Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WuMyCHillxM7tK6XE7LFCzRIXSw.roa
File: WuMyCHillxM7tK6XE7LFCzRIXSw.roa (raw, json)
Hash identifier: Q1Y7L9bHwt+UJxishDcAOQcJ5Lim6PINg3iyggFDLZE=
Subject key identifier: 5A:E3:32:08:78:A5:97:13:3B:B4:AE:97:13:B2:C5:0B:34:48:5D:2C
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018691FAC17E3460186E20B42131DD76A152
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WuMyCHillxM7tK6XE7LFCzRIXSw.roa
Signing time: Mon 27 Feb 2023 08:26:15 +0000
ROA not before: Mon 27 Feb 2023 08:26:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39650
IP address blocks: 188.240.196.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:91:fa:c1:7e:34:60:18:6e:20:b4:21:31:dd:76:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Feb 27 08:26:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae3320878a597133bb4ae9713b2c50b34485d2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3c:c6:97:ee:22:11:26:42:38:d0:e9:b4:4e:
a3:37:2b:2b:e7:a5:ba:01:53:a4:95:62:03:9a:8e:
86:b1:f9:2d:96:c9:d4:bf:9f:e7:8c:21:38:5f:3a:
bb:87:ce:84:f8:65:18:7d:5a:06:06:90:e9:ef:61:
0c:44:4e:7b:5e:42:49:74:60:43:0c:98:6d:18:bd:
e6:b6:05:5a:d2:c0:24:58:18:7f:be:82:54:e2:2d:
13:22:93:d6:27:7a:48:a2:d4:c5:f8:50:97:48:1c:
9f:39:79:f8:b4:2e:09:b8:f2:d3:95:93:07:66:ba:
13:f7:f4:ba:ea:20:be:7a:bf:37:47:48:68:23:eb:
3d:b3:08:2b:e1:cf:21:07:7d:ff:d9:4c:a7:6f:e8:
a8:88:9d:4a:1a:20:f3:83:88:16:ff:6b:5c:1c:15:
71:52:c9:6a:78:bd:7b:c5:f9:4c:77:50:21:0b:2b:
c2:23:ac:20:8e:f4:79:50:42:9f:5c:8d:38:d5:3f:
3b:e0:8a:58:55:af:12:ca:95:4b:69:0d:d3:eb:05:
bd:dd:f6:76:be:42:b0:18:4a:c7:55:a8:b3:61:01:
ab:85:17:1a:6b:81:a8:2b:ee:14:52:82:4f:53:08:
8b:62:96:28:4d:41:a2:79:6b:21:4a:6b:91:65:da:
e8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:32:08:78:A5:97:13:3B:B4:AE:97:13:B2:C5:0B:34:48:5D:2C
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WuMyCHillxM7tK6XE7LFCzRIXSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.215.0/24
89.46.217.0/24
188.240.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:84:7e:75:1d:55:59:48:93:be:ff:21:aa:d0:18:bc:2e:2d:
d2:2c:69:0b:3f:86:7f:22:c8:b0:f4:6d:3a:be:5f:5b:f6:de:
2c:ed:80:50:77:3c:58:e8:53:ae:1b:41:c2:49:f8:c9:2d:43:
fb:e9:d8:90:9a:15:ff:a8:ac:a9:34:8b:ad:64:8a:a1:c1:c5:
a4:b2:1f:54:d8:ea:3c:3a:02:fe:95:ea:3a:d7:8b:9d:5c:09:
4b:02:72:0d:02:bf:e5:cd:1d:ce:6d:02:3c:7e:78:96:a3:cf:
74:08:53:28:38:f1:5e:e1:ed:4f:dd:54:54:53:48:2d:60:34:
d4:c6:b3:4d:a3:1e:38:a6:db:ff:73:36:de:c8:82:0a:f4:f1:
75:a9:28:27:05:21:4a:4e:ca:b2:e6:e9:fb:68:f5:ae:34:02:
e7:0a:da:91:e8:08:fb:28:4e:26:ac:6e:06:e3:1e:64:8d:ee:
cc:33:f6:fe:5a:0e:07:9e:1b:e0:8e:74:d7:47:9e:aa:be:71:
60:9f:23:39:3b:8f:84:c2:2e:f2:8b:1c:2b:84:69:37:02:53:
f7:81:51:c8:3a:46:10:9f:28:49:4c:21:8b:7e:5e:f1:dd:29:
c9:50:d9:50:96:33:11:a9:b4:e1:62:fc:62:da:7e:11:08:b7:
64:be:47:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-fra.rpki-client.org