Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/w0jbCZVy1-F2vBzrg2GgecAsRI0.roa
File: w0jbCZVy1-F2vBzrg2GgecAsRI0.roa (raw, json)
Hash identifier: QTE1XZtTwCqaXbKHQsGuFmWNwgQVoC8yeBM7ujnjLQM=
Subject key identifier: C3:48:DB:09:95:72:D7:E1:76:BC:1C:EB:83:61:A0:79:C0:2C:44:8D
Certificate issuer: /CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Certificate serial: 01856F66C42A4FA1139EA9D8C84E70AA3B8C
Authority key identifier: 95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/w0jbCZVy1-F2vBzrg2GgecAsRI0.roa
Signing time: Sun 01 Jan 2023 22:14:43 +0000
ROA not before: Sun 01 Jan 2023 22:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 193.56.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:c4:2a:4f:a1:13:9e:a9:d8:c8:4e:70:aa:3b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951c8b406e8299a7294dd7224570fc32b629dc6b
Validity
Not Before: Jan 1 22:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c348db099572d7e176bc1ceb8361a079c02c448d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b3:4e:a6:1a:e6:e5:e3:00:ec:b4:91:f6:45:
71:6b:65:82:d5:c2:35:f1:91:37:cc:c7:ea:17:98:
44:32:be:13:0e:b3:01:2c:af:e5:c0:a8:f6:39:2b:
e9:6d:91:83:6b:38:7c:ca:c7:6c:9c:b7:51:4c:32:
b3:0a:06:7d:ba:87:25:39:5f:4b:c3:11:1a:f9:a9:
ea:2c:c3:ba:db:5d:9c:1a:db:fa:5f:e7:c2:96:56:
75:df:b4:4e:87:95:68:fc:c8:fb:e0:af:df:5d:73:
10:56:e7:39:46:70:0e:b5:eb:6c:a5:56:57:31:d9:
3e:98:0a:5c:ad:68:2c:55:77:d9:ac:f1:cf:0c:15:
0c:5e:fd:9e:55:b3:0e:f1:18:6a:01:9a:43:96:19:
6b:70:53:22:d5:33:d8:ca:29:8a:6b:84:8b:ec:77:
04:1e:de:d0:67:3d:f3:3e:65:35:ea:55:2a:b7:2c:
c6:91:3c:12:ce:ae:43:d2:08:5c:b8:11:ba:0b:d0:
8c:e3:92:5d:76:16:51:ef:6b:25:96:aa:e9:ac:d4:
ff:a8:94:70:17:59:43:dd:bb:88:6b:34:06:bc:fb:
0b:f9:a7:86:72:2a:ea:1a:b3:f9:42:4e:17:be:5b:
0d:aa:fc:44:08:be:6c:f5:7c:cd:a6:e5:23:03:9b:
84:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:48:DB:09:95:72:D7:E1:76:BC:1C:EB:83:61:A0:79:C0:2C:44:8D
X509v3 Authority Key Identifier:
keyid:95:1C:8B:40:6E:82:99:A7:29:4D:D7:22:45:70:FC:32:B6:29:DC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lRyLQG6CmacpTdciRXD8MrYp3Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/w0jbCZVy1-F2vBzrg2GgecAsRI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d226bb-7210-4c92-9312-33b36224d6d7/1/lRyLQG6CmacpTdciRXD8MrYp3Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.116.0/24
Signature Algorithm: sha256WithRSAEncryption
36:3b:03:f7:05:c9:d6:cc:f3:3a:83:3e:e2:e5:d8:07:b9:97:
a4:d6:5d:5b:aa:8f:2c:32:51:32:c4:c1:0c:7c:f0:e1:8c:9a:
3b:f0:24:59:0d:c9:13:c4:5b:3d:d9:77:8a:95:08:63:ba:76:
cd:fb:e0:39:d9:81:54:e5:d3:c2:fb:c9:b2:7a:70:fd:02:32:
50:ad:01:9b:aa:e1:87:da:b9:6b:2e:02:e1:9b:81:eb:f4:0a:
e1:3a:de:e7:35:64:d0:f6:59:b2:bb:ce:57:c4:1b:6d:83:78:
e4:17:18:9f:cc:04:a2:58:2c:c5:70:71:4f:6f:6f:a9:03:35:
14:4a:30:4e:0f:cc:a5:a6:09:29:56:df:72:1c:d2:48:d6:a0:
d3:ab:1f:42:72:c8:c8:58:d5:b8:61:2a:1a:8a:45:0e:51:f9:
2d:a8:b1:1e:f4:24:13:8c:dd:ba:38:f0:1e:4e:3b:11:00:9a:
f3:dc:ed:a3:45:ea:21:ee:a2:b6:ec:35:17:f4:be:0c:20:d1:
1e:28:5f:8f:40:df:91:ba:9b:b2:da:a5:9b:db:c6:29:08:d0:
58:f9:5e:17:39:a5:27:be:c9:ae:69:48:5b:73:88:b9:60:16:
c0:6e:5d:e4:21:ea:dd:49:fa:46:f4:ba:4a:53:c9:78:1c:dc:
8f:31:e7:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:46 2024 by rpki-client on console-fra.rpki-client.org