Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/WAdChUbEV0Qcz-s8uGRgsLTdowM.roa
File: WAdChUbEV0Qcz-s8uGRgsLTdowM.roa (raw, json)
Hash identifier: GREfT1Dk9bE3g3/H7864TT9TwP5RMpGc8q9O1OOetTY=
Subject key identifier: 58:07:42:85:46:C4:57:44:1C:CF:EB:3C:B8:64:60:B0:B4:DD:A3:03
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0185E2FEA08223D787A44293519EBFEB5044
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/WAdChUbEV0Qcz-s8uGRgsLTdowM.roa
Signing time: Tue 24 Jan 2023 08:56:56 +0000
ROA not before: Tue 24 Jan 2023 08:56:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3316
IP address blocks: 194.85.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:fe:a0:82:23:d7:87:a4:42:93:51:9e:bf:eb:50:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jan 24 08:56:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5807428546c457441ccfeb3cb86460b0b4dda303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:85:18:86:fa:ae:63:4e:0e:e9:54:50:44:4e:
88:0f:34:b9:e9:c7:5c:92:a6:d6:2d:9c:a0:26:84:
7a:f9:c9:3d:2e:d1:f2:23:21:f4:5a:ff:f9:ea:8c:
bf:44:b6:89:1f:9b:db:ac:33:96:14:19:ac:2c:a6:
05:f8:b8:56:76:cf:db:32:6a:cb:eb:b6:fe:d4:84:
4b:af:ca:a5:ac:77:07:47:0b:80:96:7f:13:36:87:
fe:fd:58:09:84:95:52:17:61:f4:cb:98:83:92:56:
8d:81:10:61:34:cd:96:9f:bc:69:33:73:27:73:34:
1e:40:c2:41:a5:de:87:9f:82:53:45:7d:88:fa:3a:
9a:8d:3b:a9:53:57:02:bf:3f:bf:c8:ee:1f:fb:60:
5e:1c:61:4f:2a:58:c9:ff:55:98:4e:cc:12:e1:69:
22:e1:6e:26:1e:2c:25:40:4a:1b:4c:b8:05:6b:af:
a7:81:b1:4d:f6:9f:38:f4:c3:99:8c:ff:d0:1e:10:
f1:d3:74:c0:f6:5c:76:45:1b:b5:99:e8:a9:cb:e8:
28:b3:38:9b:35:ee:de:fd:9a:3d:b1:58:70:1c:c0:
d4:12:89:ed:b2:4d:18:24:3e:c6:99:8c:24:9b:28:
85:8e:3f:37:aa:27:18:df:0a:fe:ba:80:8c:76:a3:
c7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:07:42:85:46:C4:57:44:1C:CF:EB:3C:B8:64:60:B0:B4:DD:A3:03
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/WAdChUbEV0Qcz-s8uGRgsLTdowM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.105.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d5:7f:db:53:a8:e2:f5:ec:01:8a:11:8c:99:cc:e1:e7:d4:
78:74:ab:16:59:26:f2:a1:72:3c:be:f9:44:9a:81:94:c4:e6:
fa:c2:39:4a:ba:86:6e:2a:9b:e6:ce:2c:e5:33:4a:2e:60:51:
82:69:05:a1:ca:61:64:24:d3:d4:53:66:bd:48:cf:4e:8e:a2:
f1:f9:3a:ef:00:4e:0c:c5:b3:34:44:e6:09:d0:87:f2:14:f8:
6a:fa:2a:6d:6d:54:a1:1b:75:da:d4:87:a2:ee:07:85:74:9e:
5b:fe:93:99:a4:04:af:3e:a1:74:26:6b:85:a7:64:60:fa:a1:
28:34:13:bb:63:12:d5:6e:65:51:6a:db:ef:f6:39:bf:e6:71:
de:e6:2c:58:6d:57:4c:1d:4f:93:36:8a:c2:e9:6c:b5:68:24:
82:7f:17:a4:b1:61:d1:ab:63:52:27:af:94:5e:8b:83:10:51:
48:28:b6:57:8a:3d:4a:aa:b1:c0:53:b1:f0:6d:9b:29:fd:8a:
f0:d7:fc:8c:48:41:46:49:39:11:43:63:bd:86:2f:bd:c0:e0:
94:d5:85:90:94:60:3b:da:43:51:97:2e:0e:02:ff:3b:54:80:
d2:7a:24:86:45:f2:2a:e5:90:c7:63:27:4f:b8:d7:18:17:94:
06:79:04:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:00 2023 by rpki-client on console-fra.rpki-client.org