Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/wSyaORVQyMkCXY1Kg0mGawrI0IM.roa
File: wSyaORVQyMkCXY1Kg0mGawrI0IM.roa (raw, json)
Hash identifier: LevB5E75U/CioxI29DPJszSt7x9WuQZ4Q2AqTbqWfgg=
Subject key identifier: C1:2C:9A:39:15:50:C8:C9:02:5D:8D:4A:83:49:86:6B:0A:C8:D0:83
Certificate issuer: /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial: 0189ADC7EAD172F7D9AEE8EC7EF19B5F2D36
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/wSyaORVQyMkCXY1Kg0mGawrI0IM.roa
Signing time: Mon 31 Jul 2023 21:08:27 +0000
ROA not before: Mon 31 Jul 2023 21:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43413
IP address blocks: 78.41.16.0/21 maxlen: 21
92.63.48.0/20 maxlen: 20
2a04:bc00::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ad:c7:ea:d1:72:f7:d9:ae:e8:ec:7e:f1:9b:5f:2d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Validity
Not Before: Jul 31 21:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c12c9a391550c8c9025d8d4a8349866b0ac8d083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:4a:52:60:bb:68:a9:21:6a:8e:93:0f:95:
59:87:7b:da:0f:42:0c:68:59:1a:76:75:62:78:e1:
37:b5:e7:42:04:0e:b2:58:96:2b:b6:35:3a:3c:21:
30:18:d3:6e:4f:85:ca:0a:e6:ae:32:2b:fa:3b:49:
e3:aa:0f:f4:3c:f2:64:40:09:74:63:18:6c:4a:2e:
45:37:57:02:2d:56:4d:e4:ad:b3:2d:84:d7:a6:6c:
fa:c8:45:f8:e1:16:df:19:d3:70:d2:9d:35:93:86:
3f:12:9e:ff:70:87:6a:0e:71:c9:66:ad:0a:2f:5d:
5b:7f:36:ee:a6:bb:f2:8d:ac:61:d8:24:94:ca:bd:
bf:76:e0:dd:be:0c:23:df:2b:97:b7:8a:86:5c:de:
1f:5c:09:d5:2b:e1:f3:29:6d:8c:d3:3a:81:47:b3:
d6:bf:ca:c1:b5:95:57:37:26:a6:9c:01:d2:13:bb:
f6:49:48:90:3d:95:4a:86:39:a7:d6:50:8a:53:c3:
d0:e7:3b:3d:f0:b5:e8:6e:ce:f1:41:e5:dc:82:0c:
a8:a7:85:5c:49:5b:ed:b8:5f:ec:d4:9c:34:7d:f6:
3f:94:90:8e:c7:ca:07:3e:95:5d:e3:92:2b:ab:34:
9a:79:b6:20:e2:5d:44:7a:e4:b3:7d:24:c1:2f:68:
1c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:2C:9A:39:15:50:C8:C9:02:5D:8D:4A:83:49:86:6B:0A:C8:D0:83
X509v3 Authority Key Identifier:
keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/wSyaORVQyMkCXY1Kg0mGawrI0IM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.16.0/21
92.63.48.0/20
IPv6:
2a04:bc00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:b8:24:a7:4b:8c:1f:84:96:5b:92:fa:48:35:6e:04:82:65:
eb:39:0c:5c:24:ab:dd:a5:0f:49:95:b2:c3:e5:0c:1b:26:83:
9e:e3:fe:2c:b7:58:c4:e9:0a:54:43:67:c1:4b:31:97:f4:d7:
4c:21:9c:72:43:a4:48:73:8c:4b:9d:26:1c:b0:3c:fd:6b:1f:
65:9a:9f:eb:83:56:60:b4:fe:59:a3:a6:15:d8:77:e4:27:bc:
1c:e8:47:14:86:de:b0:53:af:e7:0c:1b:42:0b:95:d8:84:08:
93:15:35:e0:0e:4e:3e:f3:b1:e4:73:4a:7e:90:a2:0c:9e:85:
fa:d5:bf:97:27:74:54:f9:32:91:0d:83:0b:da:be:86:4d:a5:
cd:1a:9d:7a:af:7f:42:a6:be:24:4d:56:13:9b:b6:17:73:bd:
1d:77:1c:f7:4d:4e:9b:5c:cd:99:17:ce:25:48:38:9f:b1:6a:
5b:71:56:94:be:77:95:cb:c4:5b:b7:af:27:79:35:dd:d1:25:
c9:ac:2a:3a:01:3a:32:18:4c:03:b4:ef:d5:45:db:38:67:3e:
aa:4e:c4:5c:27:2b:da:5c:72:23:24:69:6c:5a:76:11:ab:24:
0d:38:02:29:76:c1:d9:fa:fa:a4:40:ca:44:76:d8:16:cb:d1:
f7:5d:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:49 2024 by rpki-client on console-fra.rpki-client.org