Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WkypgJbcSXVatLsmpP17SyMiLpk.roa
File: WkypgJbcSXVatLsmpP17SyMiLpk.roa (raw, json)
Hash identifier: wH11vT6ZBSTpi5Xoum8eO2fqlWTd1Sb3VA2VMYSV72k=
Subject key identifier: 5A:4C:A9:80:96:DC:49:75:5A:B4:BB:26:A4:FD:7B:4B:23:22:2E:99
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0190B51C62478C54F13FACFF41A8CFEC8A80
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WkypgJbcSXVatLsmpP17SyMiLpk.roa
Signing time: Mon 15 Jul 2024 06:37:34 +0000
ROA not before: Mon 15 Jul 2024 06:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 195.114.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Aug 2024 07:23:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:1c:62:47:8c:54:f1:3f:ac:ff:41:a8:cf:ec:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jul 15 06:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a4ca98096dc49755ab4bb26a4fd7b4b23222e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c6:50:d7:56:a3:07:68:4b:97:d3:04:07:60:
2a:2c:28:a2:ef:57:d5:9f:0a:a0:63:64:9c:23:c2:
c2:76:7e:1c:d7:87:dd:55:6d:62:f7:0a:d9:3b:98:
ff:78:52:d0:c6:c0:46:61:d1:66:6c:a3:8c:aa:50:
7b:22:df:97:c7:41:f8:ea:9b:61:f0:49:8e:80:a4:
05:2a:6a:66:60:0c:10:db:58:1e:5e:e6:5f:9d:cd:
49:fb:b2:94:50:be:02:83:f3:b8:14:38:74:50:e8:
f3:a5:9d:a2:32:59:04:35:a6:86:14:41:30:f8:df:
f2:d8:c4:27:31:72:36:0c:06:5d:58:a3:e9:de:6b:
5c:49:26:13:b1:22:9f:b4:e4:fa:08:21:fc:e8:7e:
32:4d:fd:67:11:15:68:cd:f1:72:d2:3e:76:47:45:
68:2e:00:6e:c3:1e:80:79:a9:c5:f5:f8:77:e6:91:
12:3a:ad:6a:94:95:47:20:fb:f1:b8:e4:4a:5e:8e:
e5:31:86:15:70:31:ad:d6:d0:da:8c:d3:58:1e:b5:
b5:67:15:31:7c:09:1e:47:8b:88:0f:e8:4c:bc:5e:
05:64:f1:ef:d6:ca:e9:18:b7:d0:95:0f:aa:1e:39:
b2:cb:1d:bc:9e:78:35:52:05:2f:10:05:48:7d:06:
7f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4C:A9:80:96:DC:49:75:5A:B4:BB:26:A4:FD:7B:4B:23:22:2E:99
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WkypgJbcSXVatLsmpP17SyMiLpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.114.200.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6e:83:fe:5f:05:6d:43:07:78:88:dd:7a:f7:50:0f:b9:55:
07:0f:8f:b7:e3:f6:c9:43:23:92:8f:fa:ad:9c:c5:74:d3:56:
91:a5:6b:6b:74:be:7c:65:27:fe:ec:31:94:35:08:9b:e8:bd:
af:89:1c:cb:3a:a3:b9:11:ea:eb:57:00:55:e9:ef:c4:4c:8f:
88:68:24:61:96:5c:35:e3:e7:d7:40:0d:a8:a4:1c:6a:36:19:
6d:a5:7d:aa:96:28:e4:f8:62:af:c6:98:cd:dc:34:42:13:cb:
54:94:83:24:24:ab:5c:31:a8:53:02:a9:1c:82:3b:86:cf:49:
cb:dd:b8:0a:d6:f1:c2:3e:ae:c6:78:6e:b5:4e:89:65:8c:9c:
3f:93:9c:f4:90:c7:58:0c:9a:ae:e8:4d:45:c2:f0:3b:46:88:
d0:3a:1d:99:9c:2d:db:fb:17:03:7c:a9:0f:af:0c:a9:08:8a:
ca:62:cf:0f:83:2c:8f:8f:10:12:89:c7:29:78:11:cd:fc:0f:
13:31:88:e6:35:62:b8:9e:03:1e:76:0e:03:bd:19:ff:51:93:
2d:69:15:5c:50:b6:f4:cb:c9:92:ad:ed:22:b2:11:a2:d4:71:
ba:2e:2f:57:39:89:79:90:db:99:d2:8a:83:0c:f3:17:bb:89:
d5:f1:4c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 12 10:21:01 2024 by rpki-client on console-fra.rpki-client.org