Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/wNRYGHnQYyMQc5L7G_sWNLApplI.roa
File: wNRYGHnQYyMQc5L7G_sWNLApplI.roa (raw, json)
Hash identifier: ocA6cxmO2EGVutZZm3foIavgWQ/wRCIBB17XyIwnDtQ=
Subject key identifier: C0:D4:58:18:79:D0:63:23:10:73:92:FB:1B:FB:16:34:B0:29:A6:52
Certificate issuer: /CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Certificate serial: 01856F54A312045282CED5EB33E11FB6181E
Authority key identifier: C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/wNRYGHnQYyMQc5L7G_sWNLApplI.roa
Signing time: Sun 01 Jan 2023 21:54:55 +0000
ROA not before: Sun 01 Jan 2023 21:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204121
IP address blocks: 185.114.0.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:a3:12:04:52:82:ce:d5:eb:33:e1:1f:b6:18:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7bb24c4b9783ca23b6ed5e750443eed3a72f93b
Validity
Not Before: Jan 1 21:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0d4581879d06323107392fb1bfb1634b029a652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:48:be:85:60:ff:1b:f2:42:f6:ed:b9:5c:
18:e9:78:af:12:5c:63:da:7e:8a:d0:58:c8:df:cb:
1e:aa:83:ee:3d:f2:0e:c7:46:d7:55:dd:22:0a:d5:
f3:5f:1e:58:b9:f0:7c:61:86:5e:24:06:df:f8:b4:
8f:25:e7:b3:24:d0:ad:44:3a:4b:21:56:cb:b1:59:
d0:e2:20:95:9a:8a:17:2e:a3:66:1f:b1:39:c5:b9:
43:a3:60:fd:59:7f:28:a3:39:ac:a7:a9:56:a6:65:
75:f0:33:2f:95:53:8b:ee:03:f8:0f:1f:ce:00:ff:
cb:c3:92:d6:a9:69:13:55:00:b3:1f:1f:98:4c:43:
3d:be:c9:c3:e1:96:17:70:b9:97:1f:aa:bd:8f:39:
99:7c:69:aa:df:21:58:f7:c0:92:79:5b:88:2c:cb:
e4:7b:10:a4:1e:0a:3f:b0:24:14:17:13:8b:fe:14:
4b:b5:05:e8:5f:09:61:a2:0a:28:75:84:cd:19:e5:
f7:66:36:09:17:5b:ec:1f:bf:68:41:9c:fe:40:3a:
1e:42:6b:e2:22:08:b1:60:04:d3:e1:66:80:2b:0d:
e3:4a:4a:21:1d:92:fc:c5:e0:f6:9d:b8:a8:74:9a:
df:35:26:2b:c6:51:a2:e8:6b:a2:23:e9:a9:0e:2e:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:58:18:79:D0:63:23:10:73:92:FB:1B:FB:16:34:B0:29:A6:52
X509v3 Authority Key Identifier:
keyid:C7:BB:24:C4:B9:78:3C:A2:3B:6E:D5:E7:50:44:3E:ED:3A:72:F9:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/wNRYGHnQYyMQc5L7G_sWNLApplI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ad08e6-7332-46a1-bf72-4b5957aa747f/1/x7skxLl4PKI7btXnUEQ-7Tpy-Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.0.0/22
Signature Algorithm: sha256WithRSAEncryption
40:3c:77:a3:8f:18:12:51:ea:99:0d:4a:7e:7d:d6:db:5e:c8:
89:f8:41:b2:c1:b9:fc:09:be:02:d5:cd:88:c5:54:ca:83:e3:
cb:53:e8:b9:62:ac:62:6d:db:85:ee:a9:3c:0d:a3:1c:23:66:
1d:ce:b2:57:ae:af:83:b5:c6:a2:72:eb:8e:59:bd:5e:e4:87:
c6:ef:7c:d0:65:5d:df:c0:57:4c:94:2e:21:ea:ea:77:09:a0:
17:fe:3e:e5:11:ec:47:db:a4:7f:62:9e:87:11:87:3a:ca:34:
2e:17:cb:cc:95:f0:49:99:f3:63:af:0b:36:ec:fd:09:10:4f:
3a:55:e6:92:58:c8:0d:03:5f:39:f1:d8:23:fd:18:c4:44:5a:
9b:41:ed:84:b9:90:a7:03:05:39:33:bb:61:52:e1:40:23:d2:
04:77:99:b0:e0:7a:89:06:b3:82:00:c9:d5:3b:7b:9a:a7:e8:
bf:a0:d5:4a:f9:37:23:c5:c1:5f:c8:c9:a7:f1:85:48:74:84:
39:43:f8:c1:cc:36:59:83:91:35:02:17:04:ee:61:46:66:39:
b3:ee:3b:32:33:82:e3:d5:f7:bd:7a:58:74:6d:ee:fd:48:d1:
a2:41:b9:e4:81:5f:4f:21:1b:96:56:45:ea:1e:93:67:49:15:
44:e2:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 07:05:05 2024 by rpki-client on console.sobornost.net