Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/W84KzjcjRsnxVCEU-SPKv2eHpUc.roa
File: W84KzjcjRsnxVCEU-SPKv2eHpUc.roa (raw, json)
Hash identifier: elAkttUvq3OpMpVegV+4/RxFS9zI04HkQEaLRdZnClc=
Subject key identifier: 5B:CE:0A:CE:37:23:46:C9:F1:54:21:14:F9:23:CA:BF:67:87:A5:47
Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Certificate serial: 01856EAFA32A9EDCE5AE04993C9BEAF59A40
Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/W84KzjcjRsnxVCEU-SPKv2eHpUc.roa
Signing time: Sun 01 Jan 2023 18:54:42 +0000
ROA not before: Sun 01 Jan 2023 18:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9091
IP address blocks: 194.8.10.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:af:a3:2a:9e:dc:e5:ae:04:99:3c:9b:ea:f5:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222
Validity
Not Before: Jan 1 18:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bce0ace372346c9f1542114f923cabf6787a547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:4f:6d:c5:64:c3:92:42:da:fe:f5:b7:ed:
3d:10:cf:03:d4:72:47:9c:f9:b1:11:e1:c6:d5:d2:
10:25:7d:99:09:11:69:59:71:06:4e:54:d7:9a:1b:
ce:8d:e3:b5:2e:8a:6e:84:6d:04:75:2c:f8:b1:14:
b7:bf:23:70:b6:9b:9f:98:4f:20:6e:2b:28:76:9e:
da:90:90:e3:48:54:d7:f8:92:8d:49:2b:92:e3:ca:
fa:eb:a7:cb:7f:e8:2f:06:fb:8d:41:b2:31:4a:97:
c1:32:3a:e1:f0:ce:d7:e6:17:0d:14:30:d9:0d:a6:
15:7e:4a:b7:cd:bd:13:6c:f3:57:cf:54:b3:18:4a:
59:fe:8b:ee:7a:49:11:c0:f2:1b:d3:c6:ca:59:de:
41:90:cd:73:4e:96:b0:dd:4f:f4:af:0e:42:79:3c:
55:86:04:91:03:a7:9a:3c:a9:7d:19:68:55:4e:5e:
03:50:a8:48:01:01:19:9d:76:60:f4:cf:a9:0a:ff:
77:06:3b:01:c0:c7:67:05:81:ed:ae:51:b6:09:1d:
6c:de:6d:20:8c:08:a1:9b:1c:a6:a5:20:05:d4:a3:
5b:31:b1:9b:ec:84:07:d1:31:9d:8d:f9:ea:0f:72:
d2:75:0c:6f:b3:b1:78:26:fd:2e:b0:46:ea:0c:18:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CE:0A:CE:37:23:46:C9:F1:54:21:14:F9:23:CA:BF:67:87:A5:47
X509v3 Authority Key Identifier:
keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/W84KzjcjRsnxVCEU-SPKv2eHpUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.10.0/23
Signature Algorithm: sha256WithRSAEncryption
09:5b:4f:9f:f2:c1:07:d1:f3:68:b7:8d:07:b5:ea:33:b3:16:
61:7b:8a:09:fa:86:23:09:65:13:e9:fe:5f:87:54:4c:96:e4:
08:d5:ec:d4:b5:24:2c:8d:58:76:0c:2c:67:d0:4d:30:b4:18:
cf:e9:a0:a4:d6:ea:4e:ef:2b:1b:f2:a6:f0:30:51:20:36:7f:
ab:7c:8b:22:8a:61:86:30:af:70:2d:4f:f3:60:4f:e4:9c:cf:
92:09:98:37:da:88:4e:92:f5:dc:61:7a:83:b3:be:f1:79:e3:
26:84:ef:03:f7:9a:d7:21:47:b6:67:3c:d6:30:ae:2e:57:cb:
1b:c2:6c:4b:d0:1e:e3:3d:4b:57:38:3e:d5:2d:30:12:ce:e1:
60:3f:3a:ca:d7:cb:f7:2a:87:97:c6:e0:d9:f2:8b:fa:2d:71:
87:b4:9e:fe:25:79:24:88:ce:15:40:9a:c7:4a:26:a8:58:0e:
e9:8d:91:29:90:d5:a2:40:eb:9d:e8:a5:a0:75:bc:f8:ae:e3:
22:35:48:f7:5f:d6:ef:5e:a5:a2:95:aa:9b:ad:d3:80:0e:1e:
b6:7b:a5:56:48:80:85:15:3b:be:78:49:6d:e1:9d:b7:2b:e5:
89:de:2c:c2:90:61:7e:fa:80:70:10:71:34:63:dc:4b:a8:f2:
31:21:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:03 2024 by rpki-client on console-ams.rpki-client.org