Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/W_CW745eAPMwSyribYZg-jac7LM.roa
File: W_CW745eAPMwSyribYZg-jac7LM.roa (raw, json)
Hash identifier: 9q9vXSnozX/3z3xX2fOaE9ekkY047zZBPjr4vwVhEII=
Subject key identifier: 5B:F0:96:EF:8E:5E:00:F3:30:4B:2A:E2:6D:86:60:FA:36:9C:EC:B3
Certificate issuer: /CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Certificate serial: 018AACF239ED9B765391D6E58234D47063F8
Authority key identifier: 1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/W_CW745eAPMwSyribYZg-jac7LM.roa
Signing time: Tue 19 Sep 2023 10:17:50 +0000
ROA not before: Tue 19 Sep 2023 10:17:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202818
IP address blocks: 2a01:8280:3330::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:f2:39:ed:9b:76:53:91:d6:e5:82:34:d4:70:63:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fa795167d2d9fb420941f17287bdf3c5eed8df9
Validity
Not Before: Sep 19 10:17:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bf096ef8e5e00f3304b2ae26d8660fa369cecb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:26:77:c4:1c:bc:3d:98:72:ce:b0:9c:f5:cd:
a9:f3:b8:7a:c2:b0:c3:16:76:71:27:93:a2:c7:24:
64:c2:69:5f:31:4a:c7:2c:e2:d9:f9:3c:38:89:da:
00:b7:a9:8e:fa:db:5a:39:b7:17:23:be:5d:f0:ba:
e4:a9:5a:6d:1b:cf:86:c1:20:bb:1c:df:1b:c2:f0:
b3:25:30:d3:27:4d:49:eb:a0:ee:e8:a9:50:d4:d5:
27:b7:8c:62:6f:32:34:a8:c7:fb:70:73:ec:5d:29:
b0:9c:ec:52:af:23:fb:1d:13:6e:1e:b6:91:2b:80:
dd:e2:b2:af:c2:53:5b:ab:20:4e:91:20:8e:2c:68:
4b:85:9c:e2:c6:9e:7b:3b:e1:bc:84:9f:55:90:c4:
cf:56:09:e2:70:c6:ee:9d:5a:2c:b7:69:c1:2d:c1:
e2:b5:1a:54:48:78:d0:ab:32:ad:90:aa:c0:e9:61:
ef:de:6f:32:b9:23:83:3f:55:eb:ea:d0:c1:7a:54:
b8:b1:c9:e4:86:fa:1a:40:9b:7d:96:2a:6a:37:14:
35:cf:21:5e:c9:95:fe:de:2c:d4:bc:47:ea:fc:f1:
ec:f3:9d:34:ac:7f:4c:69:85:0b:eb:88:6d:71:16:
a2:a3:7b:7b:67:74:6c:26:51:c1:a7:a0:c9:3b:82:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F0:96:EF:8E:5E:00:F3:30:4B:2A:E2:6D:86:60:FA:36:9C:EC:B3
X509v3 Authority Key Identifier:
keyid:1F:A7:95:16:7D:2D:9F:B4:20:94:1F:17:28:7B:DF:3C:5E:ED:8D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H6eVFn0tn7QglB8XKHvfPF7tjfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/W_CW745eAPMwSyribYZg-jac7LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/83535a-e1bd-4fb7-9f09-7b7e976c8412/1/H6eVFn0tn7QglB8XKHvfPF7tjfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:8280:3330::/48
Signature Algorithm: sha256WithRSAEncryption
28:0d:45:72:2d:a3:54:59:4e:0b:00:22:f0:47:5d:54:67:b6:
4c:70:bf:15:9f:a6:ae:a5:8d:40:87:0d:11:b5:45:df:03:1d:
44:4f:62:bf:9d:f8:0d:0b:c6:97:56:f3:59:3b:ae:10:f4:f6:
64:33:2a:b2:c4:10:24:8e:14:39:ad:21:13:4a:8f:86:23:0b:
d1:2b:57:5d:ed:76:32:4f:0d:33:90:0e:39:94:b5:d6:1e:16:
1b:ea:e1:4e:cf:83:9b:f1:45:9b:5e:93:b6:04:78:c6:a4:cf:
19:72:0b:bf:7c:b0:60:7b:a4:8f:31:dc:7f:2d:77:c0:6f:9f:
29:44:7d:80:d3:71:dc:76:22:c7:c1:34:9d:f9:ab:43:d4:f8:
aa:9b:b2:66:77:cd:73:8f:50:f4:32:17:04:e6:96:d8:6d:c8:
8a:ee:b0:fc:71:1d:44:e7:87:bb:dc:e9:11:14:ca:d2:78:80:
04:21:f3:27:f1:ba:e2:71:7a:89:da:ba:0d:75:be:72:96:bc:
af:7b:bf:d9:ff:68:ca:83:8d:69:75:c2:cd:dc:63:71:b6:7e:
a0:85:6e:64:e4:4f:2d:c7:bc:74:f9:dc:7a:aa:a0:2a:67:40:
72:51:9b:55:b9:b6:7f:c5:2e:d1:84:ed:29:79:88:2a:de:77:
20:e2:17:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:55:32 2024 by rpki-client on console.sobornost.net