Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/WVcR1806IYe8sxOnhTMlzRoRfgI.roa
File: WVcR1806IYe8sxOnhTMlzRoRfgI.roa (raw, json)
Hash identifier: +j1GfJZwe82f+akYbESEW57i2/y4wSVrLLWWVBkFoWk=
Subject key identifier: 59:57:11:D7:CD:3A:21:87:BC:B3:13:A7:85:33:25:CD:1A:11:7E:02
Certificate issuer: /CN=20feef391f16300157bb78b2eaea06d61c20c945
Certificate serial: 018FF0E89DB6CFD73180E18191C441046C31
Authority key identifier: 20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/WVcR1806IYe8sxOnhTMlzRoRfgI.roa
Signing time: Fri 07 Jun 2024 04:15:27 +0000
ROA not before: Fri 07 Jun 2024 04:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.25.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Jun 2024 14:54:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f0:e8:9d:b6:cf:d7:31:80:e1:81:91:c4:41:04:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20feef391f16300157bb78b2eaea06d61c20c945
Validity
Not Before: Jun 7 04:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=595711d7cd3a2187bcb313a7853325cd1a117e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d7:69:c2:d2:ab:2d:a0:a6:78:61:df:07:33:
8b:24:47:2d:ea:f5:e3:84:4c:fc:de:85:af:a7:76:
32:1f:f5:41:72:37:22:93:49:12:20:12:5d:f6:3b:
35:3d:4a:2d:f8:12:c5:7e:4c:2b:70:cd:7b:6b:09:
cf:85:9d:49:27:60:ed:50:b9:10:43:8a:0f:d1:59:
c4:7d:f9:ec:cf:8e:41:33:13:02:ea:36:56:82:d2:
70:65:eb:c5:85:66:71:c9:0e:67:dc:9d:93:2b:b8:
e6:ed:b8:72:8d:ea:eb:8f:bf:24:06:1a:41:8d:41:
52:c4:24:9c:8f:00:0e:1b:51:14:5c:b1:82:49:52:
ff:94:96:42:08:6c:dc:09:99:98:c3:3b:df:56:84:
73:d0:28:fb:7f:b5:86:cf:82:19:48:47:5b:0e:4a:
60:60:22:4c:86:95:06:b3:f1:1b:ae:3a:ac:1a:67:
68:5e:23:b9:5f:d9:fd:ba:9a:1c:d8:b3:42:70:a0:
f9:d4:07:89:0b:f5:5a:1b:83:09:ff:f4:79:39:2b:
b9:2c:d2:f7:cf:23:75:45:36:30:43:7e:92:d7:0d:
da:bc:4d:64:7f:17:f4:33:d5:42:fa:80:84:59:27:
cb:e4:7b:76:ca:aa:b1:82:a4:51:e5:9c:fe:b4:87:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:57:11:D7:CD:3A:21:87:BC:B3:13:A7:85:33:25:CD:1A:11:7E:02
X509v3 Authority Key Identifier:
keyid:20:FE:EF:39:1F:16:30:01:57:BB:78:B2:EA:EA:06:D6:1C:20:C9:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IP7vOR8WMAFXu3iy6uoG1hwgyUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/WVcR1806IYe8sxOnhTMlzRoRfgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/64722b-2995-40de-8b87-226b8d4a5f60/1/IP7vOR8WMAFXu3iy6uoG1hwgyUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.167.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:6e:64:b3:58:3b:2f:2c:57:b5:28:6b:34:07:45:83:4c:2f:
d4:0f:d7:4e:68:11:f5:24:46:5f:d1:4b:59:72:93:5f:a7:82:
83:35:13:49:0d:82:80:5d:89:60:c0:58:ef:20:1a:9c:3c:ff:
da:7f:b9:d9:89:57:bf:46:f5:3d:99:9b:c5:46:7e:10:ac:c0:
2a:65:82:32:28:b2:38:fa:a0:ef:2f:f6:f0:fa:60:17:b0:73:
17:76:c6:96:23:95:75:17:88:30:2c:5d:b8:61:50:03:60:89:
0f:6e:7f:0b:ee:fd:5f:92:ba:c2:b4:7a:d6:6d:84:89:19:85:
13:36:bc:6c:0b:2c:ff:af:ab:9a:ef:51:d3:cf:22:ea:05:f1:
3d:5e:f7:a4:1f:33:ba:b1:02:1f:dd:a0:cb:3a:50:58:01:65:
b5:66:e6:7a:c1:99:7d:a9:5d:d8:ad:d2:01:64:aa:b1:67:bf:
8d:db:a2:d1:02:47:61:7c:60:51:c7:5a:ed:46:d5:75:6c:1b:
7e:88:02:df:c9:2f:a8:c1:0b:13:f3:a3:ca:e2:07:96:1f:9a:
b9:b1:14:f4:a0:fd:1f:6e:c8:98:e4:6c:66:79:ee:2d:0f:ca:
76:0c:2d:56:a4:f8:f5:40:00:68:9a:2d:c5:28:5c:80:76:45:
2d:35:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:40 2024 by rpki-client on console-ams.rpki-client.org