Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/wmw7v7sXHHwfndN_W00V9-tSbHY.roa
File: wmw7v7sXHHwfndN_W00V9-tSbHY.roa (raw, json)
Hash identifier: 7oWZpXKq7k5vhHNji0V5RcPWuGRwPix6hGTuUuN4AGc=
Subject key identifier: C2:6C:3B:BF:BB:17:1C:7C:1F:9D:D3:7F:5B:4D:15:F7:EB:52:6C:76
Certificate issuer: /CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Certificate serial: 01900004B7E02CB6C9E7DEA4ECFAD1D6CFC8
Authority key identifier: 95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/wmw7v7sXHHwfndN_W00V9-tSbHY.roa
Signing time: Mon 10 Jun 2024 02:40:27 +0000
ROA not before: Mon 10 Jun 2024 02:40:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204180
IP address blocks: 185.111.248.0/22 maxlen: 22
185.111.248.0/24 maxlen: 24
185.111.249.0/24 maxlen: 24
185.111.250.0/24 maxlen: 24
185.111.251.0/24 maxlen: 24
2a06:6080::/29 maxlen: 29
2a06:6080::/32 maxlen: 32
2a06:6080::/40 maxlen: 40
2a06:6080::/48 maxlen: 48
2a06:6080:1::/48 maxlen: 48
2a06:6080:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 10 Jun 2024 04:58:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:00:04:b7:e0:2c:b6:c9:e7:de:a4:ec:fa:d1:d6:cf:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=951d493b1bc0a8c852dd11cfc937891dac3f07c2
Validity
Not Before: Jun 10 02:40:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c26c3bbfbb171c7c1f9dd37f5b4d15f7eb526c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:6f:b7:d7:ba:0c:a1:77:05:85:91:f1:9e:
7c:ed:ab:26:11:12:53:c1:04:18:4a:54:4e:54:b3:
3c:cc:56:78:82:ab:dd:cf:ef:2b:66:fa:9c:da:74:
f7:f0:97:77:1b:8b:8e:69:03:6c:3a:f3:96:ea:f4:
ca:53:d0:b3:db:16:56:c7:23:c5:07:11:04:b7:38:
47:e2:c8:d5:a7:df:73:7f:22:6a:c7:f7:4b:2d:ba:
01:f9:52:55:d0:73:b5:6e:f2:c3:02:33:d5:66:cb:
07:a3:b7:30:50:55:f4:f7:b9:04:25:99:fd:79:0e:
fd:ee:d3:73:16:f9:93:35:5e:ab:a8:af:d9:c7:6a:
b7:40:62:d3:97:f7:46:c7:dd:23:9b:77:46:5c:a3:
5b:83:01:a9:b4:30:32:c4:3a:d9:bd:03:15:f5:20:
1e:1b:b5:a6:49:62:5a:be:f0:58:3d:8a:ba:c5:ee:
3c:e0:de:a4:55:02:4a:5e:7f:53:ee:5f:f7:12:5d:
f0:ec:9e:d1:72:55:eb:e3:d7:e1:08:32:de:a4:43:
51:cc:eb:5d:b7:98:de:e6:ec:9a:13:4e:74:04:e9:
63:f9:c2:f6:b1:1e:b3:c1:2d:ca:20:fa:28:22:48:
1a:13:3e:a9:f5:75:23:f8:ba:0d:fe:24:12:ad:08:
a9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:3B:BF:BB:17:1C:7C:1F:9D:D3:7F:5B:4D:15:F7:EB:52:6C:76
X509v3 Authority Key Identifier:
keyid:95:1D:49:3B:1B:C0:A8:C8:52:DD:11:CF:C9:37:89:1D:AC:3F:07:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lR1JOxvAqMhS3RHPyTeJHaw_B8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/wmw7v7sXHHwfndN_W00V9-tSbHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/89bf3a-bf90-467a-a90b-22e248ed2014/1/lR1JOxvAqMhS3RHPyTeJHaw_B8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.248.0/22
IPv6:
2a06:6080::/29
Signature Algorithm: sha256WithRSAEncryption
c1:e0:46:62:4a:c2:a8:09:a9:5d:0e:dd:02:2b:57:30:fd:c4:
52:cd:af:84:0e:ea:b9:66:9f:4c:b7:6c:55:94:8f:1b:8a:8f:
26:3c:f4:78:5b:a1:45:bd:6a:d6:55:d9:77:4c:08:65:0f:33:
17:40:dd:10:17:11:16:95:c5:73:b4:77:79:8c:36:01:21:d8:
50:2a:33:09:e5:b0:a8:59:d5:b5:01:99:d4:ee:02:89:0c:a4:
43:fd:d4:98:8c:2f:07:ff:ea:9c:24:8c:67:71:ae:bf:81:6a:
f1:4d:ab:0b:d5:d1:e5:13:c7:e3:d9:4a:99:21:ac:78:d4:c8:
95:42:53:21:1e:05:e3:0f:ec:78:a1:bc:c3:32:a6:c1:4d:58:
22:6c:d6:76:94:06:d7:3c:9b:ef:02:24:f9:16:22:39:9f:a1:
74:01:76:4a:c3:3d:e5:8a:5a:e2:9b:d0:52:75:20:eb:c9:73:
51:02:16:c8:ec:59:6e:af:53:a8:9c:c4:4d:93:24:a2:cf:cc:
f3:7b:a5:91:50:d4:e6:82:e2:1a:8f:1b:f4:12:a3:99:ad:8c:
cb:d8:c7:0c:8d:84:36:76:24:94:d5:d1:bf:33:36:4d:45:6d:
9f:ef:7e:81:66:c6:ea:71:69:d3:f8:38:c7:b1:dd:f1:ef:68:
9d:bd:aa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 05:33:00 2024 by rpki-client on console-fra.rpki-client.org