Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/wxTjua1PEfUgOwBwrMfrH62iICw.roa
File: wxTjua1PEfUgOwBwrMfrH62iICw.roa (raw, json)
Hash identifier: LEnZwG9ULDTx4GVu2Xhu51IR9WFSw1/MSY6pneBZl6Q=
Subject key identifier: C3:14:E3:B9:AD:4F:11:F5:20:3B:00:70:AC:C7:EB:1F:AD:A2:20:2C
Certificate issuer: /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial: 01856DE64A415C9D747A0C590980F2B1B00A
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/wxTjua1PEfUgOwBwrMfrH62iICw.roa
Signing time: Sun 01 Jan 2023 15:14:46 +0000
ROA not before: Sun 01 Jan 2023 15:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212430
IP address blocks: 109.69.217.16/28 maxlen: 32
109.69.221.192/28 maxlen: 32
87.238.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:4a:41:5c:9d:74:7a:0c:59:09:80:f2:b1:b0:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
Validity
Not Before: Jan 1 15:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c314e3b9ad4f11f5203b0070acc7eb1fada2202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:6d:af:8f:4b:63:1e:a6:9c:13:8d:da:5e:
a3:24:2f:0b:8d:45:f6:85:2a:c6:b0:fb:07:92:4c:
70:64:91:b2:26:34:14:f3:91:50:eb:1b:b1:51:07:
98:aa:c6:ac:f4:d3:d9:83:75:03:7f:7a:12:c5:a0:
58:dd:56:45:b0:81:37:79:5f:d5:b7:8d:04:eb:48:
39:1f:1f:9c:dd:52:72:47:76:6a:f4:b7:bc:8e:83:
3e:ca:6a:f0:86:c4:38:34:d3:b7:2b:d7:97:35:4f:
fe:73:de:c6:eb:4d:43:df:8e:4d:c7:2f:42:fc:a3:
a5:5c:2c:05:b3:5f:16:3e:5f:ae:32:4c:d9:86:23:
6a:f4:a4:17:f9:7b:ac:a9:0c:a6:f1:0b:dc:c0:61:
04:aa:8d:b2:8c:e2:31:1f:fd:a4:d8:7f:bc:62:03:
bc:33:2b:66:69:46:f5:29:e5:16:1f:5e:5b:7c:b1:
3e:14:cc:bc:6a:d6:fa:55:44:32:a0:1c:09:ab:55:
b1:1f:9b:0c:85:b5:aa:02:c0:f0:d8:58:81:da:4d:
ca:bc:bf:66:0d:f2:32:f6:a5:3c:1e:7a:6b:aa:b6:
c7:5f:19:1a:90:77:0b:a9:b9:84:dd:b2:e4:03:41:
66:df:16:ad:62:e2:30:e4:80:6d:6e:be:70:7d:1d:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:14:E3:B9:AD:4F:11:F5:20:3B:00:70:AC:C7:EB:1F:AD:A2:20:2C
X509v3 Authority Key Identifier:
keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/wxTjua1PEfUgOwBwrMfrH62iICw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.227.0/24
109.69.217.16/28
109.69.221.192/28
Signature Algorithm: sha256WithRSAEncryption
ab:0d:1e:fe:54:86:f8:2c:7b:85:0b:35:52:be:29:6e:83:33:
75:2a:ae:05:c5:e0:eb:61:a6:d4:89:34:1d:c9:5b:9e:10:e6:
30:4b:49:64:d2:31:cd:c5:ab:e5:60:4d:74:68:7d:91:8c:66:
bb:aa:bb:b5:41:ee:a6:02:88:fb:56:6f:7a:55:38:34:10:ce:
c6:da:de:9c:6c:06:5b:2c:b8:ea:60:16:d4:53:aa:02:15:02:
64:18:b0:b9:a8:86:b9:d7:7d:78:22:a3:65:d2:7c:4d:b4:0a:
70:58:ef:e4:57:87:40:8a:27:8f:bb:98:d7:4c:7c:e1:c4:e4:
d4:de:5e:3a:21:43:a3:b4:8f:1f:98:24:f4:bb:ae:47:11:a8:
b3:65:66:16:26:f1:f2:66:9a:51:e0:88:42:87:ec:b6:af:68:
c4:6c:e5:f3:f0:b1:0b:61:a2:91:e4:2e:c7:58:99:08:fa:58:
3a:1b:df:53:f6:78:5b:c7:b8:83:c4:5b:8c:67:ac:6e:34:92:
bc:a9:ab:61:e8:5f:9b:94:48:47:39:21:a9:c6:c7:d6:48:df:
5b:0b:b8:bf:c7:69:36:7d:c4:ff:39:55:23:41:3d:2b:5b:04:
70:c4:d3:af:75:72:2f:a8:3f:8e:3b:58:9f:2e:25:09:65:0c:
fa:9a:9c:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:27 2024 by rpki-client on console-ams.rpki-client.org