Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wExJFk3-P9VQXdJ5kKpYHWEgxV4.roa
File: wExJFk3-P9VQXdJ5kKpYHWEgxV4.roa (raw, json)
Hash identifier: dfISXn2VHWrBgwLv89nYInkynwuvuD6TvCtzcHzBpng=
Subject key identifier: C0:4C:49:16:4D:FE:3F:D5:50:5D:D2:79:90:AA:58:1D:61:20:C5:5E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018C00F4A2C9503047259819C92C1DAFB6B9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wExJFk3-P9VQXdJ5kKpYHWEgxV4.roa
Signing time: Fri 24 Nov 2023 10:51:21 +0000
ROA not before: Fri 24 Nov 2023 10:51:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12552
IP address blocks: 193.181.71.0/24 maxlen: 24
192.71.200.0/24 maxlen: 24
194.103.248.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:f4:a2:c9:50:30:47:25:98:19:c9:2c:1d:af:b6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 24 10:51:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c04c49164dfe3fd5505dd27990aa581d6120c55e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cc:6a:b8:47:61:ee:e5:25:be:96:1a:1f:cc:
e5:e7:51:0f:19:27:88:dd:42:8e:2c:ad:ec:9b:a5:
db:a3:f4:5e:ff:4a:d8:ff:e1:ad:07:c5:89:d0:3a:
2c:92:00:6e:94:b1:d4:5d:8f:e4:54:05:dc:cd:e8:
b6:d9:2d:f8:72:81:58:34:66:58:6b:87:b4:12:92:
b6:7b:1e:0f:29:eb:12:0e:19:6e:ac:8d:af:95:2b:
39:c2:a1:2c:be:e9:f4:09:a2:4c:7f:b1:11:ec:3e:
9c:0c:7d:4e:de:3d:dd:aa:7f:18:17:c0:11:97:08:
56:7a:50:9d:e2:03:f2:79:a4:bc:56:7b:82:7d:60:
f2:29:96:86:29:ed:23:b9:bb:82:e7:b5:55:86:9f:
94:7b:90:88:2c:ed:bd:cb:7b:7a:55:31:6a:6c:51:
db:b4:c2:9b:ef:84:3d:43:8d:0c:38:60:fc:d7:b1:
f8:ab:26:61:a2:a8:1a:00:cc:71:db:e6:6a:1d:b8:
7a:1c:ff:40:6c:88:04:8b:e4:31:19:7f:6b:99:2e:
7c:2b:b4:40:4b:b9:b9:a1:3a:88:14:c5:5c:5b:b4:
32:42:99:89:ba:c1:8f:96:b1:2b:9e:a3:30:15:36:
eb:88:68:ca:2a:6f:3c:b7:85:aa:49:c4:c1:9c:13:
f7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4C:49:16:4D:FE:3F:D5:50:5D:D2:79:90:AA:58:1D:61:20:C5:5E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wExJFk3-P9VQXdJ5kKpYHWEgxV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.200.0/24
193.181.71.0/24
193.182.6.0/24
194.103.248.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c0:fd:d9:ad:59:06:e6:fe:94:eb:9a:39:50:47:bd:55:07:
09:44:ba:6c:8f:dd:0f:16:65:d6:22:8c:4e:a1:cd:b2:73:9f:
dd:6f:c4:c5:9f:42:b0:ed:81:72:8a:b3:9d:5f:99:ea:0c:6b:
e9:9f:dc:23:2b:77:6e:14:18:bf:ba:02:52:e9:16:ad:8c:57:
b7:87:e0:ab:0f:be:1c:28:af:fc:8a:bd:e0:99:23:ff:ee:88:
9c:40:a9:c7:ec:c5:72:1f:46:e9:a6:a5:30:c3:75:b5:7c:55:
84:60:40:f2:d0:39:c3:0a:f0:14:97:b3:84:bd:60:14:6c:90:
67:99:d6:84:c9:b4:7b:3d:61:9d:ca:98:ff:79:5c:ad:26:db:
c4:c1:ad:25:6e:9f:80:d3:ea:71:ea:f1:39:f3:89:4b:d8:ba:
7f:3c:6d:f2:f6:69:3a:88:1f:39:f0:7c:ad:54:36:d7:76:5e:
76:c7:85:09:62:e8:fe:c7:40:b1:37:f2:28:f0:3c:84:f3:57:
5d:3f:a0:a0:c5:8b:08:ac:b6:61:7a:7a:62:a7:9c:a4:bf:54:
2a:4a:e4:95:83:90:74:d2:4d:f2:5a:f0:70:42:e6:f5:29:df:
91:bf:c9:33:e3:01:29:a2:17:b8:ed:1e:25:c9:91:88:3e:50:
c5:1f:43:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org