Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/WZwAI2BzNCDum12FeqNZkhY4awY.roa
File: WZwAI2BzNCDum12FeqNZkhY4awY.roa (raw, json)
Hash identifier: lxCcmmARjoKU8xon7zv0FY5ROfkcXl7DY1Y1zQHtl4s=
Subject key identifier: 59:9C:00:23:60:73:34:20:EE:9B:5D:85:7A:A3:59:92:16:38:6B:06
Certificate issuer: /CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Certificate serial: 01857169A720EE40F5A5646C14D643FB7FAC
Authority key identifier: D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/WZwAI2BzNCDum12FeqNZkhY4awY.roa
Signing time: Mon 02 Jan 2023 07:37:07 +0000
ROA not before: Mon 02 Jan 2023 07:37:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209371
IP address blocks: 80.208.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:a7:20:ee:40:f5:a5:64:6c:14:d6:43:fb:7f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d481a627017d1a06cedd0b48e4fc6fcff586dd94
Validity
Not Before: Jan 2 07:37:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=599c002360733420ee9b5d857aa3599216386b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:ee:08:9e:c0:29:aa:33:b3:2b:0c:8e:50:
7c:8a:4a:8d:fc:b7:5a:f0:76:df:f1:4c:25:f4:35:
df:f0:ee:eb:7a:ca:47:d3:83:6f:c5:15:2a:2c:e5:
14:ac:a2:6d:5a:63:93:6c:48:ff:99:95:2b:51:45:
d9:7a:54:5b:e4:79:58:35:0b:22:53:8c:0a:e0:05:
25:40:cc:8f:f1:80:ff:cd:7b:a8:66:91:95:09:c0:
a4:af:9a:9e:48:50:85:1b:5f:a2:c5:e6:c5:6d:40:
ec:8d:f8:75:fc:fd:2a:88:eb:6d:d9:13:77:77:d9:
9b:80:e0:e1:86:bf:ae:8a:ff:79:12:f9:d9:cb:f5:
ea:45:20:68:2b:a7:93:23:2e:15:9c:5b:42:47:e0:
88:9f:1c:08:9a:ea:ab:92:ad:bf:89:5c:bb:5c:b0:
af:07:35:01:c2:27:89:a7:1c:fa:4e:af:96:ff:60:
12:d2:33:b6:ec:b4:f0:4f:9c:cb:2b:48:30:c3:c3:
ce:7b:37:a7:34:64:fe:97:e7:56:12:04:f6:c3:ea:
c7:ce:64:4e:02:a9:46:94:c1:95:77:40:f5:4f:14:
44:70:41:08:be:68:11:87:82:8f:6b:00:f1:0e:9b:
fe:f5:82:7b:0c:e1:0d:37:c8:34:df:cc:23:d0:85:
26:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9C:00:23:60:73:34:20:EE:9B:5D:85:7A:A3:59:92:16:38:6B:06
X509v3 Authority Key Identifier:
keyid:D4:81:A6:27:01:7D:1A:06:CE:DD:0B:48:E4:FC:6F:CF:F5:86:DD:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/WZwAI2BzNCDum12FeqNZkhY4awY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/ff63d8-feca-43cd-904d-72b32d951953/1/1IGmJwF9GgbO3QtI5Pxvz_WG3ZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.208.221.0/24
Signature Algorithm: sha256WithRSAEncryption
06:52:d6:79:32:4d:3c:e8:89:10:6f:ba:d1:bc:5f:b6:ec:19:
82:50:2b:96:16:3e:50:d9:7b:16:7f:05:9b:24:34:09:c8:38:
b3:3b:d8:5f:2c:1a:44:bf:bd:0a:6a:ab:cf:74:b8:ac:4b:2d:
cf:b1:d7:c8:97:c4:0e:f6:5d:ad:da:ed:b6:cc:33:a9:87:32:
ad:37:58:0d:7a:64:a0:7f:45:bf:31:42:80:55:44:e3:4e:2f:
3c:f2:c1:6f:91:f1:24:21:3a:5d:b1:c3:f4:32:ad:28:36:b1:
67:8a:07:0c:2a:59:ed:6f:3e:e7:76:5d:e7:d3:3b:a8:a8:66:
1b:6f:89:d8:af:f5:01:58:28:0c:fd:2d:da:a9:f3:42:db:a7:
a9:0c:cf:a9:eb:26:5a:ff:c6:72:fc:50:84:4c:2d:5e:57:72:
4a:d0:bc:af:e4:8a:64:0d:56:c5:a0:01:e5:75:ab:e3:13:2e:
00:9d:f8:f8:43:98:6a:1d:d5:ce:06:48:c6:79:e2:b4:a0:b9:
37:b9:cb:ac:ea:03:53:48:68:fe:2e:07:fd:26:70:12:7f:91:
8a:ed:07:bc:d3:95:a0:51:0a:19:18:76:0b:0f:59:97:ba:b2:
b0:22:64:35:a4:9a:cc:1b:ce:17:4a:6e:66:cb:13:f6:c8:4d:
ee:65:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:48 2023 by rpki-client on console-fra.rpki-client.org