Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WENZPRpD8VR4s65C5ko6zjYe_VQ.roa
File: WENZPRpD8VR4s65C5ko6zjYe_VQ.roa (raw, json)
Hash identifier: gC2YqAVQQlwt6EHxmPAOWBL7o6sNZUkm1GaSJja9r0k=
Subject key identifier: 58:43:59:3D:1A:43:F1:54:78:B3:AE:42:E6:4A:3A:CE:36:1E:FD:54
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCACDECF930B6B236C2048EDA6382AA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WENZPRpD8VR4s65C5ko6zjYe_VQ.roa
Signing time: Sun 01 Jan 2023 10:05:08 +0000
ROA not before: Sun 01 Jan 2023 10:05:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2865
IP address blocks: 194.132.150.0/24 maxlen: 24
192.36.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:cd:ec:f9:30:b6:b2:36:c2:04:8e:da:63:82:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5843593d1a43f15478b3ae42e64a3ace361efd54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5d:d5:6f:d5:86:fe:ba:05:c9:5d:2f:e7:7f:
34:73:56:cb:bf:7e:5b:27:82:63:ac:63:9d:b9:ab:
49:74:38:6b:fa:f0:20:f5:91:28:00:de:28:2f:70:
ac:ab:07:ef:a0:90:4d:37:59:39:5e:33:4d:09:41:
ee:64:7b:fb:20:31:fb:eb:d8:bc:1c:9e:0b:0f:ac:
19:72:8c:e3:10:26:30:37:f8:12:e6:90:06:6d:17:
9f:60:45:6a:7c:89:3c:b1:bc:17:db:91:7d:3e:be:
ea:d5:9a:72:2c:10:66:6e:d1:ff:64:cb:b3:5d:36:
e7:1f:55:9f:a9:d2:c0:8a:35:ec:28:33:b9:47:9e:
2d:92:09:91:84:d1:15:6f:fb:ae:e6:e7:27:f3:62:
3b:10:27:d2:a3:36:e3:f0:d3:b6:46:c6:05:e3:9d:
48:9a:c0:48:0d:02:7d:27:7a:f1:64:f2:27:f0:b2:
e7:78:6d:91:49:2b:a1:db:cb:69:9f:52:19:6f:1c:
be:47:ff:fc:0b:e2:16:4a:89:03:28:cf:39:8f:5c:
a8:35:c9:2b:95:83:48:62:b9:51:29:19:4c:9d:94:
67:74:1c:a0:c0:93:35:17:ab:7e:89:84:d4:9f:3c:
c4:84:3c:81:9b:af:27:70:ec:68:c0:ea:42:36:0a:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:59:3D:1A:43:F1:54:78:B3:AE:42:E6:4A:3A:CE:36:1E:FD:54
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WENZPRpD8VR4s65C5ko6zjYe_VQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.49.0/24
194.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f7:a5:02:44:bf:3c:71:07:48:71:60:09:00:ec:52:c0:dd:
44:f7:02:49:b1:14:cc:10:3b:ef:f2:92:ba:57:0d:1c:aa:77:
3f:9f:cb:67:38:39:5e:c5:64:f0:3d:b1:01:ac:f3:4c:d6:14:
28:bc:2b:30:3e:9c:03:32:35:78:d6:c1:d5:28:78:6a:fb:c7:
78:77:75:0a:54:f7:26:b6:76:81:2e:39:40:9a:df:2c:f5:d6:
a7:05:9e:7d:7a:4c:a8:f4:8f:bd:ed:a5:43:31:67:fe:71:76:
82:e7:16:18:2e:59:76:71:06:69:42:25:b6:fe:3b:c7:98:50:
a4:af:33:70:69:56:ca:03:a4:42:d5:6e:62:3b:8b:ed:21:8e:
52:2d:73:1f:b3:9c:c5:f8:0c:84:ac:30:9c:5b:ae:3b:e4:fa:
77:67:5b:f9:87:c4:99:dc:be:6e:a4:5e:6c:77:a2:35:08:06:
69:ef:2b:3b:d4:5c:fb:53:a6:f5:56:54:b7:7a:e8:7f:bf:f4:
7f:13:74:d0:20:82:90:a3:8e:82:c3:c9:c5:51:fb:7f:0f:ea:
1f:61:70:af:bf:e1:ff:7a:89:ba:ff:13:88:58:1d:6e:6c:48:
a2:08:2b:e7:76:ef:d0:ee:62:a0:94:6b:1a:bb:3a:a9:6d:9b:
17:70:7e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org