Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/WodptPWSQ4TU0qLTNaTpa-2raYs.roa
File: WodptPWSQ4TU0qLTNaTpa-2raYs.roa (raw, json)
Hash identifier: XZMmkSgEkvG6ILTHUDp1zM6B3pc/SeIZThp/DPcfDS8=
Subject key identifier: 5A:87:69:B4:F5:92:43:84:D4:D2:A2:D3:35:A4:E9:6B:ED:AB:69:8B
Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Certificate serial: 0187B2E31E0948B711A4F9C03E67CCFF6B34
Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/WodptPWSQ4TU0qLTNaTpa-2raYs.roa
Signing time: Mon 24 Apr 2023 10:50:41 +0000
ROA not before: Mon 24 Apr 2023 10:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13127
IP address blocks: 91.209.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b2:e3:1e:09:48:b7:11:a4:f9:c0:3e:67:cc:ff:6b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6
Validity
Not Before: Apr 24 10:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8769b4f5924384d4d2a2d335a4e96bedab698b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:cb:0c:86:a3:76:ba:14:ab:16:8d:8a:44:
6f:18:c4:8a:7a:38:c7:36:35:48:30:9d:00:28:0a:
f6:78:b4:74:aa:a4:2b:38:38:96:1d:86:af:ae:dc:
2d:71:d3:18:d1:a1:28:01:86:53:63:67:8a:bf:2c:
dc:4f:a0:22:28:70:a7:fc:54:45:7f:e2:98:39:f9:
b3:a5:f0:25:0e:90:f8:4e:6d:fc:99:ec:3c:1e:f2:
f1:11:c8:8b:1f:51:65:e1:4b:53:f7:84:19:e7:39:
cc:a2:dd:00:11:4a:de:a3:f7:f7:56:bd:69:b3:2d:
5f:97:67:b6:bd:ad:39:5f:4a:63:be:5b:61:2b:46:
ab:a4:eb:cb:e0:89:38:3b:f2:99:2c:d2:51:8d:cc:
31:73:87:f2:2d:69:e2:97:d1:78:d9:e4:06:44:13:
6f:d7:26:79:7a:7d:41:c8:f8:4c:43:4b:7b:2e:67:
9d:ed:7a:db:8f:ab:ee:aa:af:0d:50:f0:26:fd:25:
53:82:17:d2:e2:a9:70:ec:6f:37:77:e9:27:2c:90:
42:8d:08:5b:90:f4:df:03:a5:b1:c5:67:ab:3d:a5:
96:1f:3f:51:fe:ef:db:b6:6c:a3:db:83:e1:39:c8:
65:b2:34:22:ba:1d:58:2a:ba:4b:43:7b:b8:a6:84:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:87:69:B4:F5:92:43:84:D4:D2:A2:D3:35:A4:E9:6B:ED:AB:69:8B
X509v3 Authority Key Identifier:
keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/WodptPWSQ4TU0qLTNaTpa-2raYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.137.0/24
Signature Algorithm: sha256WithRSAEncryption
61:22:5c:e5:8d:fe:89:9b:7f:4e:e1:21:5b:41:cb:0c:34:8f:
36:28:63:25:93:2f:b2:65:0f:e3:ea:4d:43:39:7a:fb:32:31:
2b:6e:99:4e:b6:ab:78:5f:70:4a:66:81:29:bc:ab:48:78:13:
6b:4c:da:ee:a9:cf:ed:a0:be:51:f5:4a:7b:c3:22:0c:42:be:
d5:61:07:e0:9b:63:76:82:5b:ba:c4:e9:6d:48:2e:ac:61:d2:
fd:61:96:63:c0:a5:29:83:d7:40:85:ad:65:d0:74:8f:95:d7:
52:4f:21:55:17:e7:56:40:48:fa:da:9c:cc:8d:8f:7b:a7:d8:
fa:39:20:df:cf:54:0e:9a:99:da:66:a8:fc:e9:6e:28:fe:c2:
24:0c:6c:08:19:40:13:15:90:e3:26:71:f1:9e:1b:4a:6f:63:
44:bc:46:5b:d2:e5:62:90:b2:40:ad:98:13:98:f1:df:8d:19:
4a:78:72:89:88:22:60:5c:db:58:9c:3e:df:92:bc:98:3b:fa:
d1:a9:ca:a5:6b:a0:5e:ff:aa:c9:14:03:99:06:19:bb:9b:a6:
e0:7a:f2:c0:37:eb:b3:cb:69:75:67:eb:8a:41:73:d5:1a:7a:
8c:f4:56:86:84:24:80:0d:c2:17:11:d9:0a:f1:3e:66:9f:4a:
93:80:21:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:55 2024 by rpki-client on console-fra.rpki-client.org