Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/WpWsHFvqhht0eiPiFrssn0R5VVg.roa
File: WpWsHFvqhht0eiPiFrssn0R5VVg.roa (raw, json)
Hash identifier: NNymPFmXGPjD9+z5bX6lT9Co+Ido7I98OA6Ea3a6ecM=
Subject key identifier: 5A:95:AC:1C:5B:EA:86:1B:74:7A:23:E2:16:BB:2C:9F:44:79:55:58
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 018AA77EF5774EC2B742621594B430BC22B4
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/WpWsHFvqhht0eiPiFrssn0R5VVg.roa
Signing time: Mon 18 Sep 2023 08:53:50 +0000
ROA not before: Mon 18 Sep 2023 08:53:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57004
IP address blocks: 185.191.200.0/24 maxlen: 24
185.191.203.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:7e:f5:77:4e:c2:b7:42:62:15:94:b4:30:bc:22:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Sep 18 08:53:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a95ac1c5bea861b747a23e216bb2c9f44795558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:67:50:c0:c0:0e:af:45:7c:dd:71:f6:c6:1a:
6a:46:66:14:dd:0a:29:c0:e3:ac:c1:c8:69:cb:f6:
86:cb:0a:56:59:93:58:3f:40:0d:cb:9e:89:35:53:
f4:a8:6c:23:ef:cf:ca:6b:94:1d:a8:b4:90:69:a3:
09:32:01:27:cf:05:23:aa:a9:8d:95:7f:9a:11:29:
a5:11:73:f8:83:c4:03:35:bf:46:8f:cf:aa:c4:94:
d8:98:0f:9e:e8:e4:38:68:6d:56:3f:9c:78:5e:62:
da:23:ab:8f:0d:0e:b1:14:6e:18:13:29:b6:b9:65:
c0:d7:e7:dc:7f:36:51:4c:71:1d:39:97:2c:2e:c7:
52:26:9a:d6:57:9e:c8:c4:60:9e:6e:fb:2f:36:b8:
0a:05:a8:85:61:de:09:74:5a:23:9d:b1:0a:01:65:
a3:6d:b8:24:65:30:24:f5:7a:36:9d:b6:08:40:d0:
d8:ee:72:9a:45:22:d5:19:eb:9e:99:01:e3:3c:0d:
bc:8e:5f:7f:c8:63:3d:f8:d4:b3:ee:99:7a:13:be:
6a:68:7a:43:01:fa:6b:b9:2c:e5:be:56:74:d0:f5:
c0:1a:e6:57:7c:9c:1f:1c:ac:34:0e:b4:2f:3c:75:
17:42:75:a9:46:ff:5b:32:53:0d:86:0d:87:ca:e3:
b7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:95:AC:1C:5B:EA:86:1B:74:7A:23:E2:16:BB:2C:9F:44:79:55:58
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/WpWsHFvqhht0eiPiFrssn0R5VVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.200.0/24
185.191.203.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:7b:ec:6c:cf:07:05:81:62:3d:0e:f1:5a:8f:d7:5f:55:8e:
ed:de:79:bb:73:37:e7:9c:97:69:d4:11:d1:8f:c2:a2:7a:1a:
fd:55:02:41:73:58:6f:4f:41:c4:3a:4c:02:9d:61:3d:fa:13:
43:d7:3a:40:7d:50:d8:e7:f7:ec:23:f7:d1:5d:e2:11:31:ce:
a8:9e:e8:51:53:94:ae:d9:31:ba:61:07:76:7d:90:94:02:cf:
45:12:a3:e8:94:d6:56:78:9a:3a:6b:1c:a4:f7:24:4f:ec:28:
8e:65:6f:bb:92:ee:19:ab:52:14:59:27:0d:8f:0d:ee:58:35:
c1:f6:8a:59:b8:84:64:22:7f:21:72:9e:49:62:27:a0:82:fd:
15:4c:b6:2e:90:c8:e3:ea:68:0b:af:4c:7d:2a:74:ab:9e:fa:
f4:e6:2d:01:20:c8:bd:5b:d7:62:28:af:bb:fe:5c:6b:e2:72:
c2:16:a9:2c:b3:2c:b2:97:5d:ef:d0:22:a7:a6:6f:27:f3:30:
4c:15:71:a3:fb:62:6f:17:5a:24:1f:0a:15:c5:3d:d2:2e:a3:
79:0b:6c:be:43:a3:17:3d:40:8a:d4:9c:e4:d1:da:2d:ba:7f:
a7:56:c7:0b:b8:d0:5b:1d:40:a1:32:e5:e4:f1:8d:02:0c:f0:
d1:56:1b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 10:00:02 2023 by rpki-client on console-ams.rpki-client.org