Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/WjyKs3G-Dr4bGXeHNFM_wWOKAAY.roa
File: WjyKs3G-Dr4bGXeHNFM_wWOKAAY.roa (raw, json)
Hash identifier: WJHKIaTpPBApHqrKRdOyoBZ51bvzyHWTgMM7ZKwANM4=
Subject key identifier: 5A:3C:8A:B3:71:BE:0E:BE:1B:19:77:87:34:53:3F:C1:63:8A:00:06
Certificate issuer: /CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Certificate serial: 01856C4A40CECDA9DB9CECE66BF2B9E11EA8
Authority key identifier: 13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/WjyKs3G-Dr4bGXeHNFM_wWOKAAY.roa
Signing time: Sun 01 Jan 2023 07:44:43 +0000
ROA not before: Sun 01 Jan 2023 07:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44820
IP address blocks: 91.194.40.0/23 maxlen: 23
91.203.4.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:40:ce:cd:a9:db:9c:ec:e6:6b:f2:b9:e1:1e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ec4731f102c30cc13e2fb5a7f9758cea963452
Validity
Not Before: Jan 1 07:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a3c8ab371be0ebe1b19778734533fc1638a0006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ef:91:23:4c:85:af:f7:ca:fe:e2:78:57:ea:
5a:b5:ec:a5:d0:3c:a3:17:43:75:a9:09:c2:3a:9c:
f9:81:2f:d3:e9:47:9c:cd:c8:59:f5:89:fe:6f:09:
14:d3:fe:4c:bc:8c:00:b7:60:b7:77:27:95:5b:da:
68:53:bf:2e:19:5f:f4:89:13:15:cb:a7:77:5c:ff:
7f:d6:be:08:63:75:c5:83:2f:95:02:12:2e:ac:54:
4b:93:2a:66:a5:b5:40:89:16:89:f6:68:03:cd:d5:
1d:1f:d7:9c:b9:c4:b4:c7:96:b0:0f:1d:c7:dd:77:
9f:46:14:86:da:fc:fd:ca:ef:87:91:f5:d5:bf:a9:
c6:b2:7d:fa:3a:bf:d3:f2:50:50:eb:f2:ef:bd:90:
99:10:cd:de:0f:86:4f:0e:72:73:4f:1e:20:93:74:
e0:70:27:78:de:35:20:77:c5:a7:5b:95:8d:d2:75:
38:79:a9:cd:76:14:a2:f8:fc:87:f6:8f:a0:d1:0d:
8e:9a:b8:b7:4b:02:4d:2c:22:2f:89:42:e3:21:33:
4f:52:1c:b1:e4:af:3d:e4:aa:01:b8:a9:c0:82:f7:
d1:c5:75:65:af:9b:0a:87:f3:65:88:29:4c:b6:7f:
20:c0:db:c1:54:90:90:f0:b9:ce:06:ea:af:a2:2d:
53:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:8A:B3:71:BE:0E:BE:1B:19:77:87:34:53:3F:C1:63:8A:00:06
X509v3 Authority Key Identifier:
keyid:13:EC:47:31:F1:02:C3:0C:C1:3E:2F:B5:A7:F9:75:8C:EA:96:34:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-xHMfECwwzBPi-1p_l1jOqWNFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/WjyKs3G-Dr4bGXeHNFM_wWOKAAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/982f1d-4121-46b5-add0-d41bcc928375/1/E-xHMfECwwzBPi-1p_l1jOqWNFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.40.0/23
91.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:fe:17:f7:15:92:a4:d8:d7:3c:13:b3:71:da:d6:b1:41:ee:
f9:f1:7e:db:39:87:55:15:7d:a1:a1:85:8e:dd:06:60:7d:67:
2b:f3:16:32:68:54:2a:ef:d9:c1:57:37:68:80:80:59:0c:a4:
45:65:c1:21:8a:80:cc:9e:7a:ce:0a:a0:1e:55:fc:4c:e6:02:
ac:88:6b:b6:c0:a4:e8:89:31:a0:05:44:25:63:3d:e7:03:26:
4b:c8:55:28:72:42:23:61:ae:60:fb:e2:18:6c:86:15:a9:80:
f9:da:48:82:1e:7a:43:3f:99:3b:95:fc:9e:45:9e:c8:82:61:
15:9a:d1:cc:b4:a5:13:21:38:fd:f1:f3:be:c3:9c:f3:81:2b:
e4:13:63:b9:3d:55:d5:a5:f4:63:ca:5b:69:00:32:cd:68:6e:
b8:d6:6b:ca:ea:27:dc:78:81:58:28:2f:da:7d:89:1b:44:f1:
ff:5d:f6:07:73:1a:bc:cc:fa:40:76:e9:1d:d2:ad:18:7f:3d:
7d:7e:d6:68:86:a3:e5:01:35:42:bd:cd:0b:21:25:1f:db:02:
c6:fa:58:3b:c0:17:57:61:58:65:03:12:07:12:a2:dd:8a:ea:
a1:57:58:0e:6b:d6:e2:ef:c2:9f:d2:9f:07:0c:32:37:f4:1f:
99:5c:90:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:33 2024 by rpki-client on console-ams.rpki-client.org