Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wc_NeM3WpRMHirHaX3IlXP_v94g.roa
File: wc_NeM3WpRMHirHaX3IlXP_v94g.roa (raw, json)
Hash identifier: 9YS3S5EJnIbscmfbyuXG2xan7wSPGIE+o1rrICGc0WU=
Subject key identifier: C1:CF:CD:78:CD:D6:A5:13:07:8A:B1:DA:5F:72:25:5C:FF:EF:F7:88
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01856DC1C811B8B7EBB49158D68C456DA1B6
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wc_NeM3WpRMHirHaX3IlXP_v94g.roa
Signing time: Sun 01 Jan 2023 14:34:54 +0000
ROA not before: Sun 01 Jan 2023 14:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29182
IP address blocks: 212.22.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:c1:c8:11:b8:b7:eb:b4:91:58:d6:8c:45:6d:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 14:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1cfcd78cdd6a513078ab1da5f72255cffeff788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:51:74:63:d2:75:37:0a:e6:00:f1:b2:62:
56:76:3a:50:23:0a:78:d0:19:c2:5f:9e:4e:20:4a:
8c:13:fb:bc:db:c0:83:aa:b0:2b:33:3d:0e:2c:6d:
9b:66:f7:82:90:5d:4a:90:0e:ee:e3:d0:3e:30:41:
13:15:27:9d:1a:ba:b0:17:8c:2d:7c:69:86:81:83:
4f:87:e7:44:60:cd:71:5d:59:f8:16:02:57:f0:85:
08:45:89:61:cc:f1:28:14:44:4a:7e:3f:39:1e:9c:
ea:c5:d5:2e:d5:5a:30:f9:17:ee:f9:29:d0:60:19:
0f:22:9b:10:67:39:e3:e7:45:ae:27:90:af:89:7d:
fd:36:54:56:1a:e1:6d:38:42:5e:1c:4d:4d:fa:51:
dd:2e:a4:0f:a5:59:a2:28:e9:ca:ea:cc:f5:df:e7:
6c:20:87:61:95:9a:5c:60:f8:5a:ec:4d:14:49:06:
f0:ec:a7:7b:6c:72:94:ce:f2:76:8a:ae:40:3a:11:
39:a4:32:cb:08:80:93:c5:44:60:e9:e1:00:04:a0:
29:cd:ae:d1:aa:52:9d:d9:39:e2:bd:82:db:cc:ff:
10:a8:e4:a8:4a:c9:86:da:92:28:e3:e0:5b:d4:44:
a0:92:d5:27:68:25:2c:0e:35:2f:98:be:da:16:e0:
b9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CF:CD:78:CD:D6:A5:13:07:8A:B1:DA:5F:72:25:5C:FF:EF:F7:88
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/wc_NeM3WpRMHirHaX3IlXP_v94g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.22.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:97:78:f6:d6:4a:11:aa:db:0e:ba:17:f0:82:20:32:d6:3c:
ab:0c:68:26:9e:d7:59:7e:22:0c:a8:20:3a:1a:cc:cb:14:3d:
47:c9:38:fd:42:58:02:75:0f:4a:62:20:58:01:f6:45:94:5d:
db:96:cc:d4:47:32:4b:e7:b1:6a:01:2c:21:ad:18:58:c6:0f:
56:f6:26:7c:62:6b:d5:23:00:68:09:70:6f:5e:21:50:87:da:
88:78:dc:11:5a:43:6f:0a:19:7b:f1:4e:f0:2b:a2:e8:9f:9d:
a7:8b:7e:41:b4:05:09:54:74:b8:52:9d:a4:8e:07:b4:3d:2e:
9f:fa:33:be:71:1e:24:30:5e:64:6f:82:bd:2e:fb:ab:e9:b5:
ab:1a:03:3e:fe:fa:aa:e5:04:14:0e:ad:75:04:5f:d9:2d:06:
1b:72:13:54:d3:4b:50:fa:5a:96:ba:35:01:84:75:55:45:32:
51:ee:03:ee:72:79:f1:c5:4f:ba:ef:97:b2:2e:9f:a6:de:8e:
7a:d0:76:1a:2d:ac:8e:14:a4:36:c3:9b:40:f5:be:dd:80:1e:
5f:b5:5d:63:bf:6a:d0:db:4a:e8:50:71:46:86:5f:68:97:bc:
bb:56:aa:3a:e5:ec:51:5c:e7:05:40:be:14:ed:66:61:13:f0:
d4:9d:29:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:05 2024 by rpki-client on console-fra.rpki-client.org