Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/W6y5muJDcKy6yPBJ_fwMVp_0c1U.roa
File: W6y5muJDcKy6yPBJ_fwMVp_0c1U.roa (raw, json)
Hash identifier: Cv9TSjf/gyWD+kq2KT6b/KSkO/6aNZMmoXmcDfNo9+I=
Subject key identifier: 5B:AC:B9:9A:E2:43:70:AC:BA:C8:F0:49:FD:FC:0C:56:9F:F4:73:55
Certificate issuer: /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial: 01857102C90CA106A60AB1CDED3F26187B8B
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/W6y5muJDcKy6yPBJ_fwMVp_0c1U.roa
Signing time: Mon 02 Jan 2023 05:44:45 +0000
ROA not before: Mon 02 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8218
IP address blocks: 164.138.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c9:0c:a1:06:a6:0a:b1:cd:ed:3f:26:18:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Validity
Not Before: Jan 2 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bacb99ae24370acbac8f049fdfc0c569ff47355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a1:f2:97:ad:c6:a9:d3:f2:eb:a4:22:c5:b1:
60:0c:88:21:80:b1:15:0e:bf:68:b5:38:8f:51:76:
45:08:86:45:fb:b3:09:83:6b:24:4d:78:35:ee:b2:
67:90:06:5e:7c:eb:b8:29:9a:1d:ad:02:53:74:3d:
26:ea:5b:45:3f:68:4d:08:b2:eb:ad:9c:26:7f:6d:
c7:b0:d6:9c:53:a3:ef:bb:51:3f:88:b6:eb:6b:88:
96:55:69:e9:2c:14:b6:51:3f:ad:8b:c6:2a:2b:92:
ae:97:12:66:31:2b:4a:ca:a1:b8:47:2d:d2:ca:77:
20:f9:40:56:a0:ef:bf:59:ff:83:48:0f:b2:b7:cf:
07:d9:49:eb:c9:19:7e:e5:1a:40:12:56:04:c0:fe:
88:0c:59:f9:cd:15:bb:ee:cd:18:1e:7f:2b:ee:d2:
f5:f0:e3:c8:27:7b:6a:c9:84:1f:e5:19:7c:f9:be:
0b:77:dc:1b:5a:88:f5:25:81:72:9f:8f:b0:aa:08:
be:4f:c3:b5:e6:85:51:c8:93:db:f3:32:a2:ea:c4:
5d:a3:07:5e:f2:84:4d:3e:c0:52:5c:03:4c:4e:d4:
78:ff:96:7a:70:12:13:c0:66:8e:5a:84:20:8a:1f:
96:4d:5d:c8:ab:e4:6d:32:d4:fa:89:ab:13:dc:f5:
31:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AC:B9:9A:E2:43:70:AC:BA:C8:F0:49:FD:FC:0C:56:9F:F4:73:55
X509v3 Authority Key Identifier:
keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/W6y5muJDcKy6yPBJ_fwMVp_0c1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.246.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:0c:3e:f3:13:da:15:2a:58:01:cf:94:4a:f7:46:b6:7b:62:
34:6d:6f:44:4a:59:9f:42:ab:9d:c0:db:04:10:85:b3:cb:5f:
d6:90:6d:3e:d2:b7:de:35:4f:e6:f1:dd:bb:fe:8e:2b:cd:8c:
84:b5:e2:19:ce:09:1a:53:05:60:2b:8a:83:13:09:b6:01:78:
0a:48:d9:b0:d8:f1:6d:0e:5e:1b:0c:7e:40:0f:7f:01:9f:93:
4b:74:dd:3a:36:03:eb:a7:ee:a9:95:8b:ca:2f:b5:63:d4:40:
bc:66:8e:ee:cb:a6:95:59:04:07:4b:0f:f6:20:d8:c6:c3:6a:
d6:15:c7:f8:8f:a0:38:e0:99:9b:ce:7a:c3:35:19:43:53:b2:
16:28:8b:9e:27:07:3d:f8:6c:7c:50:68:43:be:29:09:de:60:
22:09:a7:21:50:dd:c2:68:4a:4c:af:3e:5b:c9:71:0c:89:eb:
6c:05:af:30:40:f0:27:f3:9e:67:3d:e9:2f:79:26:4c:2a:46:
3d:9c:6a:78:35:03:c0:d6:6a:a8:44:4f:9a:1d:a2:00:e5:14:
da:01:e2:d6:d5:8c:ce:d0:1f:01:f1:6d:4c:28:e0:1e:cb:73:
26:37:59:51:78:b2:fb:e9:02:42:3e:82:6b:c8:36:85:e7:80:
6f:78:45:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:45 2024 by rpki-client on console-fra.rpki-client.org