Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/wwFIKKUR9h7dKPPQE589LSf76Ls.roa
File: wwFIKKUR9h7dKPPQE589LSf76Ls.roa (raw, json)
Hash identifier: /PzrTyJQ+Bihqw1bjrlxwkGdFwL0SNhtdjec/ADozpY=
Subject key identifier: C3:01:48:28:A5:11:F6:1E:DD:28:F3:D0:13:9F:3D:2D:27:FB:E8:BB
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 01857067391D7A35ACD74566739CA91EAC44
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/wwFIKKUR9h7dKPPQE589LSf76Ls.roa
Signing time: Mon 02 Jan 2023 02:54:51 +0000
ROA not before: Mon 02 Jan 2023 02:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29480
IP address blocks: 195.149.126.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:39:1d:7a:35:ac:d7:45:66:73:9c:a9:1e:ac:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Jan 2 02:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3014828a511f61edd28f3d0139f3d2d27fbe8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:8b:01:81:59:9e:33:79:89:41:64:f3:f3:
0a:cf:d3:2b:9f:d5:d4:2a:f6:67:ef:4f:9f:90:fe:
c4:6e:e8:10:55:5f:f6:15:78:13:4c:97:3b:62:fe:
02:ba:72:1a:52:98:0a:72:f5:46:0d:32:b9:ff:c5:
41:5b:e6:a8:63:d9:aa:d3:1a:be:16:ea:9c:dc:8c:
20:d6:3e:c2:ce:c5:d0:ad:e1:19:e8:04:13:eb:4f:
0e:3b:98:54:78:02:aa:5b:bf:95:f9:5a:25:2d:5c:
6b:d4:f7:d1:1b:15:e3:9c:b4:03:eb:3e:c7:52:87:
08:d4:ef:cd:46:d9:61:7f:cf:d0:c8:45:b0:62:e6:
28:d4:33:f8:5a:03:5a:4a:04:c7:c3:64:13:9c:48:
94:d8:dc:72:54:40:0f:dd:df:35:ce:f3:23:e3:0e:
cc:eb:63:91:a8:01:3c:78:e4:b7:3d:a8:46:db:ef:
f4:98:0d:b6:6e:96:f1:4e:66:f1:a9:fc:60:00:8b:
16:ff:01:d0:8a:db:d5:ed:a4:e1:c5:80:47:45:d9:
9e:a6:09:25:ab:af:fd:1f:22:f7:58:96:25:9e:e3:
0a:81:dd:f6:4c:b6:8f:5e:f2:d5:9b:6e:de:1e:93:
cd:0e:03:88:ac:1e:17:76:af:b6:1b:d7:0b:03:34:
d6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:01:48:28:A5:11:F6:1E:DD:28:F3:D0:13:9F:3D:2D:27:FB:E8:BB
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/wwFIKKUR9h7dKPPQE589LSf76Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.126.0/24
Signature Algorithm: sha256WithRSAEncryption
78:b8:72:9a:23:90:38:4d:06:9e:e3:7f:af:e4:fc:7f:52:36:
41:b1:48:df:38:da:d9:2b:eb:d7:40:02:6b:f1:0b:bc:de:df:
ff:de:de:7d:9c:6a:ae:a3:a2:1a:08:e6:02:d9:89:e5:da:97:
a3:50:70:d4:56:0d:e1:52:d7:ef:c0:1d:24:3e:f3:6c:5f:a9:
dd:b8:6f:bb:75:fe:eb:36:ba:5c:4f:4e:67:6c:f8:80:30:1d:
62:a3:14:6c:8b:d5:0a:ca:be:ec:e7:aa:72:51:81:2e:7e:f8:
65:81:bb:de:e7:cc:b0:27:73:d4:c3:9a:85:ff:b8:1a:7e:9a:
a3:54:5c:5f:47:09:37:8f:93:11:ea:29:45:ca:53:a6:32:b9:
5e:9e:da:01:33:3e:d1:1d:f2:6a:09:cd:47:f4:96:17:48:38:
ec:66:e0:bc:cb:18:59:19:31:10:82:f2:87:48:fb:db:a3:42:
30:57:79:0d:86:61:2e:cb:62:5b:62:b3:63:87:2d:31:54:83:
75:a0:47:c9:e8:29:83:32:cb:d6:bb:9c:10:3a:d4:9e:b2:34:
77:53:da:42:b7:cd:b0:05:53:71:33:f3:8f:65:07:5a:b3:c1:
b5:4b:c4:74:5a:26:bd:2e:5a:a9:21:7a:4f:e4:e7:73:e2:c1:
b5:8a:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:13 2024 by rpki-client on console-fra.rpki-client.org