Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/wdcWIQYT4xkS7uplAbBr-TWyBVs.roa
File: wdcWIQYT4xkS7uplAbBr-TWyBVs.roa (raw, json)
Hash identifier: l3L787lijpxeybICT4sdUPkgYCB/3u79FsTXk7c4/+k=
Subject key identifier: C1:D7:16:21:06:13:E3:19:12:EE:EA:65:01:B0:6B:F9:35:B2:05:5B
Certificate issuer: /CN=da16c6198d0dc1942fc11ea8fd046b8f8427e829
Certificate serial: 018BAA8E5A20165EAF217D8D0CF489D4573B
Authority key identifier: DA:16:C6:19:8D:0D:C1:94:2F:C1:1E:A8:FD:04:6B:8F:84:27:E8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/wdcWIQYT4xkS7uplAbBr-TWyBVs.roa
Signing time: Tue 07 Nov 2023 16:12:17 +0000
ROA not before: Tue 07 Nov 2023 16:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 193.5.44.0/24 maxlen: 24
193.5.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:8e:5a:20:16:5e:af:21:7d:8d:0c:f4:89:d4:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da16c6198d0dc1942fc11ea8fd046b8f8427e829
Validity
Not Before: Nov 7 16:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d716210613e31912eeea6501b06bf935b2055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:59:7d:77:00:89:29:85:bc:67:fd:e6:0b:88:
ea:ef:8c:59:a7:e2:d8:b5:8d:ae:7f:c5:5c:9d:7c:
45:84:91:8c:1f:6d:c5:2f:37:c9:25:f1:0b:6f:c8:
b7:85:68:fa:09:93:4b:74:ab:f1:69:2a:a2:d6:d3:
92:54:a0:55:f0:23:47:06:36:d2:50:d6:a7:3e:d3:
4b:f9:7c:f4:fd:5c:eb:9e:80:72:2c:a8:f8:34:d3:
64:0e:f0:c7:83:74:1d:a8:95:f8:08:fa:f4:e9:2c:
de:b0:df:18:e4:a0:89:0e:71:bc:81:ee:7c:4c:4e:
ab:9d:bb:37:28:ad:e9:fb:b9:fd:ff:f3:2d:cc:e5:
45:5b:e8:5a:c1:5f:1c:2e:28:03:33:5c:51:62:59:
9e:9d:76:0b:2b:54:5a:ee:0b:a1:ef:f6:d4:0b:43:
e5:6c:da:e2:45:69:71:4a:3f:b8:48:56:3e:45:f3:
a4:c3:0c:46:c2:81:62:0e:10:8b:df:d0:50:c2:98:
0b:ca:a8:27:87:8d:7b:07:42:0b:39:bd:e4:09:c8:
b3:b2:b8:3d:a8:fb:b0:78:12:5a:ca:f9:71:85:1c:
f4:87:3c:40:9d:0f:34:0a:d4:4f:96:e6:cf:1e:00:
f9:6a:50:71:6b:89:7c:4f:43:94:0d:6f:c0:7c:6e:
ca:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D7:16:21:06:13:E3:19:12:EE:EA:65:01:B0:6B:F9:35:B2:05:5B
X509v3 Authority Key Identifier:
keyid:DA:16:C6:19:8D:0D:C1:94:2F:C1:1E:A8:FD:04:6B:8F:84:27:E8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/wdcWIQYT4xkS7uplAbBr-TWyBVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cd4ac8-2235-4539-85b1-78a709d7fefd/1/2hbGGY0NwZQvwR6o_QRrj4Qn6Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.44.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:00:57:74:8b:4e:e4:44:a3:35:6f:a4:7f:e2:81:73:82:b5:
f7:a9:be:a7:50:39:44:bf:60:d7:2c:80:a2:36:f9:f8:c7:81:
06:a5:50:8c:d8:79:78:9f:20:ca:7c:8a:b9:cd:35:33:3f:c1:
32:6b:60:25:f4:86:96:02:8e:f2:dc:51:30:04:95:a3:b3:c1:
33:53:70:8e:a1:f8:c6:41:91:38:6a:ed:04:0c:9c:23:ff:4e:
ba:21:86:19:0e:6b:47:08:a8:1f:4d:59:b4:ca:e0:13:fa:bf:
a9:f1:a8:7f:ed:26:f8:92:5c:b2:29:e3:e2:b3:ea:32:da:3c:
88:17:fe:61:a9:3e:6f:97:ec:05:09:20:b2:e8:5e:a0:13:30:
0e:c1:4f:8d:a3:8f:c3:6a:34:57:e1:80:d8:a4:6d:00:93:e0:
93:41:4a:3d:3a:19:a6:7c:cc:76:15:ef:44:16:a8:fa:c0:7f:
4b:44:c2:40:e6:e3:9c:9b:cb:74:0c:40:31:ff:c5:22:39:a2:
a3:fb:a7:d0:4b:84:4b:44:2a:0f:ad:d6:d2:b4:ca:2e:b7:f0:
57:c1:a0:8b:c3:67:ad:c5:1e:5c:37:45:23:f6:f7:d8:3a:8a:
2d:7a:c6:4b:78:ba:01:74:d4:00:91:02:fa:2f:e3:bc:11:2f:
7d:c9:08:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:24 2024 by rpki-client on console-fra.rpki-client.org