Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/RWSFcbkWswRB7c0fzMxiMwXhnIM.roa
File: RWSFcbkWswRB7c0fzMxiMwXhnIM.roa (raw, json)
Hash identifier: jEewoQbZ4mek/kgbSITaWG4i8KESDdIHawLLH9QKDj4=
Subject key identifier: 45:64:85:71:B9:16:B3:04:41:ED:CD:1F:CC:CC:62:33:05:E1:9C:83
Certificate issuer: /CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Certificate serial: 01856C784A166F781D349D7DDD6B827FBC99
Authority key identifier: A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/RWSFcbkWswRB7c0fzMxiMwXhnIM.roa
Signing time: Sun 01 Jan 2023 08:35:00 +0000
ROA not before: Sun 01 Jan 2023 08:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31134
IP address blocks: 193.23.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:4a:16:6f:78:1d:34:9d:7d:dd:6b:82:7f:bc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0368a741c7ac68965e90d4e6cb26848eb3b992b
Validity
Not Before: Jan 1 08:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45648571b916b30441edcd1fcccc623305e19c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6b:0a:88:1d:cc:d8:3a:2c:ac:9e:12:fb:22:
36:36:a0:4d:b4:80:10:2a:f7:aa:75:6d:e4:4a:56:
dc:ec:2a:81:8a:37:85:76:ad:91:f0:d9:65:03:d5:
ad:f8:bd:c7:38:94:bc:ff:91:3b:ab:f5:f9:77:b5:
8c:03:c2:7e:07:dc:90:f5:5d:5e:ba:61:1a:f1:73:
e7:c4:1f:f9:fc:43:c9:91:94:71:47:8f:63:af:98:
f2:4d:cc:0d:80:77:22:36:cc:b5:9f:9e:e5:c2:ed:
ae:32:1b:03:5a:8b:5d:c4:99:c0:1a:54:b7:e1:eb:
55:2e:33:00:ef:e3:4d:87:41:65:cc:21:2e:00:c9:
fc:ef:b2:30:39:b5:d7:15:0e:f8:fd:ef:a1:ac:6b:
61:2b:df:59:8e:41:bc:ed:7e:de:1c:c2:52:11:38:
dd:d9:48:d1:04:37:25:98:b8:47:8c:1b:92:bb:4f:
b3:e1:69:0e:b8:39:ab:a2:fe:41:9f:90:ce:45:b5:
57:dc:f4:f6:08:51:ed:54:b8:f6:a4:f4:85:c0:14:
fc:6c:ea:ad:ac:3b:82:10:7d:5c:4d:2b:5d:9d:f7:
cd:d7:63:c5:cd:ca:3d:0a:10:ba:ee:b4:14:28:0f:
aa:d2:0f:82:6a:54:08:9a:b0:8b:25:ae:e3:5a:91:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:64:85:71:B9:16:B3:04:41:ED:CD:1F:CC:CC:62:33:05:E1:9C:83
X509v3 Authority Key Identifier:
keyid:A0:36:8A:74:1C:7A:C6:89:65:E9:0D:4E:6C:B2:68:48:EB:3B:99:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oDaKdBx6xoll6Q1ObLJoSOs7mSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/RWSFcbkWswRB7c0fzMxiMwXhnIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/a9fe99-a535-44ab-a1bb-5e30b86fd1ab/1/oDaKdBx6xoll6Q1ObLJoSOs7mSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.62.0/24
Signature Algorithm: sha256WithRSAEncryption
02:28:b6:d2:33:95:38:26:b7:48:1e:aa:45:47:9d:74:e0:9b:
5b:12:5a:a0:09:7e:28:8e:b7:8e:64:1a:6a:16:44:de:0e:dc:
45:59:78:09:d0:82:f3:09:ce:33:c6:6d:e3:00:41:0f:ab:d4:
55:23:10:33:7b:96:53:63:d2:7e:bf:3f:9c:31:80:ec:62:f5:
28:7c:f8:13:3e:d0:e3:b0:5e:fd:b5:f3:01:0a:8d:f4:5b:91:
41:6a:f3:13:3d:8e:2b:ea:da:cb:e6:a8:7b:96:39:06:61:26:
3f:c1:73:69:9a:b9:27:7c:f6:ca:a8:65:ee:35:d2:58:1f:bf:
79:25:16:8b:62:12:a7:72:09:fb:58:bc:03:f7:c5:5a:ff:19:
4f:73:29:ec:d2:90:02:d5:8b:af:f8:e4:80:c6:8f:91:95:67:
93:3d:96:df:d3:80:83:3b:3b:c4:d1:bb:9f:9c:bf:c0:c0:8d:
04:05:02:c3:08:a1:0f:3b:eb:f3:d3:74:a6:77:37:80:e5:79:
5c:3b:6c:91:23:74:fd:31:9a:1a:41:fd:09:a6:a3:28:a2:88:
eb:cf:c8:78:5a:f3:32:07:76:b7:02:45:03:b8:9f:9a:12:17:
ff:7c:e2:0e:cf:00:d9:9b:18:25:28:68:34:6a:79:db:b8:99:
f9:50:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:39 2024 by rpki-client on console-fra.rpki-client.org