Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Wgdo44KJlBKjylfgxP1b4b0lNdQ.roa
File: Wgdo44KJlBKjylfgxP1b4b0lNdQ.roa (raw, json)
Hash identifier: v6XNO+CDB/7aa5sdy4tYQ6cJqyYEuU+n+5gKXqvXZRY=
Subject key identifier: 5A:07:68:E3:82:89:94:12:A3:CA:57:E0:C4:FD:5B:E1:BD:25:35:D4
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 01880B181BFBFF444CE5D28C391612974ECB
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Wgdo44KJlBKjylfgxP1b4b0lNdQ.roa
Signing time: Thu 11 May 2023 13:55:09 +0000
ROA not before: Thu 11 May 2023 13:55:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0b:18:1b:fb:ff:44:4c:e5:d2:8c:39:16:12:97:4e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: May 11 13:55:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a0768e382899412a3ca57e0c4fd5be1bd2535d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:91:48:8a:df:3c:d3:9b:d2:19:3a:ea:9c:6c:
a6:99:9a:63:29:10:98:b4:3f:cd:5e:af:23:cc:aa:
06:87:76:9a:80:42:71:75:fb:f6:d9:db:a2:b6:c1:
24:d1:cf:db:6c:86:27:62:5b:c6:b4:bf:b6:c7:51:
a0:c5:3d:89:72:c3:7c:55:4d:37:29:6b:e5:61:82:
66:d4:bc:eb:33:46:0e:b2:3c:b0:c2:5f:bd:b3:42:
31:98:18:3e:90:c4:b6:83:1a:a1:51:7a:ed:1e:f7:
c6:3d:b1:b3:ad:73:87:0a:dd:65:c9:b4:4e:b2:d2:
a2:b7:e2:91:2a:91:68:31:f7:94:87:2b:59:d0:66:
ae:20:ca:f4:68:14:c2:4e:a1:2c:f9:8b:ea:1c:d8:
46:4f:6e:a3:f6:51:29:1d:12:45:21:7f:23:e0:44:
f4:04:0d:2d:21:b8:5b:a0:98:cb:8d:a1:c8:a3:93:
38:88:6f:17:f4:5d:8e:2d:36:7e:13:50:fc:df:e0:
8f:b6:e0:0c:39:6f:af:c0:15:e6:b9:07:61:49:a4:
20:a2:a0:85:78:69:66:85:33:ae:74:20:d8:e4:76:
8a:cf:c2:94:ce:8f:02:bb:82:d4:24:ec:38:61:54:
b0:f3:43:96:8e:db:2b:b3:69:9c:6f:47:b7:b1:b5:
85:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:68:E3:82:89:94:12:A3:CA:57:E0:C4:FD:5B:E1:BD:25:35:D4
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/Wgdo44KJlBKjylfgxP1b4b0lNdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
Signature Algorithm: sha256WithRSAEncryption
73:1f:2a:00:b8:0a:1e:97:47:75:7e:c7:93:a5:b9:3d:0f:84:
4f:1f:fe:d6:7d:30:86:bd:0b:54:b7:2f:5b:ca:64:09:cc:fd:
59:5a:11:5d:93:51:b1:1d:75:53:6e:79:5a:43:fa:49:d3:e4:
84:74:b1:23:3e:dd:b9:3e:7f:e4:f6:29:d7:81:f0:85:b9:ca:
05:0e:c0:52:05:d0:1a:bd:0b:c9:c4:2f:64:11:75:93:15:88:
74:33:df:6b:00:4f:28:f6:59:b1:5c:92:c4:43:82:e5:42:1a:
54:7f:15:54:ac:38:0d:5a:3f:6c:ad:ea:e4:94:7b:8c:8b:a0:
72:c9:82:81:7d:3e:30:0f:56:20:65:a6:e3:e8:0d:d8:1e:e1:
08:c9:eb:f9:7e:48:af:1e:1b:0a:8e:02:22:e9:e1:b2:f7:b4:
68:54:25:40:44:9b:b9:58:c2:35:5c:7e:26:59:03:76:e2:94:
a3:eb:ae:95:70:94:ad:d0:ee:f6:8c:c1:e8:e9:04:34:75:dd:
33:68:1e:4a:00:56:0a:fa:e1:99:19:d4:df:9f:10:d7:50:26:
31:72:54:f3:16:5a:67:7a:6d:30:e8:aa:c1:7b:64:2d:95:96:
8a:22:cf:cd:81:fb:cf:dd:6f:52:f0:62:60:43:73:fc:9b:23:
b1:cb:c7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 5 12:07:44 2023 by rpki-client on console-fra.rpki-client.org