Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/W00g9_C64buOZr--6T2wJ7U-n7U.roa
File: W00g9_C64buOZr--6T2wJ7U-n7U.roa (raw, json)
Hash identifier: IqqR238kkWMI8DsK19YDBq3G3o7V9oj8T05DfkSvCEQ=
Subject key identifier: 5B:4D:20:F7:F0:BA:E1:BB:8E:66:BF:BE:E9:3D:B0:27:B5:3E:9F:B5
Certificate issuer: /CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Certificate serial: 01898688E917D32A3FC9F6E30337E5C7C92C
Authority key identifier: 7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/W00g9_C64buOZr--6T2wJ7U-n7U.roa
Signing time: Mon 24 Jul 2023 06:14:26 +0000
ROA not before: Mon 24 Jul 2023 06:14:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8823
IP address blocks: 94.154.2.0/24 maxlen: 24
193.35.80.0/22 maxlen: 22
2a07:2680::/29 maxlen: 29
2a0d:6140::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:88:e9:17:d3:2a:3f:c9:f6:e3:03:37:e5:c7:c9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c16e9d57efdacd3f7bc7e98496b719fadc5ae48
Validity
Not Before: Jul 24 06:14:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b4d20f7f0bae1bb8e66bfbee93db027b53e9fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:6d:dd:c1:be:9b:dc:1a:2a:56:c7:d5:53:df:
c6:17:4b:59:8e:81:f4:fa:2b:49:55:eb:67:0f:64:
03:d5:18:21:67:cf:d6:3e:61:52:86:d0:76:00:01:
c3:06:39:a6:cb:83:5a:68:4e:91:3d:b1:88:72:8f:
77:da:9b:7a:49:1c:d1:3e:18:19:89:39:c9:bf:e1:
62:2c:56:a4:f5:56:2f:5b:ec:ac:5d:9a:59:37:52:
39:0a:fc:95:c7:a7:58:9d:55:9c:f6:44:f2:69:de:
e3:3d:d1:62:58:79:32:e4:ba:69:3d:30:ca:31:8b:
82:90:11:b2:2a:4c:ee:fe:7c:e5:4f:ba:c6:b2:6f:
73:da:ab:40:ea:32:83:7b:4b:aa:ac:e3:96:b0:6c:
2c:3e:6b:62:24:fa:ff:b2:2d:d5:57:3b:77:a8:c4:
38:57:da:3d:a5:80:7b:28:19:bf:e5:b1:26:93:3f:
d1:3a:7e:21:9e:fc:92:50:73:a5:ec:e7:e0:7c:27:
e0:ba:ba:ac:24:71:76:9c:c0:44:05:df:f0:3b:dc:
22:29:28:3d:ce:86:9e:3d:65:99:2a:5c:71:7c:dd:
7e:be:85:fd:d4:91:36:d4:e1:5b:ed:51:67:25:bc:
bc:5f:ad:a5:9b:34:f8:69:38:6c:ba:80:49:b8:4e:
12:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4D:20:F7:F0:BA:E1:BB:8E:66:BF:BE:E9:3D:B0:27:B5:3E:9F:B5
X509v3 Authority Key Identifier:
keyid:7C:16:E9:D5:7E:FD:AC:D3:F7:BC:7E:98:49:6B:71:9F:AD:C5:AE:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBbp1X79rNP3vH6YSWtxn63Frkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/W00g9_C64buOZr--6T2wJ7U-n7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f197d0-a540-4882-a67a-b8a232eff2f6/1/fBbp1X79rNP3vH6YSWtxn63Frkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.2.0/24
193.35.80.0/22
IPv6:
2a07:2680::/29
2a0d:6140::/29
Signature Algorithm: sha256WithRSAEncryption
6d:3f:b2:8c:aa:b8:02:ee:b5:0f:91:2d:21:70:4d:46:c6:a0:
c1:5d:56:44:16:2c:e0:33:5e:46:3a:b7:78:99:93:5f:81:dc:
7d:c6:6e:30:66:23:6e:04:7c:9a:94:f1:6f:d6:84:d0:d6:f7:
35:e7:7c:25:5b:9d:cb:24:c6:b5:c6:9b:e9:29:50:25:9e:ca:
16:a8:2b:04:30:4c:83:0b:46:53:e9:d5:02:10:8e:6e:e6:82:
b3:9d:0b:47:84:18:3c:4f:1f:d2:b0:10:de:ea:0b:18:46:57:
9c:79:6e:9b:82:0c:74:dc:72:a4:14:59:68:52:06:ff:de:d7:
e0:5e:1d:c1:f6:d3:3e:12:2e:be:ab:ac:e7:47:15:6d:c7:43:
78:cb:f5:cf:12:8a:07:4a:ce:26:fe:f9:fc:96:32:ce:b0:00:
7d:b3:47:08:36:82:11:df:b2:ac:0b:49:0d:ce:b1:63:dd:a7:
01:4b:fa:c2:69:17:bf:cb:a0:a2:fc:ea:cb:4d:17:51:b5:a1:
4f:52:4e:21:1e:c6:e3:1a:ba:5c:fb:7f:0f:98:51:0b:d8:32:
ee:4e:c5:a9:3c:63:89:f5:56:f9:5c:5c:b0:e0:b8:62:f1:08:
e6:cc:d2:ce:46:a0:51:dc:48:13:87:90:8b:ba:4a:d6:59:9c:
c8:6e:06:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 30 08:36:14 2023 by rpki-client on console-fra.rpki-client.org