73:cd:13:e8:0d:17:fa:
3c:ca:16:5b:dd:4a:f4:96:62:9a:7e:49:e4:d9:e7:
20:cd:57:bc:42:ef:01:ef:e2:a0:35:fc:04:54:45:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FC:64:8A:FD:7C:91:21:FA:BE:11:A3:2A:AC:10:BB:DB:5C:D1:54
X509v3 Authority Key Identifier:
keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/W_xkiv18kSH6vhGjKqwQu9tc0VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.172.78.0/24
Signature Algorithm: sha256WithRSAEncryption
87:18:57:bf:30:c2:c2:01:8a:7a:56:78:cb:d2:e2:c1:2a:d0:
fb:96:9a:69:25:47:58:f9:32:d6:04:4c:4d:5a:30:c8:e8:f9:
2e:90:37:83:a4:8d:b2:05:1e:05:2d:ef:0b:86:cf:b8:04:c5:
c3:db:96:0a:d8:c8:c3:c4:93:f3:aa:8c:ba:e4:de:40:94:9d:
b8:bc:e0:e3:46:4a:12:8e:40:90:43:42:80:9a:19:e9:7a:e4:
03:d7:ba:85:94:c5:c6:2c:a1:7e:af:0c:c5:3a:b5:e8:d9:a7:
ea:61:73:0c:d7:ac:4e:5d:93:e5:56:7b:84:dd:62:3d:19:52:
b8:27:09:66:31:5c:99:e3:f7:7b:64:96:d0:c8:14:99:7b:96:
c1:29:41:7c:b8:41:8c:00:aa:61:eb:30:5d:73:62:ff:8a:d6:
77:3e:4b:c5:95:16:d1:48:40:d8:2c:4d:3c:7c:b1:16:4d:67:
76:00:87:4d:0d:b8:45:e2:1f:d5:f1:7c:6a:20:20:26:e7:53:
3c:c1:61:ff:0c:73:94:e1:3a:77:99:b5:10:14:76:8b:01:69:
60:0b:b4:9a:b9:14:91:fd:19:cb:7e:d5:c7:27:58:a0:27:7b:
80:f5:5b:6f:9b:4e:49:bd:1f:a7:3b:52:5d:90:c8:7e:df:0e:
04:bc:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:26 2024 by rpki-client on console-fra.rpki-client.org