Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/wwX9TZ3EI8F_KGMTL8BX8s5EdBE.roa
File: wwX9TZ3EI8F_KGMTL8BX8s5EdBE.roa (raw, json)
Hash identifier: g9UHeEjK+kh4puapfL8lt7INLssZ4yLkJVEA/KWM/Ic=
Subject key identifier: C3:05:FD:4D:9D:C4:23:C1:7F:28:63:13:2F:C0:57:F2:CE:44:74:11
Certificate issuer: /CN=84f824d32df1a5113d82101345d785a38addbde5
Certificate serial: 0185727A2A802FDD60DD3F7AC307A2625992
Authority key identifier: 84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/wwX9TZ3EI8F_KGMTL8BX8s5EdBE.roa
Signing time: Mon 02 Jan 2023 12:34:46 +0000
ROA not before: Mon 02 Jan 2023 12:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 86.106.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:7a:2a:80:2f:dd:60:dd:3f:7a:c3:07:a2:62:59:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f824d32df1a5113d82101345d785a38addbde5
Validity
Not Before: Jan 2 12:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c305fd4d9dc423c17f2863132fc057f2ce447411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:d5:72:3e:61:10:c1:4b:b8:46:d0:d6:00:
ae:1c:a0:74:fa:86:58:ac:d5:aa:ee:f7:77:cd:93:
4e:8f:4e:2d:f4:ee:a6:67:95:95:71:89:fd:36:9f:
ec:d0:1d:d6:aa:ef:c2:66:36:ae:94:08:49:31:37:
21:0d:86:ba:44:36:52:ad:3a:fa:c5:4c:21:02:f6:
ab:1c:95:5f:5c:0b:13:97:fe:67:10:e1:53:cf:f1:
8f:65:dc:5e:25:8a:64:29:99:7b:5a:cd:4d:4d:9c:
22:be:10:4d:8a:62:85:e0:22:9b:14:33:ba:66:5a:
c6:27:f8:98:6e:c1:9b:ff:e0:29:37:f0:5d:40:19:
b3:ee:3b:3e:3d:af:e7:f5:12:a1:48:76:f2:71:7e:
2a:fd:8d:d3:d5:7a:0e:87:ac:a0:54:8e:c9:ec:17:
6a:a0:5b:a2:ce:ee:34:2c:4b:f1:62:cd:5b:04:9f:
1e:f3:2a:fd:c5:22:c7:74:d1:49:9c:19:59:c7:3f:
cd:eb:1f:6c:bd:e4:f3:54:56:80:fc:1a:8b:e9:0e:
d0:67:f7:47:53:54:92:05:a1:b1:c6:67:12:d9:30:
63:ef:b8:e5:20:cf:05:69:66:51:a7:50:e8:a8:68:
63:2d:68:14:d3:7a:7c:dd:f9:8e:cc:13:93:9f:2a:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:05:FD:4D:9D:C4:23:C1:7F:28:63:13:2F:C0:57:F2:CE:44:74:11
X509v3 Authority Key Identifier:
keyid:84:F8:24:D3:2D:F1:A5:11:3D:82:10:13:45:D7:85:A3:8A:DD:BD:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPgk0y3xpRE9ghATRdeFo4rdveU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/wwX9TZ3EI8F_KGMTL8BX8s5EdBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/9d65bb-ab4f-43aa-bba8-437394938c52/1/hPgk0y3xpRE9ghATRdeFo4rdveU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.109.0/24
Signature Algorithm: sha256WithRSAEncryption
72:82:40:e5:18:59:a8:17:57:7a:c3:cf:e8:bb:bd:39:a0:1b:
84:46:3a:81:22:aa:39:82:1c:0d:76:e0:31:21:0c:57:91:8a:
d6:64:da:6f:f9:13:2b:be:af:ca:61:6f:17:86:b2:09:c1:71:
07:9b:dc:c0:c2:da:1f:98:d1:cd:ab:02:8f:71:60:b1:e1:d0:
24:48:72:5f:80:8f:e4:d4:02:2c:19:57:28:9b:ea:e6:e7:c9:
0c:dd:1a:44:49:33:4b:96:73:55:14:56:b6:20:97:c6:78:b2:
c4:14:66:b6:fe:06:f0:53:e4:f3:c5:8f:16:69:66:a9:9c:92:
6d:3a:06:a9:35:1d:f4:a4:22:df:d9:42:78:02:96:26:fa:dd:
76:e6:7d:93:59:81:1a:36:4b:4c:ae:fe:95:89:81:95:46:89:
48:29:43:a2:a0:38:55:ec:c6:ec:9d:d2:5d:9d:d6:60:4e:e4:
e3:cd:f1:a9:74:58:60:1e:52:5e:5b:aa:27:15:bb:65:43:4d:
5a:6d:4b:66:5c:f5:a2:7c:c7:74:e6:a8:6c:91:07:2a:2c:87:
55:80:8d:f3:10:ec:1d:42:66:1f:2d:5b:90:bc:4b:82:d5:4e:
f2:f4:a7:7b:0b:53:51:86:87:93:61:24:7c:7a:dd:00:e2:3e:
f7:3d:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:35 2023 by rpki-client on console-fra.rpki-client.org