Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/WRJkj0zkzSeKQV896xP52dd7gjU.roa
File: WRJkj0zkzSeKQV896xP52dd7gjU.roa (raw, json)
Hash identifier: wh7l7LyoIolOeQZumhAone+0pEVIDim6oPF6Q/Tnd9c=
Subject key identifier: 59:12:64:8F:4C:E4:CD:27:8A:41:5F:3D:EB:13:F9:D9:D7:7B:82:35
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 018B28455B3A0C7081CC415FCB98BF7C8DC9
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/WRJkj0zkzSeKQV896xP52dd7gjU.roa
Signing time: Fri 13 Oct 2023 09:01:55 +0000
ROA not before: Fri 13 Oct 2023 09:01:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35608
IP address blocks: 194.67.70.0/24 maxlen: 24
194.67.69.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:45:5b:3a:0c:70:81:cc:41:5f:cb:98:bf:7c:8d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Oct 13 09:01:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5912648f4ce4cd278a415f3deb13f9d9d77b8235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3e:54:41:8b:70:d5:a6:0f:bd:9b:29:8a:64:
47:b9:fd:46:42:ba:e9:08:93:fb:f6:ec:6e:d7:34:
73:37:32:bf:11:af:3c:62:95:41:ef:ac:e9:30:1e:
c0:3d:f5:e7:23:12:57:93:09:a9:ea:b0:71:d1:e5:
58:72:c9:4e:59:fa:80:a6:73:12:ec:eb:80:e7:a0:
df:c0:a0:52:5a:04:57:c0:45:ce:a8:01:8f:fc:f1:
e0:dc:1e:61:88:bd:15:30:4f:b2:6f:97:ee:4b:5b:
7b:32:f2:36:cf:5d:86:ed:f6:37:07:d3:ac:48:b7:
3d:3e:2d:21:12:64:2d:eb:a8:a3:7f:8d:03:7b:ab:
e0:ea:fc:58:e6:e1:49:1e:51:ff:c0:4d:30:8c:ff:
29:5e:ca:c9:1c:21:80:9a:b9:9c:a5:3f:3b:c6:37:
67:26:86:5d:e3:32:05:b0:41:1b:91:b0:d8:d8:5d:
29:3d:4b:06:9d:0a:29:ae:2c:a7:5c:9c:74:1b:11:
7c:65:71:b2:ae:4d:b9:66:1a:ab:18:51:9b:10:09:
57:4f:2d:6b:70:16:a9:a9:10:97:da:b7:b5:00:d3:
01:83:38:98:4e:81:92:92:29:38:c9:b5:63:13:e3:
ad:c7:e7:c0:60:06:b2:1c:51:06:83:1f:94:92:3e:
7d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:12:64:8F:4C:E4:CD:27:8A:41:5F:3D:EB:13:F9:D9:D7:7B:82:35
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/WRJkj0zkzSeKQV896xP52dd7gjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.69.0-194.67.70.255
Signature Algorithm: sha256WithRSAEncryption
38:72:42:8e:16:2d:6e:65:cc:27:9e:45:a0:ae:01:5f:2d:0a:
6a:38:90:d2:ba:d9:f4:ea:26:29:f1:a1:cf:31:1f:88:f4:12:
c9:23:cb:6f:9c:98:f2:7a:f6:f5:4c:d0:c1:c3:19:9f:ba:e8:
92:26:0f:8e:35:76:08:0e:fe:16:ce:2f:ad:45:da:dd:a2:a3:
88:2b:56:03:52:f1:07:f5:59:7d:eb:d7:05:01:ff:7e:73:48:
2d:d0:08:55:7a:2d:56:52:fd:93:79:55:7f:83:1e:8b:f7:a4:
e0:24:69:5e:ed:a3:9a:1a:ba:9d:41:f7:c3:0b:c9:75:08:fc:
18:79:21:d6:fc:33:91:74:07:89:d7:10:f4:cd:80:a4:78:64:
1b:0b:7c:0c:3d:c6:61:46:e8:10:66:d1:fd:1d:98:1b:6a:2a:
fc:3e:59:9c:47:ff:a7:7b:60:ef:bc:3f:16:7c:78:ce:fc:8e:
03:e1:08:c0:0f:72:51:14:72:ed:b9:39:09:43:4c:bf:2e:41:
f2:aa:72:16:ab:ec:df:ec:d1:e7:fc:3a:99:09:d6:8a:39:bc:
2f:83:0c:db:59:8a:0d:4d:cd:2c:33:5e:02:12:f0:63:3b:b7:
0c:86:72:3b:8f:48:11:82:24:48:4f:f8:2d:28:64:d5:be:c7:
66:bb:b7:52
-----BEGIN CERTIFICATE-----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Generated at Sat Oct 14 05:56:52 2023 by rpki-client on console-fra.rpki-client.org