Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/woZetbS_8KP2rH3mCfE7KoT_NvA.roa
File: woZetbS_8KP2rH3mCfE7KoT_NvA.roa (raw, json)
Hash identifier: F/Mhhg/4HOgJGRIz0gLkvcEf+m42DgQ5aSMukAUWpe4=
Subject key identifier: C2:86:5E:B5:B4:BF:F0:A3:F6:AC:7D:E6:09:F1:3B:2A:84:FF:36:F0
Certificate issuer: /CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Certificate serial: 01856BE5B33CC68D574C64B3F724DCFB1C13
Authority key identifier: E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/woZetbS_8KP2rH3mCfE7KoT_NvA.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 178.211.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b3:3c:c6:8d:57:4c:64:b3:f7:24:dc:fb:1c:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5c0fb256374b7d43e232c848e42cc7b3f83ed22
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2865eb5b4bff0a3f6ac7de609f13b2a84ff36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:0c:43:e3:ed:c6:86:d3:ef:a0:1e:35:4d:
3e:46:47:ee:1f:c5:79:73:dd:42:60:00:fb:aa:34:
2e:13:b5:a5:49:3d:9a:46:e9:5a:86:e9:8e:e4:25:
76:58:2d:d0:ed:c3:f9:cd:5b:7a:18:6f:08:eb:f2:
7b:5f:50:90:db:ba:83:2a:cb:ad:19:2d:90:b6:19:
27:3e:cc:fd:13:69:3c:71:28:26:f2:a4:a5:a6:7c:
8a:18:13:bb:14:11:03:32:8d:d1:d7:49:b0:fc:fe:
ca:71:37:8c:ee:b1:06:ee:f8:ff:79:4e:09:fb:e8:
86:ca:ee:94:99:d8:67:f7:a3:19:9e:03:94:14:25:
32:93:2f:05:a8:08:a0:44:e9:c4:4a:e5:54:e1:3f:
35:32:24:77:c9:69:5f:2a:b4:03:c8:81:4c:29:cf:
e9:be:68:2a:3e:63:9c:65:ea:0a:77:fb:17:fc:c5:
c4:3e:80:49:dc:65:0f:98:ab:78:ac:cd:6b:97:64:
12:d8:f0:50:a4:cd:32:06:ec:7e:25:04:05:8e:47:
59:3b:c0:98:aa:11:d6:9f:88:d3:9a:78:c7:27:cb:
39:44:a0:c1:bf:59:07:e9:2d:e1:51:9b:74:ab:34:
fc:00:37:6c:10:36:26:2b:32:33:0e:93:67:9f:72:
47:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:86:5E:B5:B4:BF:F0:A3:F6:AC:7D:E6:09:F1:3B:2A:84:FF:36:F0
X509v3 Authority Key Identifier:
keyid:E5:C0:FB:25:63:74:B7:D4:3E:23:2C:84:8E:42:CC:7B:3F:83:ED:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cD7JWN0t9Q-IyyEjkLMez-D7SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/woZetbS_8KP2rH3mCfE7KoT_NvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ef7192-2cdf-4ac3-ac04-a6c0ceaaac52/1/5cD7JWN0t9Q-IyyEjkLMez-D7SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.211.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:69:0b:8f:9b:73:e5:7a:de:5b:25:3a:f5:2f:d2:28:48:b5:
80:59:76:52:4a:24:de:03:37:fa:91:1e:c1:73:52:34:d7:69:
04:47:34:f1:dc:fb:a4:f1:60:e5:57:f6:bb:e1:07:ea:c7:78:
03:ce:0a:db:ad:8d:90:53:b9:bb:60:17:fb:44:64:ee:d1:31:
c5:1a:4c:a5:f4:02:8f:36:ac:e4:22:d0:10:ac:36:d8:b9:ca:
c1:62:26:94:bb:88:40:0b:d3:1a:32:6a:25:4a:53:3c:72:2e:
94:39:e7:71:11:ab:18:99:c1:2f:98:81:95:68:e8:f2:c0:f5:
e4:68:a8:eb:fd:98:fb:7e:9f:2c:bf:8c:da:13:2b:6e:ba:c9:
7c:31:36:b1:ed:68:e2:c2:29:71:ff:a2:7b:f9:51:83:f9:01:
93:7c:f4:30:f8:76:0a:51:8a:0f:f1:97:de:2f:f5:14:e5:f8:
5c:50:4f:52:04:a3:41:a3:56:ae:ad:f7:82:c2:6d:b9:c0:96:
c4:95:8f:8e:e3:50:fc:86:79:e1:f4:85:ac:00:ab:c2:2e:f8:
fc:77:21:38:8e:4c:8a:78:3a:a0:48:3c:a4:4a:9d:c1:f3:20:
ce:3b:a8:4d:9e:c1:d7:a5:96:b0:0f:6d:0f:3a:05:56:87:89:
8d:f1:f4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:02 2024 by rpki-client on console-fra.rpki-client.org