Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/w1lceB7hOonmHsoOEelIKZNzE0I.roa
File: w1lceB7hOonmHsoOEelIKZNzE0I.roa (raw, json)
Hash identifier: DY3+Rm6EnNOGcukzW8szKwflHndlB/PW5Ezv7XbpYfI=
Subject key identifier: C3:59:5C:78:1E:E1:3A:89:E6:1E:CA:0E:11:E9:48:29:93:73:13:42
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018A9A56BC5BAAAD0950D8B1EB1DD20FB12E
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/w1lceB7hOonmHsoOEelIKZNzE0I.roa
Signing time: Fri 15 Sep 2023 19:34:50 +0000
ROA not before: Fri 15 Sep 2023 19:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 195.182.200.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:56:bc:5b:aa:ad:09:50:d8:b1:eb:1d:d2:0f:b1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Sep 15 19:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3595c781ee13a89e61eca0e11e9482993731342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:73:ab:f5:89:61:74:a8:c8:82:cd:7d:8f:
01:3b:5f:da:82:19:10:ae:6d:30:f5:f8:a6:77:8d:
c3:35:c1:17:8c:81:47:f5:6a:af:38:e2:99:d4:d6:
63:59:ce:79:3d:c7:a6:65:74:c9:e5:92:95:fe:04:
a0:4b:ab:fe:ec:90:a9:e8:82:43:08:20:50:11:b5:
de:57:a8:c8:44:0c:8a:34:a1:d3:2b:3c:3e:d5:2b:
9b:6d:af:11:af:0e:71:74:ad:b6:79:02:02:de:f9:
f5:cf:ec:b1:48:b8:71:7c:46:ae:97:e6:b4:7d:c8:
28:c1:a1:ff:bd:f1:59:ee:93:3f:d6:3d:33:d2:ee:
fb:9a:53:ef:e7:db:4b:4e:ad:c5:28:9f:4f:56:4f:
ba:9f:8e:a3:be:ae:3a:9e:74:be:51:10:a9:54:68:
eb:8e:e6:b4:82:69:52:ec:c0:1d:af:a9:9f:60:0d:
22:8f:90:ed:9d:18:b7:e1:b4:a7:65:43:07:61:1f:
ad:d5:11:af:97:2e:d0:52:98:d2:77:55:b8:72:ca:
16:35:8d:09:bb:60:aa:c1:17:ba:26:1d:03:b2:44:
a2:b3:ab:9c:71:b1:41:a7:9d:85:de:e1:93:e0:41:
1e:d5:06:c0:fa:1f:38:34:1d:eb:46:e2:4a:d9:80:
b8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:59:5C:78:1E:E1:3A:89:E6:1E:CA:0E:11:E9:48:29:93:73:13:42
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/w1lceB7hOonmHsoOEelIKZNzE0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.200.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:f8:33:ba:d7:1e:24:66:0c:7d:23:7c:d3:48:02:56:ca:9c:
3a:51:ad:8a:aa:3f:38:6c:32:50:1f:01:9e:b8:76:fd:48:a0:
90:81:c9:a9:b4:b6:b8:0a:c8:25:64:76:71:18:65:90:46:6f:
5e:45:b0:f1:f2:95:a1:e9:9f:dd:78:d3:f6:bc:1c:6c:b4:ea:
16:16:0f:ec:19:a6:af:a7:91:0b:31:c7:3e:14:0c:94:a6:ed:
fe:f2:d8:f3:16:56:39:00:da:ac:b3:a7:43:72:de:c2:cc:ff:
75:23:ae:9f:e1:09:cc:2e:8b:1c:0f:f1:ac:bf:3a:5b:5d:80:
67:6d:bc:0d:ea:c9:8c:cd:c0:1c:a9:6c:75:79:06:f7:eb:c3:
37:22:21:18:8b:57:33:1a:b3:63:59:28:c7:d5:3d:1b:34:a2:
59:24:1f:44:14:ab:c1:60:06:df:19:77:77:7f:40:f9:0e:92:
c8:7e:ac:14:7c:e0:ee:e3:c0:e4:23:b0:b1:04:65:53:28:30:
b6:be:65:00:dc:93:03:e3:b6:2b:1f:eb:e3:6a:14:6e:c3:04:
67:6f:dd:21:53:0a:23:00:83:17:67:80:c5:ed:74:69:2f:d7:
2b:84:91:c2:04:84:42:f2:c7:ae:fc:08:1f:c5:20:00:02:6e:
db:d3:7d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:24 2024 by rpki-client on console-ams.rpki-client.org