Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/WaKSHwoLXmurJNTgFfNfcygDFhs.roa
File: WaKSHwoLXmurJNTgFfNfcygDFhs.roa (raw, json)
Hash identifier: WLBjNIWKIl30C7vLW2h1fKngBQY0P73vGWJ2TJP1ejY=
Subject key identifier: 59:A2:92:1F:0A:0B:5E:6B:AB:24:D4:E0:15:F3:5F:73:28:03:16:1B
Certificate issuer: /CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Certificate serial: 018C6449567AA6AB1B02966279F954D7BE06
Authority key identifier: 44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/WaKSHwoLXmurJNTgFfNfcygDFhs.roa
Signing time: Wed 13 Dec 2023 17:46:16 +0000
ROA not before: Wed 13 Dec 2023 17:46:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213220
IP address blocks: 194.61.25.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:49:56:7a:a6:ab:1b:02:96:62:79:f9:54:d7:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d3cc591ceba386130f3c9f7426458b8887c2eb
Validity
Not Before: Dec 13 17:46:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59a2921f0a0b5e6bab24d4e015f35f732803161b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ab:f3:b0:5f:52:46:89:35:ac:a2:ce:3e:4a:
e9:3d:01:6a:3b:b1:73:db:f4:8c:be:a8:6d:d8:c5:
e3:da:f0:de:cb:cd:bf:1c:9f:67:db:1c:51:ac:65:
27:59:65:4a:d3:34:53:8f:b3:27:ad:b8:45:59:20:
36:17:78:f1:fc:15:16:8f:a0:9e:77:5a:71:d9:71:
f1:59:1d:b6:33:00:14:58:d6:db:f4:ed:0d:aa:bd:
34:08:fe:80:19:15:9a:d0:e6:52:09:d9:50:e6:f2:
3f:e5:8e:83:ef:a7:75:8c:a4:e4:b7:02:40:0f:2d:
46:ba:66:96:cb:2b:a1:53:c2:c8:85:49:97:66:00:
6a:a5:a2:3b:e5:b7:51:d9:ea:22:78:32:43:a9:0a:
7a:91:ff:b6:c9:cb:9b:84:ca:b4:4b:c9:04:2c:2b:
2e:a9:5c:f1:e8:96:b0:ed:8b:75:07:06:be:37:8d:
92:09:22:76:f8:dd:71:01:23:72:15:1d:d9:e9:d1:
71:2d:30:5d:62:0b:b4:9e:ec:72:43:a5:79:b7:0f:
33:3f:dc:64:49:58:bc:cf:55:37:b7:62:48:70:c0:
e1:37:cd:2a:1d:8e:00:71:19:7f:89:8a:06:37:df:
1f:c2:be:07:90:a7:89:53:c1:ec:21:19:78:cf:9e:
43:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A2:92:1F:0A:0B:5E:6B:AB:24:D4:E0:15:F3:5F:73:28:03:16:1B
X509v3 Authority Key Identifier:
keyid:44:D3:CC:59:1C:EB:A3:86:13:0F:3C:9F:74:26:45:8B:88:87:C2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNPMWRzro4YTDzyfdCZFi4iHwus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/WaKSHwoLXmurJNTgFfNfcygDFhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/43629a-5a4d-4bdf-99f8-2bb65408df74/1/RNPMWRzro4YTDzyfdCZFi4iHwus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.25.0/24
Signature Algorithm: sha256WithRSAEncryption
02:67:47:29:f1:12:8a:62:38:64:d3:79:ea:5d:9e:83:bf:85:
a8:e4:bc:2e:0d:0d:07:ce:4e:3e:f2:be:d8:8c:f7:95:20:b4:
58:c3:17:66:98:48:28:1a:88:b4:21:aa:d4:42:0d:9b:e7:9b:
d7:fc:1f:15:b0:a5:7f:08:2f:62:32:4d:12:ee:d4:64:34:10:
35:d1:fc:16:20:e2:4f:f0:35:8e:43:46:7f:33:0a:fd:9b:6c:
c2:f5:15:90:e5:a4:ba:d2:2a:5c:99:0a:1b:81:15:c1:91:cd:
3d:2e:28:ee:44:27:65:29:cb:8c:f7:ee:31:11:38:ca:cf:f1:
2c:85:70:bb:17:52:34:32:00:2c:70:e1:3d:ab:b2:34:22:8e:
59:0e:c5:b2:c5:a6:08:0b:cc:1f:5f:45:a5:66:b8:a5:f1:24:
62:eb:d6:4e:19:15:a3:92:95:a7:77:01:08:34:aa:7a:c9:18:
98:d6:78:e1:48:2a:ef:8c:f1:95:8b:2c:e1:5d:24:5c:2c:31:
3c:94:98:d5:d2:3d:9f:14:52:e7:a6:0a:e8:aa:7b:ca:1c:f9:
fc:d4:fd:80:92:eb:c4:d9:ee:9f:29:48:86:5c:37:55:35:88:
74:9b:fb:9d:c6:2f:02:c5:72:77:0b:5e:c5:09:44:98:38:66:
43:3a:3b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:20 2024 by rpki-client on console-fra.rpki-client.org