Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/wxbHEfJLKTd9IelsmKF0I3BU3k8.roa
File: wxbHEfJLKTd9IelsmKF0I3BU3k8.roa (raw, json)
Hash identifier: JuJn5WwWL+APXrs+zb8KuHTR5hSFNvyziHqub2q+N4U=
Subject key identifier: C3:16:C7:11:F2:4B:29:37:7D:21:E9:6C:98:A1:74:23:70:54:DE:4F
Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Certificate serial: 01856F42BBCCC863359901BFDD545A5C9E75
Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/wxbHEfJLKTd9IelsmKF0I3BU3k8.roa
Signing time: Sun 01 Jan 2023 21:35:22 +0000
ROA not before: Sun 01 Jan 2023 21:35:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48943
IP address blocks: 195.88.166.0/23 maxlen: 23
193.111.87.0/24 maxlen: 24
2001:67c:2420::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:bb:cc:c8:63:35:99:01:bf:dd:54:5a:5c:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf
Validity
Not Before: Jan 1 21:35:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c316c711f24b29377d21e96c98a174237054de4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c5:62:8c:88:cf:46:85:2d:5e:e7:2c:13:6e:
78:ff:0c:f3:cb:25:dd:c3:e4:0a:1d:c8:fb:0d:ac:
6a:35:b1:e9:f8:c2:7c:8e:c9:5c:d8:50:4b:65:04:
bf:8d:ef:cd:b6:45:73:31:df:1b:2c:ec:47:a7:63:
ec:50:a5:75:19:e9:51:da:a8:de:38:7b:10:b9:ac:
d9:e8:d8:54:12:96:d0:16:3c:82:3b:aa:53:72:53:
f3:41:f5:11:2b:0f:14:af:ad:9a:b4:b4:45:2a:52:
da:14:df:be:10:3e:ef:5f:85:18:25:77:fb:f0:7d:
30:5e:2c:03:c7:d6:e4:04:d6:0f:f8:c6:82:72:10:
80:d8:eb:1d:03:c4:7c:0f:f7:ee:43:a5:ee:27:9a:
c7:5e:02:69:85:cd:de:f3:9d:37:8f:02:d6:0c:e8:
f7:30:c2:1a:1a:45:f5:a3:c5:62:66:95:5b:8e:2a:
33:74:96:a4:31:57:2f:7a:c3:04:e7:83:aa:8d:4a:
3d:7b:76:5e:c8:28:fb:42:30:dc:1b:e2:65:88:02:
bc:c4:cf:55:cd:67:89:b5:f4:a6:85:78:6c:b1:35:
ec:91:6e:78:88:17:99:6c:66:e9:d7:82:a6:f3:8c:
69:e1:a8:50:12:ab:00:8c:11:b7:08:66:e4:bd:ee:
01:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:16:C7:11:F2:4B:29:37:7D:21:E9:6C:98:A1:74:23:70:54:DE:4F
X509v3 Authority Key Identifier:
keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/wxbHEfJLKTd9IelsmKF0I3BU3k8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.87.0/24
195.88.166.0/23
IPv6:
2001:67c:2420::/48
Signature Algorithm: sha256WithRSAEncryption
9f:18:5f:58:92:b1:32:8b:6e:7a:92:9f:ed:1f:92:0f:b3:8f:
85:ee:2f:5d:56:8e:28:8b:4c:8f:e8:f5:02:3f:d6:68:5f:a6:
73:3b:7d:2d:bd:2e:f0:3b:a0:9e:e7:5d:5f:00:c3:ce:7b:85:
a2:28:35:82:5f:dd:51:b3:73:3e:82:7c:5b:c6:aa:b0:82:a2:
a0:69:6a:83:71:84:41:e1:85:80:2a:9d:8b:3b:a2:a0:cf:30:
2b:ea:a0:bd:92:65:0c:56:cf:32:79:0d:2a:69:f7:2f:bd:e4:
36:c5:a2:cc:9e:ed:77:b4:6a:31:e8:3e:83:e2:6a:70:24:04:
e1:f8:34:7b:57:f4:78:9e:2a:52:6d:dc:83:14:f9:e7:fb:eb:
76:c5:48:2e:49:62:da:b9:20:6f:11:e9:f8:be:74:bc:6a:47:
b9:b8:82:68:67:30:1b:ec:26:58:0d:cf:a0:ca:3a:37:ad:ad:
b6:ed:bd:ad:a5:eb:05:6e:76:88:66:27:71:92:42:9f:09:28:
b2:fe:4b:76:26:d1:a7:9f:fb:4f:a6:53:e9:b3:a0:13:67:9a:
9e:91:f0:d6:66:0f:48:3e:0b:48:2e:83:c2:2c:5c:7d:40:ac:
02:41:b2:08:c4:ea:33:a4:8d:35:d8:60:b6:67:ab:ad:97:0c:
ff:ba:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:10 2024 by rpki-client on console-ams.rpki-client.org