Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/woxaNS5Tbik2fUswEORV7GI8AEc.roa
File: woxaNS5Tbik2fUswEORV7GI8AEc.roa (raw, json)
Hash identifier: 4zCyL0C78/rrUp1u+L9SrnYQdzlM8iENgmf2QxT8Eds=
Subject key identifier: C2:8C:5A:35:2E:53:6E:29:36:7D:4B:30:10:E4:55:EC:62:3C:00:47
Certificate issuer: /CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Certificate serial: 018B61B5F34E98AB51C4F1D2A3EB7B94ACB0
Authority key identifier: D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/woxaNS5Tbik2fUswEORV7GI8AEc.roa
Signing time: Tue 24 Oct 2023 12:43:16 +0000
ROA not before: Tue 24 Oct 2023 12:43:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 217.147.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:b5:f3:4e:98:ab:51:c4:f1:d2:a3:eb:7b:94:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d87821a7c8761e08121e70c9ff42ff9b6ad34e51
Validity
Not Before: Oct 24 12:43:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c28c5a352e536e29367d4b3010e455ec623c0047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:95:b4:bf:a9:a1:d6:01:4a:7c:2a:76:1a:
56:06:af:a1:7c:ac:ee:52:46:bb:17:40:53:4a:d0:
a5:9a:ae:2c:57:6c:6b:af:ca:e1:85:90:b9:85:9e:
24:e4:51:ee:99:d1:01:a6:d2:0c:55:39:68:1b:13:
0b:4a:dc:7e:b1:ee:29:52:22:ab:05:c5:02:9f:5f:
e1:c6:a7:12:22:e3:e5:c1:85:7b:e7:52:cc:6d:73:
70:ff:97:62:5d:be:d4:88:a3:85:56:38:0f:44:9b:
87:8e:cf:22:d6:15:ed:c3:19:a8:ee:bb:29:d8:0b:
33:f3:12:3b:4d:e6:d6:c7:21:68:e6:4f:d3:b1:f9:
ef:aa:52:bf:43:ac:90:9e:6d:c9:22:b8:36:31:8c:
dc:c6:a2:74:45:ad:c4:69:a6:b4:90:5c:0a:f4:ca:
15:bf:86:e8:69:93:e6:de:d8:d2:39:13:7e:8a:44:
70:bd:26:30:c1:20:b3:c9:6c:83:c8:74:49:0f:62:
0c:c2:06:a8:9b:64:a1:08:b6:7a:a4:b0:2e:8d:65:
92:e3:8f:41:aa:a2:73:8f:70:b6:ae:d9:f3:c6:f5:
14:7c:bf:05:9b:54:44:40:60:54:1b:db:0e:ef:c8:
f8:d6:bf:18:53:8c:36:a8:68:d1:01:59:12:12:84:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:8C:5A:35:2E:53:6E:29:36:7D:4B:30:10:E4:55:EC:62:3C:00:47
X509v3 Authority Key Identifier:
keyid:D8:78:21:A7:C8:76:1E:08:12:1E:70:C9:FF:42:FF:9B:6A:D3:4E:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Hghp8h2HggSHnDJ_0L_m2rTTlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/woxaNS5Tbik2fUswEORV7GI8AEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/e5725b-3128-44b3-9f83-5aa620a81149/1/2Hghp8h2HggSHnDJ_0L_m2rTTlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.147.180.0/24
Signature Algorithm: sha256WithRSAEncryption
61:63:9b:14:aa:dd:55:1f:2c:d2:07:87:f0:dc:e3:39:25:e9:
cf:ce:b2:03:ae:c9:98:5e:b0:b0:21:72:3e:92:6c:ed:ef:15:
6a:71:34:4f:cf:56:fd:8b:8a:c4:11:96:78:e8:f4:cc:c7:04:
34:47:80:e9:03:21:8d:c9:50:1b:27:54:41:dd:bc:bb:ec:48:
44:5d:e9:12:52:7a:0c:6f:51:0e:28:76:52:56:10:ce:4d:77:
b0:33:0e:b2:49:c1:33:35:ae:4d:49:6e:68:9e:69:6b:3f:e6:
74:88:fa:f5:29:7d:f3:37:05:ed:ee:36:2a:15:76:0d:20:54:
4d:50:f3:f3:59:39:b8:47:a9:5a:aa:06:1a:72:5a:7d:43:d8:
3e:2f:46:db:94:db:b7:90:2c:bd:f4:51:db:02:af:89:d2:a8:
5d:10:d2:18:8a:28:37:80:27:77:43:8a:6b:35:48:79:b8:8c:
1e:7c:aa:cb:85:85:c4:54:60:3e:e7:c5:4b:6b:cb:1d:be:47:
7b:b5:80:94:b0:fe:4f:42:44:d4:10:af:b0:6f:4f:e0:f0:81:
43:7a:47:b1:b1:ea:1a:0f:e7:c6:b2:84:a3:5b:bf:2e:91:d2:
97:5c:32:1c:d0:19:60:58:f1:a3:66:b2:86:46:7b:43:ed:bf:
35:98:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 14:45:42 2023 by rpki-client on console-ams.rpki-client.org