Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/WxpLOgHkEjLtHsWW5ilo-ORgj6E.roa
File: WxpLOgHkEjLtHsWW5ilo-ORgj6E.roa (raw, json)
Hash identifier: ctJO2BZ/KkyaChz918SDpOr48sGaXZGJ1yYC7rMUCeA=
Subject key identifier: 5B:1A:4B:3A:01:E4:12:32:ED:1E:C5:96:E6:29:68:F8:E4:60:8F:A1
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0B449B263C08C567A59518CC0687A
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/WxpLOgHkEjLtHsWW5ilo-ORgj6E.roa
Signing time: Mon 02 Jan 2023 05:25:00 +0000
ROA not before: Mon 02 Jan 2023 05:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197704
IP address blocks: 194.183.54.0/23 maxlen: 24
195.136.18.0/23 maxlen: 23
82.177.112.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:b4:49:b2:63:c0:8c:56:7a:59:51:8c:c0:68:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b1a4b3a01e41232ed1ec596e62968f8e4608fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:0c:f7:ce:63:cb:bb:92:a0:fa:9a:a3:24:
56:7a:04:7b:dd:11:40:22:13:87:11:c6:98:44:16:
09:d1:c3:63:15:41:4b:fa:de:e3:9a:92:b2:53:b8:
1b:df:80:2e:11:bd:4a:76:08:3d:b3:67:89:41:10:
13:ff:5b:8d:97:6f:1b:fc:23:07:bd:9f:36:30:d7:
63:43:31:a0:21:25:59:b3:5b:38:0d:12:e8:21:b0:
ee:f4:15:43:88:33:9c:bf:a9:39:fd:a8:d5:6f:9a:
c7:67:99:f1:74:c5:0d:f4:0d:f6:27:58:62:e0:7f:
31:18:13:11:58:f2:4b:cc:5f:bc:3c:99:a0:55:d8:
45:23:98:30:28:ad:88:e8:19:bd:2c:d9:e3:f9:5f:
78:b0:0f:03:e0:fa:f6:f1:bf:39:8a:95:11:f1:4d:
ec:da:b4:1e:fc:41:51:f7:2f:11:da:68:94:ac:34:
88:1e:42:51:64:1c:55:29:ac:91:a1:5f:e9:b9:9f:
d4:59:5c:6f:de:4a:57:0b:db:0f:15:9b:cc:c6:5f:
62:9e:f7:3f:69:6c:0e:4a:aa:52:cb:4a:c6:72:d7:
21:d2:4d:6f:a2:4d:d5:c1:31:13:9e:4d:f4:ba:c3:
f3:f0:cd:50:f6:4b:e5:cf:bc:00:27:1a:39:2e:93:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:4B:3A:01:E4:12:32:ED:1E:C5:96:E6:29:68:F8:E4:60:8F:A1
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/WxpLOgHkEjLtHsWW5ilo-ORgj6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.177.112.0/23
194.183.54.0/23
195.136.18.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:27:a1:6f:71:cd:47:07:d7:45:de:8f:f6:dc:4d:29:c6:bf:
89:55:02:88:46:69:5c:eb:b1:60:9c:99:e0:97:9d:d9:3f:b8:
2f:35:f4:4e:0b:d1:fb:59:19:ee:60:84:c7:13:07:20:50:a7:
2e:e6:f4:60:3a:12:1a:18:9a:6c:39:6f:a7:0b:43:8f:84:53:
22:81:53:03:94:51:1f:d6:7c:08:55:2f:15:da:ea:91:50:b2:
85:30:29:e0:1b:6e:cf:15:24:8b:83:51:6c:2f:94:60:df:33:
cb:7f:7d:a9:d7:48:1c:7b:04:af:92:2a:5d:50:e8:43:80:cf:
72:74:c2:2e:d0:79:90:47:49:68:2d:cb:df:e3:35:b4:4a:c5:
84:f9:25:cd:50:49:97:7b:71:6d:b0:85:d6:7a:4e:a4:f2:e6:
1a:7a:a0:a5:d6:58:90:e6:9f:85:9e:4b:e2:26:bf:84:a9:0b:
88:14:c4:4d:63:51:79:ae:ea:de:1d:39:dd:2f:32:62:d7:82:
ca:a5:64:a9:7c:d9:f1:0b:49:34:a2:79:c3:d4:d1:2c:85:86:
8e:2d:63:1f:0d:de:a0:cc:3f:8b:ad:c3:4a:43:09:19:15:8e:
d1:bc:9e:76:3a:5f:9e:8c:b5:b5:b2:67:c3:d4:72:d8:66:db:
cc:00:e7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:02 2023 by rpki-client on console-ams.rpki-client.org