Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/WuqKhSpDKEmty3D8xWWebdxRs0A.roa
File: WuqKhSpDKEmty3D8xWWebdxRs0A.roa (raw, json)
Hash identifier: DG3WJeQ5mV1cwWeHv83L46qB25gcDW6lrIgrDKfjBO4=
Subject key identifier: 5A:EA:8A:85:2A:43:28:49:AD:CB:70:FC:C5:65:9E:6D:DC:51:B3:40
Certificate issuer: /CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Certificate serial: 01856D6F468F3A83447D4A9B3F88C8EAAFE9
Authority key identifier: F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/WuqKhSpDKEmty3D8xWWebdxRs0A.roa
Signing time: Sun 01 Jan 2023 13:04:47 +0000
ROA not before: Sun 01 Jan 2023 13:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42424
IP address blocks: 194.126.146.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:46:8f:3a:83:44:7d:4a:9b:3f:88:c8:ea:af:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a115c717e589134a553670f3e2b5b9cda12d83
Validity
Not Before: Jan 1 13:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aea8a852a432849adcb70fcc5659e6ddc51b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:11:ec:29:aa:ee:bf:c1:60:5c:0f:a2:64:
fe:ee:6d:0a:dd:93:b3:27:a3:ee:4c:44:e4:77:bd:
9f:e9:d1:b5:1a:a9:a2:21:31:ca:d2:b1:b2:49:bf:
35:c3:65:36:3c:a8:df:47:4d:72:3e:b5:2a:ca:89:
c3:55:7b:53:76:42:b0:2d:ae:b5:b3:41:21:59:dc:
0e:d4:56:45:aa:46:51:74:d5:49:c3:0d:48:37:53:
e9:8e:e6:15:00:ab:10:8b:b5:45:f1:e1:98:3e:ac:
d9:99:6a:32:d4:34:fa:6b:37:db:05:06:3f:2e:37:
f7:a6:92:76:7f:2c:0a:90:5c:e7:13:e4:03:5d:31:
bf:9c:b3:6a:a0:15:67:0f:cc:c4:74:c3:7e:6e:81:
b3:d1:b8:9d:df:07:71:26:ea:f4:13:78:9b:90:3f:
87:59:7e:6b:ef:02:f2:74:f1:45:9e:8e:aa:e3:9e:
19:28:b3:2a:76:cb:b9:cf:f2:e0:3b:c5:6d:fd:3e:
12:9a:d2:be:d1:ea:7e:f0:0f:c0:31:b5:de:12:26:
73:fe:98:9a:15:b4:5d:1c:63:98:51:cb:d8:18:7e:
5d:9f:65:93:67:35:7a:1e:fa:cf:39:89:01:1b:6a:
e5:35:52:c7:7e:6a:92:61:57:37:b4:fd:37:8d:c1:
6d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:8A:85:2A:43:28:49:AD:CB:70:FC:C5:65:9E:6D:DC:51:B3:40
X509v3 Authority Key Identifier:
keyid:F0:A1:15:C7:17:E5:89:13:4A:55:36:70:F3:E2:B5:B9:CD:A1:2D:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KEVxxfliRNKVTZw8-K1uc2hLYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/WuqKhSpDKEmty3D8xWWebdxRs0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c522d7-a489-4b76-9348-37624f6a5311/1/8KEVxxfliRNKVTZw8-K1uc2hLYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1d:ec:df:ec:d5:31:35:4a:83:bc:30:5a:8d:61:6d:94:a1:
17:cb:b4:cc:80:fb:60:97:0a:d6:5d:a0:bc:db:2f:2e:92:07:
7a:0f:99:be:92:a2:d5:d3:16:ed:85:7e:bf:11:14:66:b4:8b:
a1:e4:04:f7:19:7e:d8:99:ae:61:f1:ce:1d:72:c4:64:68:7d:
b7:96:37:77:62:41:bd:b9:22:d5:ae:a9:49:7a:08:83:89:1d:
8e:43:26:ce:77:61:64:21:08:2a:58:66:dd:45:5c:aa:e3:e2:
d7:8c:73:f8:34:57:ed:7c:b1:44:3f:2f:5d:9a:94:b5:96:9d:
ce:38:47:76:43:f9:a9:47:dc:92:be:ae:53:cd:17:05:bb:41:
f9:59:1d:65:ec:90:ca:a8:07:ec:2f:de:de:25:ed:6e:14:a4:
16:60:de:7a:7a:80:a1:55:0f:c3:b7:4a:4f:e9:3b:fe:28:7f:
4c:91:3f:54:12:ba:e2:ab:41:94:5e:28:b8:fe:3c:66:79:0e:
9b:f1:35:21:6b:17:be:e9:94:68:78:5d:0e:16:38:6b:2d:63:
43:ae:12:f7:30:6f:0c:6c:07:1a:d2:f5:5e:c7:92:16:7d:31:
65:97:ed:58:e3:ba:80:90:a5:33:ad:5f:86:02:53:64:73:48:
22:71:56:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:37 2024 by rpki-client on console-fra.rpki-client.org