Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WN8tL-aqTYLOhAYWtofmL-2YRag.roa
File: WN8tL-aqTYLOhAYWtofmL-2YRag.roa (raw, json)
Hash identifier: AeEJP1EgX/qt3jyc4BiHrAeaqAfPznMsSTmEVzGIr/g=
Subject key identifier: 58:DF:2D:2F:E6:AA:4D:82:CE:84:06:16:B6:87:E6:2F:ED:98:45:A8
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018B6222E63F95D834D0C0957A8543AA0A02
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WN8tL-aqTYLOhAYWtofmL-2YRag.roa
Signing time: Tue 24 Oct 2023 14:42:16 +0000
ROA not before: Tue 24 Oct 2023 14:42:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204203
IP address blocks: 185.243.48.0/24 maxlen: 24
178.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:62:22:e6:3f:95:d8:34:d0:c0:95:7a:85:43:aa:0a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Oct 24 14:42:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58df2d2fe6aa4d82ce840616b687e62fed9845a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:53:c0:68:16:85:01:b2:3a:3d:4f:6f:4d:
9e:5c:20:9d:28:7b:0c:4f:38:6c:59:d4:fe:b4:e8:
18:9a:61:28:12:b4:32:2b:35:4c:32:73:bf:ae:05:
67:11:57:27:18:bd:f6:32:56:88:76:ac:0c:30:6e:
50:1b:d1:a2:7a:85:e4:ab:00:82:da:c9:f4:88:37:
fe:7f:a7:3e:d7:36:e1:6c:c2:b9:74:b4:55:e1:87:
44:ca:6e:18:20:48:01:73:38:c5:70:c6:f7:f1:b6:
a0:41:33:58:30:ea:3a:f7:2c:95:bb:c5:49:2e:23:
c5:a8:d9:c6:10:c5:96:14:1c:82:65:ef:ab:66:06:
bc:e8:8c:06:79:71:01:4e:3b:9d:bf:8f:cd:f5:78:
0b:a7:ae:3d:83:68:74:31:e7:bd:86:50:d9:dd:b3:
09:f1:da:f0:af:81:8d:cc:ae:75:f8:29:f5:a3:e5:
4e:fd:de:52:45:cc:62:cb:8e:8b:cc:fb:a4:84:f2:
4b:0c:79:00:67:22:d2:2f:96:99:e5:12:da:53:6a:
35:f6:ad:37:96:28:a3:7f:f9:52:f4:ce:ed:aa:e3:
eb:68:76:0d:f0:95:3d:49:45:c2:7e:01:d4:bf:6b:
95:0f:5f:42:a6:2b:4a:74:6d:8b:f6:f7:c8:70:40:
14:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DF:2D:2F:E6:AA:4D:82:CE:84:06:16:B6:87:E6:2F:ED:98:45:A8
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WN8tL-aqTYLOhAYWtofmL-2YRag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.150.0/24
185.243.48.0/24
Signature Algorithm: sha256WithRSAEncryption
28:85:46:73:da:46:5f:d9:e7:3d:4a:ac:36:b9:b9:87:10:61:
ce:42:a0:85:41:91:c6:47:22:ea:6d:8e:76:ff:5a:6a:24:de:
e9:63:68:bc:32:08:b0:40:2c:2d:56:36:c4:61:68:20:93:49:
63:5b:80:35:12:dd:ed:0b:2a:f2:1d:eb:f0:a2:57:0e:c9:d6:
f4:68:be:3a:80:ea:15:54:30:7f:e3:ee:6a:4d:70:4b:62:e0:
f0:b2:0e:4e:15:30:d8:c7:46:ae:c1:9f:68:c2:8a:bb:2b:cd:
5c:e9:92:99:46:af:8d:f4:8c:9b:82:c4:32:f3:e1:07:87:9e:
99:e2:0d:c0:0d:a3:52:3b:de:59:69:a3:1a:da:99:d7:b1:a2:
8b:6d:f3:61:16:bc:6f:c8:85:89:9f:5a:62:6b:3c:7e:e0:04:
ec:15:07:ea:cc:95:d2:a9:9b:77:b4:9c:f4:66:10:e7:4a:2c:
f1:f7:d4:15:90:c2:1a:4e:bb:26:90:ae:13:c3:7e:63:be:7f:
66:61:4a:db:ef:c9:0e:f4:74:5f:01:44:3f:b9:9c:f0:95:7d:
32:70:8d:47:98:ca:4c:11:85:24:75:f7:a2:a6:71:01:1f:52:
bc:ed:df:25:1c:3d:b3:4f:84:b8:d6:9d:2e:0c:dd:1c:b2:95:
e0:ac:db:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 21:03:44 2023 by rpki-client on console-ams.rpki-client.org