Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WDe0UIe4FjXJmF7UhWwFvQfCnKw.roa
File: WDe0UIe4FjXJmF7UhWwFvQfCnKw.roa (raw, json)
Hash identifier: IhlQJARvXSgtx9RrbcjubqL2oY0HkIGjgDHiZiCaL/Y=
Subject key identifier: 58:37:B4:50:87:B8:16:35:C9:98:5E:D4:85:6C:05:BD:07:C2:9C:AC
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710304E346EA491DBEEA801A85688C46
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WDe0UIe4FjXJmF7UhWwFvQfCnKw.roa
Signing time: Mon 02 Jan 2023 05:45:01 +0000
ROA not before: Mon 02 Jan 2023 05:45:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33801
IP address blocks: 178.239.206.0/23 maxlen: 24
178.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:04:e3:46:ea:49:1d:be:ea:80:1a:85:68:8c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5837b45087b81635c9985ed4856c05bd07c29cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0a:97:49:9c:99:0c:22:f6:ae:70:67:25:5c:
f3:4a:da:d6:ad:64:c6:42:1b:16:12:85:03:78:b7:
89:00:c8:58:28:1c:6c:4e:eb:6d:c0:06:57:9a:9a:
91:f6:50:78:7b:2e:de:55:2e:ef:06:4a:f4:c1:1b:
3d:cc:97:a9:f9:86:b9:c8:f3:e6:cf:33:a1:a2:1c:
4b:92:06:43:54:2f:52:64:6d:34:9e:fc:74:fc:33:
11:83:8a:bd:9f:2b:ed:c5:23:68:64:12:75:f4:d6:
a9:e9:42:bd:84:09:19:c2:f7:02:f8:b1:eb:67:e4:
21:8f:5b:3f:c9:a8:f1:31:cf:f0:9d:d0:0a:f9:a4:
07:d0:ee:17:fb:77:3d:e8:04:9a:1a:c3:e9:1a:64:
5f:9a:3d:26:18:68:21:f7:09:3a:08:db:ee:ca:cd:
4f:0d:ed:27:d0:79:1e:fb:86:79:20:0f:93:8a:18:
ae:45:33:73:10:a5:7d:96:f7:c2:8e:52:de:f8:95:
7f:3f:0d:bb:56:77:ea:c0:3d:b9:d0:53:58:9e:f4:
00:b6:c0:a9:76:49:f3:6b:0b:c1:27:45:4d:3c:c0:
58:09:d4:a0:fb:cd:3b:db:77:1b:f1:9a:0d:97:36:
93:34:e6:36:f9:c2:0a:bc:08:ab:5b:5c:9d:3a:cf:
7d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:37:B4:50:87:B8:16:35:C9:98:5E:D4:85:6C:05:BD:07:C2:9C:AC
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WDe0UIe4FjXJmF7UhWwFvQfCnKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.196.0/24
178.239.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:6f:83:21:9c:91:88:f7:a8:cc:52:b1:7c:8f:b0:3d:03:7d:
fb:69:63:80:fc:a6:a7:6f:24:25:71:0b:38:3c:a1:4e:ee:ff:
6a:94:b7:fd:3c:e5:20:16:fe:5a:d3:47:8b:7f:a4:ee:79:3f:
9f:6b:e4:10:d2:2b:9f:40:17:0f:fe:73:77:52:bf:e6:72:81:
56:c9:71:d2:8f:b0:cb:f2:3b:fc:ce:c3:2d:45:9d:ac:27:a7:
b1:8e:e2:a9:33:8a:11:e4:b7:70:d9:95:14:e0:79:48:c4:75:
fd:04:23:f2:1a:aa:bb:f4:ea:42:36:89:1c:df:0a:ed:0e:7a:
49:57:fb:61:3c:e6:56:c1:9f:3f:bc:ad:f2:89:58:0e:fa:58:
81:8d:49:c9:eb:74:d8:7d:70:23:44:3c:db:5a:1a:eb:70:2e:
04:5a:91:34:bd:07:3d:5a:ff:7c:6e:10:b6:3e:58:9c:e7:72:
bd:9f:84:18:27:24:8c:ae:e0:15:3f:31:11:83:58:5e:8b:70:
a9:53:93:e5:8a:e5:1f:6c:ef:1a:f2:0e:25:6e:63:a7:45:98:
c1:b6:c8:1c:31:ac:52:6e:04:2b:c7:ab:36:46:0d:b7:42:d0:
6c:1a:28:56:30:fd:b3:44:ad:d5:f1:dc:18:4f:0e:fd:2b:e6:
a6:0b:ac:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org