Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/WNrJ4if1y3La6sl0CmeV48kQb-I.roa
File: WNrJ4if1y3La6sl0CmeV48kQb-I.roa (raw, json)
Hash identifier: lS4tixYu8W3cj2rZnUK0wUYixkvnwq4SpPkDy9U+PVM=
Subject key identifier: 58:DA:C9:E2:27:F5:CB:72:DA:EA:C9:74:0A:67:95:E3:C9:10:6F:E2
Certificate issuer: /CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Certificate serial: 018570705A1A53B52721ECF7AA28B5437CCC
Authority key identifier: 10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/WNrJ4if1y3La6sl0CmeV48kQb-I.roa
Signing time: Mon 02 Jan 2023 03:04:49 +0000
ROA not before: Mon 02 Jan 2023 03:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56410
IP address blocks: 193.120.164.0/23 maxlen: 23
193.120.55.0/24 maxlen: 24
194.125.118.0/24 maxlen: 24
193.120.22.0/24 maxlen: 24
193.120.40.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:5a:1a:53:b5:27:21:ec:f7:aa:28:b5:43:7c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10543a5197eb2544447e9d36b3ebf14452c777eb
Validity
Not Before: Jan 2 03:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58dac9e227f5cb72daeac9740a6795e3c9106fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:73:5a:2e:19:d3:59:2c:79:c0:d1:56:73:cc:
b1:af:f3:dd:4f:a8:b6:30:37:5a:7b:99:24:7b:07:
2f:28:1e:10:bc:c7:02:55:6f:1c:7d:70:68:71:b5:
1e:22:13:9b:76:00:1b:e1:d9:a6:80:1d:d3:f1:20:
74:26:4c:77:fb:7d:47:bc:69:78:d8:32:ac:36:77:
75:ff:12:09:9b:52:2f:b1:7e:66:85:cd:e7:75:2c:
a3:47:3b:a9:ca:91:f7:02:76:9a:31:bf:ba:c6:e5:
70:e1:97:4e:c2:cc:b5:91:7c:8e:ea:8b:c6:e9:de:
53:77:f9:88:97:45:5a:32:45:bc:bc:69:7e:1f:60:
55:5b:6f:49:98:aa:b7:8b:0d:58:6c:39:5a:99:a4:
84:51:34:c2:49:24:6c:a2:32:ee:8f:2c:a0:a2:3b:
49:76:47:e9:a5:ff:14:18:11:88:b2:65:e7:20:a4:
2b:70:f1:12:b8:7c:03:1e:08:b7:28:c1:c6:e5:a6:
cb:45:a4:45:a4:1f:d5:7f:48:07:49:9c:75:d7:8f:
44:ae:73:6c:74:58:16:19:bf:a6:02:c1:4f:e8:1c:
6d:23:b2:97:2c:5c:1e:71:5c:0f:51:f5:c1:0d:59:
54:ad:8c:b1:35:44:bb:38:01:6e:66:3e:07:e5:a3:
01:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DA:C9:E2:27:F5:CB:72:DA:EA:C9:74:0A:67:95:E3:C9:10:6F:E2
X509v3 Authority Key Identifier:
keyid:10:54:3A:51:97:EB:25:44:44:7E:9D:36:B3:EB:F1:44:52:C7:77:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFQ6UZfrJUREfp02s-vxRFLHd-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/WNrJ4if1y3La6sl0CmeV48kQb-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/1be7bc-b642-4a0d-8e6b-f7e0c5e2702e/1/EFQ6UZfrJUREfp02s-vxRFLHd-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.120.22.0/24
193.120.40.0/23
193.120.55.0/24
193.120.164.0/23
194.125.118.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:5b:8a:5f:5e:35:37:3e:2f:e2:8a:73:c2:67:2d:47:d3:e6:
a6:23:4f:6b:ad:24:d3:cf:58:21:fa:87:ce:8d:3b:f9:1b:9a:
ab:90:02:ea:80:65:ab:90:e8:1e:16:3f:88:83:b8:32:26:e0:
a8:a7:29:1c:1e:9c:17:bc:ed:4f:cf:f5:1c:31:62:7d:f0:1c:
5f:89:45:16:e0:63:ec:04:d7:48:80:e8:f2:69:56:44:1a:ae:
f4:49:d3:7b:21:6a:8e:30:cd:6f:4e:92:43:9f:68:91:0f:9f:
2f:da:c1:3e:44:dd:75:d8:aa:71:f1:84:5d:a0:e0:2c:06:5a:
78:18:a2:11:38:68:97:b3:7b:ef:66:40:cc:6c:d6:c4:83:e8:
e4:5f:67:cc:e3:94:25:0c:98:f6:e1:02:86:b7:f3:ca:07:07:
69:7c:cd:d5:2b:5a:cd:dc:e7:4e:55:91:5e:3a:7a:ab:2d:27:
e1:b6:94:71:a7:52:c2:55:b3:52:75:1f:52:22:ea:31:db:bf:
af:f9:d3:be:c4:28:ac:f5:37:1e:d3:73:07:57:c6:65:e6:cc:
5d:ea:15:ee:2d:56:34:3f:9b:b9:ee:3b:12:92:8f:d6:03:8b:
41:fa:3b:1d:3f:d4:cc:d7:8a:e6:03:0a:be:4e:71:23:bf:e5:
5d:60:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:05 2024 by rpki-client on console-fra.rpki-client.org