Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/wcn8Hj1r5_YLAXvPBljKLwQk2xo.roa
File: wcn8Hj1r5_YLAXvPBljKLwQk2xo.roa (raw, json)
Hash identifier: sMnWoHUwY9rRchna27APGXtkUzfuZSSqcslJMwWT0jU=
Subject key identifier: C1:C9:FC:1E:3D:6B:E7:F6:0B:01:7B:CF:06:58:CA:2F:04:24:DB:1A
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 018571555B44A0BAFC425CA081DB0AC5E5D2
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/wcn8Hj1r5_YLAXvPBljKLwQk2xo.roa
Signing time: Mon 02 Jan 2023 07:14:57 +0000
ROA not before: Mon 02 Jan 2023 07:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48437
IP address blocks: 94.232.176.0/21 maxlen: 21
178.54.128.0/17 maxlen: 17
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:5b:44:a0:ba:fc:42:5c:a0:81:db:0a:c5:e5:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jan 2 07:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1c9fc1e3d6be7f60b017bcf0658ca2f0424db1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6c:06:50:e1:4c:e4:80:db:5c:b6:4b:fb:3b:
65:d1:66:53:9f:74:af:7b:16:4c:b5:8b:3b:62:6e:
b9:88:5c:e4:41:01:ef:33:61:99:c0:84:01:ed:48:
04:37:1b:b1:40:68:bd:e6:97:e3:71:15:ab:de:f6:
74:8f:2b:e4:47:a0:3e:3d:4d:53:4f:35:62:44:dc:
2f:c8:29:9f:fc:24:c6:c7:39:90:88:c9:47:b2:9b:
9a:86:1d:00:5e:99:ba:ab:2a:b4:20:17:3a:65:fe:
05:7c:0f:af:de:b0:9a:33:24:17:a2:dc:4c:7b:15:
25:af:cf:cd:d7:e7:dd:61:c8:49:32:32:29:ba:61:
2b:ec:36:7c:f3:82:3f:35:ba:8c:15:d6:d8:b1:af:
77:ed:e6:72:42:1a:90:99:ce:c3:40:a2:7b:0e:48:
2e:25:81:54:98:71:eb:05:2a:bf:42:48:53:d9:e2:
e5:4d:bb:f8:0a:81:9d:91:d9:40:a9:b1:af:de:7e:
95:ad:f0:db:08:9b:69:69:50:82:f8:66:d5:9a:c6:
bc:f5:a5:2a:e2:8d:3a:e5:41:12:df:38:46:eb:0d:
58:3c:d0:d7:2b:05:6d:30:5e:92:d8:fb:77:d2:aa:
7c:47:39:64:ae:76:91:3a:79:51:bf:7b:ff:21:ec:
eb:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C9:FC:1E:3D:6B:E7:F6:0B:01:7B:CF:06:58:CA:2F:04:24:DB:1A
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/wcn8Hj1r5_YLAXvPBljKLwQk2xo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.176.0/21
178.54.128.0/17
Signature Algorithm: sha256WithRSAEncryption
56:68:55:7b:53:10:7b:0f:36:9c:3f:2b:7d:f0:92:da:5c:f3:
df:08:a1:9b:62:59:9f:a2:ec:72:e6:38:8e:a5:96:04:1b:8a:
bc:74:e8:f4:79:37:df:63:98:95:37:9b:20:2c:51:35:0c:78:
c4:e6:63:f5:fa:16:c1:54:ac:f6:cb:f9:d2:1f:bb:a6:99:5b:
89:a8:d3:87:59:4d:34:b2:37:d6:93:0f:b2:ab:c5:6d:6c:66:
03:36:b3:b4:c1:23:0e:48:9f:b2:3f:c2:e0:c5:da:a8:d9:9b:
49:82:c5:67:f2:7f:7c:99:a5:9f:88:3b:d6:9f:6a:9d:5e:23:
bf:d9:4e:a6:bc:b5:fe:e1:2e:a3:b7:f6:61:6d:50:e3:ca:08:
a1:8c:76:cb:e6:2a:6c:6e:de:87:a6:f6:f7:b2:c0:b8:22:5f:
4c:12:77:e8:dd:17:71:81:19:d1:fc:f7:50:27:f6:5c:8d:b6:
02:90:e4:cc:dc:95:1f:18:f4:7b:7a:b1:b9:f8:0d:4e:c0:0c:
2c:76:74:0f:bf:6b:44:2f:81:9a:a8:ae:38:0a:62:d3:20:70:
33:08:ce:98:69:e6:99:bf:62:70:46:87:78:0f:2b:ce:8c:4d:
87:41:c3:05:74:17:16:fd:cf:15:63:67:17:11:b1:82:e0:7a:
49:fe:42:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:44 2024 by rpki-client on console-fra.rpki-client.org