Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/wwJKZXZAc9fEVTpZX3QIV8KgEXE.roa
File: wwJKZXZAc9fEVTpZX3QIV8KgEXE.roa (raw, json)
Hash identifier: Dn6Puc0b78pVxfEzVOxl00QyoQ7d2hlJBe21DyWoth4=
Subject key identifier: C3:02:4A:65:76:40:73:D7:C4:55:3A:59:5F:74:08:57:C2:A0:11:71
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 0189BA634DDDA5FF308C8977EED6B7E460D8
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/wwJKZXZAc9fEVTpZX3QIV8KgEXE.roa
Signing time: Thu 03 Aug 2023 07:53:37 +0000
ROA not before: Thu 03 Aug 2023 07:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29092
IP address blocks: 195.47.241.0/24 maxlen: 24
195.66.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:63:4d:dd:a5:ff:30:8c:89:77:ee:d6:b7:e4:60:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Aug 3 07:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3024a65764073d7c4553a595f740857c2a01171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:40:13:cb:f2:da:22:23:fb:38:6f:29:1f:
c7:a0:ce:a0:fd:dd:a5:d8:7e:77:e4:ad:3c:e5:99:
1a:58:34:6e:a1:d4:57:d2:4b:e8:41:11:27:e4:de:
d5:51:c0:08:17:14:21:ae:e9:74:02:a9:24:69:a8:
cf:5e:b0:c5:89:67:88:c9:f9:89:3f:23:f0:43:db:
70:4b:4d:b4:57:61:90:64:08:c1:94:ea:4f:09:02:
38:ec:3a:4e:d5:06:2e:28:c5:6d:18:dc:a6:d0:3b:
31:6d:a8:c1:f4:27:f7:0d:e5:21:ce:09:a9:65:67:
fc:9f:a1:cf:4b:6d:0a:5c:8e:51:c0:21:05:c2:1e:
08:88:3c:93:2e:fb:0b:56:28:21:d6:f1:61:af:8d:
b1:b4:f7:bc:00:92:4d:a1:26:ce:0e:3b:41:bd:a1:
d7:ff:79:9d:79:e5:aa:79:b4:c8:57:86:35:39:7d:
a0:40:a2:ca:36:d0:67:f1:99:10:e1:9b:e9:56:2c:
d8:91:41:a9:b1:8a:54:18:04:f2:f3:25:87:18:49:
69:51:92:bd:b1:4b:b8:76:5b:8a:1e:4f:4b:4a:62:
44:10:48:c3:0c:68:ea:b3:5d:d7:61:f3:cb:74:05:
4a:6f:f6:5d:e7:52:66:01:82:e9:d5:11:23:55:95:
0b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:02:4A:65:76:40:73:D7:C4:55:3A:59:5F:74:08:57:C2:A0:11:71
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/wwJKZXZAc9fEVTpZX3QIV8KgEXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.47.241.0/24
195.66.119.0/24
Signature Algorithm: sha256WithRSAEncryption
80:05:4b:f6:36:d5:85:c0:02:57:cd:50:e0:d5:18:c6:6c:b8:
35:ab:d1:09:26:57:9e:52:b5:0c:f2:56:c1:31:82:82:69:3e:
0d:4d:ed:5a:5b:f2:84:00:92:08:86:55:59:ba:9f:41:26:a8:
21:a9:5a:4d:6a:64:44:43:ce:5f:ec:58:a4:a9:66:16:cc:1b:
17:a1:18:6d:f1:40:ab:1a:f1:e3:ff:eb:86:66:53:53:9d:1b:
94:9e:db:24:71:3e:56:80:95:52:56:b2:40:6b:d9:fa:cb:ae:
b1:5a:49:30:16:7e:79:7b:31:0a:5a:1e:67:3a:02:6f:dd:3f:
03:2e:b6:02:d0:67:52:47:a9:fd:53:79:73:83:f7:3d:4b:4b:
f4:a5:48:03:2f:c7:20:bc:8d:99:91:20:b7:b5:1a:27:f5:e8:
68:5d:b3:de:df:ae:a3:81:ff:5d:55:e5:1b:e1:c7:02:80:1e:
46:75:0d:e1:af:56:13:be:2a:3b:3d:73:34:c3:4f:99:c9:6e:
fa:be:7b:48:77:8f:09:47:b3:9e:fb:8e:41:8b:8a:a2:a5:8b:
82:a7:25:eb:88:07:9a:83:45:21:96:07:01:f9:30:50:98:39:
22:6e:7d:ad:66:3b:c0:63:c8:4c:87:4b:29:94:a3:47:e2:11:
9b:da:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:52 2024 by rpki-client on console-fra.rpki-client.org