Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/WURFqqpF-NlvYmiaNra1fiWXoio.roa
File: WURFqqpF-NlvYmiaNra1fiWXoio.roa (raw, json)
Hash identifier: vW6ZJEP9SW3wfWTQKdcO6XGDhcYMPl2+r3XLeXXTjf4=
Subject key identifier: 59:44:45:AA:AA:45:F8:D9:6F:62:68:9A:36:B6:B5:7E:25:97:A2:2A
Certificate issuer: /CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Certificate serial: 01856B40D7D2C0E0E5FFB4A2A45FC83620D9
Authority key identifier: 47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/WURFqqpF-NlvYmiaNra1fiWXoio.roa
Signing time: Sun 01 Jan 2023 02:54:49 +0000
ROA not before: Sun 01 Jan 2023 02:54:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 195.244.28.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:40:d7:d2:c0:e0:e5:ff:b4:a2:a4:5f:c8:36:20:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d064fb3e541f23563065e48f300f2cfdfe009a
Validity
Not Before: Jan 1 02:54:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=594445aaaa45f8d96f62689a36b6b57e2597a22a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:25:b1:82:c3:9e:81:90:4e:4f:62:88:86:8b:
4e:34:06:fb:ea:df:6c:b1:02:41:06:ed:9e:39:a9:
ea:4a:63:bc:e3:af:41:bd:53:16:98:0e:8b:13:82:
47:00:83:2e:82:db:95:00:71:4a:17:a7:76:82:42:
b1:65:f1:3a:8c:d5:74:c9:3e:ff:0f:b6:12:49:09:
95:ac:23:03:a5:bd:b1:54:3a:90:77:c3:2d:7e:0a:
2e:bc:d5:21:5e:b2:4c:4c:4e:f9:ca:24:87:bc:9b:
8a:5b:be:94:0f:d2:b8:60:72:a2:ab:87:1b:f5:3b:
af:c2:ba:7a:10:91:fd:f2:5f:9d:ba:9a:84:ee:d3:
59:b5:6c:31:cf:ea:5b:cf:4d:d4:68:68:30:ec:80:
6f:23:3c:18:58:a3:3b:01:4b:98:4b:b9:c4:2b:38:
34:9c:dc:32:b7:69:5d:b6:9a:f8:a6:8c:44:49:92:
2e:52:3b:33:a1:40:bb:88:85:18:4a:17:f8:30:95:
64:80:c3:8c:53:71:2f:7e:2c:aa:4f:1f:1c:4b:6d:
e7:03:9c:cf:7e:54:4f:4b:00:3d:50:b9:f6:b9:6d:
ee:60:3d:f3:01:9c:4b:8a:b3:b7:cb:e6:d8:4f:db:
f6:66:82:27:88:db:c8:d5:d1:34:ee:c4:36:3c:c6:
3f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:44:45:AA:AA:45:F8:D9:6F:62:68:9A:36:B6:B5:7E:25:97:A2:2A
X509v3 Authority Key Identifier:
keyid:47:D0:64:FB:3E:54:1F:23:56:30:65:E4:8F:30:0F:2C:FD:FE:00:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/WURFqqpF-NlvYmiaNra1fiWXoio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d56693-2254-4a3b-acbb-efaaff0a982f/1/R9Bk-z5UHyNWMGXkjzAPLP3-AJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.28.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:dc:ee:56:50:d5:2b:e5:78:a2:cd:5a:f4:dd:c5:26:36:40:
9e:18:50:3b:fb:b2:39:96:24:2b:30:96:e8:6b:a2:bf:0c:b9:
ae:4f:ca:fb:7b:6d:85:3e:c1:7a:a6:24:af:42:db:a7:78:9f:
06:1f:42:da:85:65:06:3f:82:70:94:86:9b:7a:ec:8c:b4:4e:
ad:81:cb:a2:dc:1d:dd:15:c7:f5:bd:cc:6d:45:54:35:00:8c:
96:d0:ba:bf:91:23:56:93:e9:16:87:76:83:6b:aa:b6:22:dc:
98:7d:71:b5:b1:31:bf:a4:8b:5c:b7:4d:31:d1:82:56:bb:cc:
d1:e8:b0:ec:b3:02:5f:63:d8:03:45:f3:59:c0:d1:c7:c4:9c:
44:db:1d:14:cc:6b:b7:c2:c4:ff:4a:c3:5f:d8:86:97:04:b3:
a2:64:d0:24:76:ee:1e:95:ba:c3:f6:26:bb:55:58:04:51:14:
e4:54:4a:40:dd:dc:ac:0f:0f:e0:6d:fb:13:c2:80:b8:e6:ea:
71:20:1b:11:54:8c:87:92:81:ba:b7:9d:d8:f6:3a:6e:28:1d:
78:a6:5f:5f:76:36:bb:dc:1f:9c:65:a8:17:46:69:20:db:8f:
82:90:7e:bf:29:8b:15:36:fe:98:19:fd:7b:7b:f2:16:77:d9:
6c:05:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:57 2024 by rpki-client on console-ams.rpki-client.org