Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/wBYQtjoYDBH772jzlgGn9DaknYs.roa
File: wBYQtjoYDBH772jzlgGn9DaknYs.roa (raw, json)
Hash identifier: 0Bd0Pr8FwYwq5ih+j6+qUxmmxArwoso7bMd6B9aZLgE=
Subject key identifier: C0:16:10:B6:3A:18:0C:11:FB:EF:68:F3:96:01:A7:F4:36:A4:9D:8B
Certificate issuer: /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial: 01856BE5B3A348D506025F3225F0C760B30B
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/wBYQtjoYDBH772jzlgGn9DaknYs.roa
Signing time: Sun 01 Jan 2023 05:54:53 +0000
ROA not before: Sun 01 Jan 2023 05:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210221
IP address blocks: 194.38.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:b3:a3:48:d5:06:02:5f:32:25:f0:c7:60:b3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
Validity
Not Before: Jan 1 05:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01610b63a180c11fbef68f39601a7f436a49d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:73:a1:4c:dd:a5:5b:2d:b1:e3:d5:9c:0e:74:
ba:1e:44:b7:c3:c1:85:11:a1:9c:7e:6b:d7:c9:3c:
ef:0d:02:7d:5e:8c:8e:30:b3:e2:c4:4e:58:22:f3:
ee:87:88:d8:68:12:7b:c8:19:89:f5:5f:b0:4b:a2:
b1:25:12:23:70:a1:93:7f:94:38:41:c3:91:84:52:
c2:5a:bc:84:57:80:8f:c1:ec:b6:f9:78:10:c3:82:
44:da:4d:12:18:59:45:fc:44:0d:e5:80:82:28:2c:
e6:8a:c0:df:b8:54:49:2e:a8:b2:45:83:e1:e2:32:
06:03:c5:de:95:85:a3:97:a2:8d:e8:5f:d2:fe:0e:
cf:3a:cd:9f:8d:ef:d9:6e:82:fe:39:e7:95:02:29:
bc:da:cc:e3:72:29:e9:61:71:35:dd:02:a6:b8:d8:
23:29:da:a1:45:fb:57:43:4b:c0:3c:a6:0c:25:b2:
0d:7f:61:88:aa:7a:c0:1a:93:5b:4b:05:b8:ee:ad:
17:b8:a7:82:81:9b:4a:0c:06:85:11:f2:94:76:60:
55:c7:c4:66:5d:ea:61:eb:9f:53:b1:10:d7:40:09:
40:7e:98:7f:26:85:38:4b:e1:cb:a8:9b:34:c2:4e:
9f:68:bc:57:60:83:8a:e9:67:dd:ed:1c:b0:34:dd:
c5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:10:B6:3A:18:0C:11:FB:EF:68:F3:96:01:A7:F4:36:A4:9D:8B
X509v3 Authority Key Identifier:
keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/wBYQtjoYDBH772jzlgGn9DaknYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:8d:ba:41:1c:1a:45:ac:4d:06:1c:ab:53:cc:eb:e6:4c:57:
32:e3:e7:fb:1f:20:6b:7e:2d:40:34:e1:36:6c:f4:68:7c:c0:
cd:c6:cb:7c:72:44:58:39:a4:4c:9d:85:9e:fc:b8:aa:25:5b:
33:9e:2e:d7:bd:9d:b1:48:e9:0b:37:26:5c:13:93:4e:93:fc:
f8:b7:0b:30:18:c5:22:c9:39:22:bc:44:33:c1:04:67:cc:87:
17:29:9d:7f:d5:e7:93:b9:3a:2b:f5:af:bf:4e:fc:cf:df:25:
4f:fb:bc:93:78:bd:ad:d0:1d:74:24:93:91:94:0f:8c:f7:55:
11:e6:8a:92:5e:b5:c0:01:4b:98:ec:57:1f:5c:a5:45:43:9a:
ff:36:eb:7f:eb:33:70:82:f7:c4:25:b5:f8:e9:d2:20:5f:d9:
e2:76:9f:72:a2:2d:a8:91:2e:ae:58:09:d2:ad:cb:98:09:18:
7d:ce:76:e6:8e:92:06:64:78:ad:f7:ee:15:74:ca:67:c6:27:
5f:20:aa:d0:c3:3f:fd:29:92:ad:c2:5e:13:4c:33:d8:21:79:
d0:30:a0:eb:4e:d2:e0:c8:a8:f5:b3:b4:f4:fe:e1:91:31:04:
50:38:d4:22:68:61:1f:c0:0f:2f:ea:62:5b:bb:b9:7f:dd:1b:
67:6f:ad:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:57 2024 by rpki-client on console-ams.rpki-client.org