Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/W1kDC7O4UmShPgNd0vlQcy4iYng.roa
File: W1kDC7O4UmShPgNd0vlQcy4iYng.roa (raw, json)
Hash identifier: UdhrZ9eKZWYcbLP467FSqBnWzcB5a431rYOyA+I2LOk=
Subject key identifier: 5B:59:03:0B:B3:B8:52:64:A1:3E:03:5D:D2:F9:50:73:2E:22:62:78
Certificate issuer: /CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Certificate serial: 01856F2FDF11E94309FF20A866F07C224E86
Authority key identifier: CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/W1kDC7O4UmShPgNd0vlQcy4iYng.roa
Signing time: Sun 01 Jan 2023 21:14:46 +0000
ROA not before: Sun 01 Jan 2023 21:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208011
IP address blocks: 194.156.190.0/23 maxlen: 24
194.156.198.0/24 maxlen: 24
194.156.198.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 14:26:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:df:11:e9:43:09:ff:20:a8:66:f0:7c:22:4e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf26c91af0ab2668a3601b2d957dc4ce002d5986
Validity
Not Before: Jan 1 21:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b59030bb3b85264a13e035dd2f950732e226278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:be:4f:73:21:25:0e:73:2f:bb:4e:b8:6c:
43:48:ea:3a:7d:86:26:99:95:41:fd:c4:63:44:c8:
4b:03:53:c3:63:5c:38:e6:e0:ee:5c:43:31:65:64:
57:d0:93:03:f3:6a:5c:95:81:57:80:6e:f3:df:4c:
cf:b2:f2:1a:23:0b:10:28:f9:d7:2b:1e:af:93:ea:
8a:2b:2c:b8:6a:d3:cb:51:6e:e8:2a:ad:1b:27:4a:
eb:5c:74:c9:dc:91:76:d3:f4:ee:51:1a:26:c8:56:
9e:9a:2a:f5:38:90:b2:73:a4:8a:b4:66:ee:8e:bf:
5a:7d:57:34:a7:8c:05:ae:4a:ea:ce:5a:e0:2b:ab:
53:9a:18:7b:ba:c3:1f:9e:d5:bd:99:5d:38:3c:b1:
f9:7b:32:80:ff:c5:05:44:69:84:c2:25:e1:9c:bd:
15:88:41:93:ac:a8:c3:00:f5:ac:98:7a:6c:59:2f:
a6:bb:c1:79:ab:a2:70:0f:be:5a:86:a8:a3:65:ed:
4c:29:fd:a3:07:5c:d5:6b:d1:8b:62:6b:53:42:5f:
d5:04:7e:14:57:e7:5b:d7:38:d6:18:e8:26:2c:f7:
75:b9:8a:54:98:d8:09:98:b7:6f:7e:dd:6b:92:3f:
8d:dc:ef:84:09:39:90:bf:de:5f:5f:f8:44:21:be:
90:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:59:03:0B:B3:B8:52:64:A1:3E:03:5D:D2:F9:50:73:2E:22:62:78
X509v3 Authority Key Identifier:
keyid:CF:26:C9:1A:F0:AB:26:68:A3:60:1B:2D:95:7D:C4:CE:00:2D:59:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zybJGvCrJmijYBstlX3EzgAtWYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/W1kDC7O4UmShPgNd0vlQcy4iYng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/76ddd7-0af2-43ce-9859-6bc8394656b7/1/zybJGvCrJmijYBstlX3EzgAtWYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.190.0/23
194.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
92:c1:01:93:54:6d:93:0c:47:6f:69:cf:b8:91:da:d2:ac:87:
33:39:86:3e:a7:16:66:64:8a:b5:b4:18:28:14:e3:78:44:f2:
ac:2a:79:aa:7e:07:e0:61:21:8c:fe:c3:bb:96:96:4c:e6:9e:
41:34:98:3b:f5:8a:50:19:7b:4f:4b:60:0d:e0:d2:3f:13:7d:
68:6d:a1:e2:4f:bc:e5:3b:6c:22:f3:cf:3c:7b:bb:d7:a3:8b:
bc:59:a0:da:e1:c2:39:f4:b2:b3:f7:97:90:40:9e:1e:cb:f3:
00:38:e5:c1:74:79:38:6f:fc:d1:d9:74:b9:c9:30:48:d6:e3:
cc:18:a4:01:e4:8f:ab:46:fa:91:04:41:df:42:49:17:88:2c:
a1:65:60:52:8f:d1:9f:3b:bd:41:2b:b5:38:1a:d5:c5:4a:ef:
eb:c3:87:2d:cd:e4:67:22:ea:ef:70:c0:73:85:54:87:ed:de:
03:65:03:14:1f:7c:80:b8:ca:d9:68:93:83:44:12:ba:a7:b9:
51:ee:b0:18:35:22:9f:21:1c:0c:b7:02:5f:a3:22:02:38:af:
02:c6:aa:f4:fc:91:19:ee:10:1e:c7:46:04:7e:01:7f:a3:d7:
2c:7d:7f:f0:8d:7b:40:f5:ab:49:87:02:08:8c:81:d6:37:41:
28:eb:e3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:06 2024 by rpki-client on console-ams.rpki-client.org