Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/wzuBpAK-ci98Xy2fpFerm4H3O7Q.roa
File: wzuBpAK-ci98Xy2fpFerm4H3O7Q.roa (raw, json)
Hash identifier: akVlcUh87ktZnXUNWYkX3eq89r4H3W+gkJ2uSOfvDqQ=
Subject key identifier: C3:3B:81:A4:02:BE:72:2F:7C:5F:2D:9F:A4:57:AB:9B:81:F7:3B:B4
Certificate issuer: /CN=d85022282e34699fe548b7528519a25a50d9133a
Certificate serial: 018570B062A629C890481EDE9A230DAA9CB7
Authority key identifier: D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/wzuBpAK-ci98Xy2fpFerm4H3O7Q.roa
Signing time: Mon 02 Jan 2023 04:14:45 +0000
ROA not before: Mon 02 Jan 2023 04:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 193.27.40.0/24 maxlen: 24
193.25.98.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:62:a6:29:c8:90:48:1e:de:9a:23:0d:aa:9c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d85022282e34699fe548b7528519a25a50d9133a
Validity
Not Before: Jan 2 04:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c33b81a402be722f7c5f2d9fa457ab9b81f73bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7c:73:b5:3e:48:68:98:1a:a7:e7:91:c3:ce:
63:78:29:f3:12:4d:2b:7e:39:ce:6a:1e:5d:19:0e:
6c:89:ef:c1:60:ca:e4:c3:f1:21:df:c9:2b:60:df:
b9:7e:16:a2:e2:4a:96:c4:ab:26:d3:a5:ee:c4:65:
1e:32:b6:b6:94:ec:1c:09:84:7a:52:98:b8:21:67:
ef:10:73:81:9f:7f:b4:e4:1c:47:91:ad:c5:ef:93:
2b:d9:12:b2:e0:04:cc:f1:6f:6e:da:f2:7d:3e:c4:
82:59:51:58:93:b7:fc:5f:f5:56:63:d7:03:ec:d0:
06:37:8e:78:33:37:e1:55:3a:24:0a:65:ea:bb:ef:
73:26:6b:71:f6:3a:25:ad:12:27:66:66:65:1c:63:
7d:47:5f:9f:3c:ac:03:ea:f8:4d:b7:ef:25:7a:ab:
64:4e:b3:93:a5:87:d2:7c:53:d5:34:f6:b9:aa:46:
eb:d3:fe:7a:da:a8:ee:ae:ce:f0:08:a8:27:d6:2d:
8c:32:82:42:90:3c:07:bc:91:11:7e:b3:4f:ee:00:
dc:24:8c:cb:4f:89:82:29:66:c8:b8:3c:96:85:57:
c3:1c:73:cf:39:ae:3a:41:2b:47:bf:b1:4a:af:94:
e8:1f:b1:a9:1d:17:8e:a0:96:82:8c:cf:f9:9d:70:
20:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3B:81:A4:02:BE:72:2F:7C:5F:2D:9F:A4:57:AB:9B:81:F7:3B:B4
X509v3 Authority Key Identifier:
keyid:D8:50:22:28:2E:34:69:9F:E5:48:B7:52:85:19:A2:5A:50:D9:13:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2FAiKC40aZ_lSLdShRmiWlDZEzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/wzuBpAK-ci98Xy2fpFerm4H3O7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/9758eb-4108-4087-a818-50ea67327cd1/1/2FAiKC40aZ_lSLdShRmiWlDZEzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.98.0/23
193.27.40.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f5:22:a5:7a:a5:cc:66:e9:20:bd:ac:ee:b0:59:d9:d0:a9:
7c:ae:8c:87:6b:10:b5:88:c2:c4:67:6b:64:c8:59:ff:06:08:
4e:78:5c:21:10:60:bb:7a:38:a2:34:cb:9c:e0:19:30:dd:87:
21:7b:b7:63:a4:4d:40:f7:18:08:f8:e2:69:a8:2c:3b:cd:65:
9f:1e:90:9a:37:bd:5a:83:e2:b1:63:15:d9:47:07:a2:de:cb:
61:8f:42:db:3e:ce:2e:14:d4:d7:47:a0:86:ef:d1:54:4d:b2:
42:e4:30:ce:89:32:e2:9a:81:1b:e9:76:9c:9e:96:74:ae:9c:
41:ca:e3:93:da:e5:42:df:09:46:3f:56:fa:e2:ac:a7:2b:58:
eb:3a:6b:b1:91:3b:6a:0b:5c:be:e6:3d:91:90:1a:2a:9d:d2:
a6:69:2b:4a:7a:b6:31:02:bb:63:f6:33:ad:a7:e4:e3:67:f4:
28:d3:58:6b:da:b0:81:81:9c:60:fe:7a:2a:2b:2f:6b:47:8f:
28:30:42:2b:63:0b:3e:69:e2:d2:2d:15:44:ab:e4:cd:49:6a:
3e:15:01:da:f2:bb:bf:7b:71:c6:12:ea:56:1f:d9:f7:96:68:
c9:ae:a4:67:21:aa:43:75:1d:f6:aa:35:de:d9:6e:dc:f3:0d:
47:21:55:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:13 2024 by rpki-client on console-ams.rpki-client.org