Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/wGGB7z_SBrfFX_n83KQyVt7VLP8.roa
File: wGGB7z_SBrfFX_n83KQyVt7VLP8.roa (raw, json)
Hash identifier: 2OdHBmw2397IWSsVyfZSkSPV+F4DgwWVzNhSlqS+7Y4=
Subject key identifier: C0:61:81:EF:3F:D2:06:B7:C5:5F:F9:FC:DC:A4:32:56:DE:D5:2C:FF
Certificate issuer: /CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Certificate serial: 018573FDCA75A54E56B0BA0CF060D6EE278D
Authority key identifier: 70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/wGGB7z_SBrfFX_n83KQyVt7VLP8.roa
Signing time: Mon 02 Jan 2023 19:38:10 +0000
ROA not before: Mon 02 Jan 2023 19:38:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48402
IP address blocks: 185.141.128.0/22 maxlen: 22
2a07:2400::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:fd:ca:75:a5:4e:56:b0:ba:0c:f0:60:d6:ee:27:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70f5d9eeefa305aecaee31e6fcb4e22321b2804a
Validity
Not Before: Jan 2 19:38:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c06181ef3fd206b7c55ff9fcdca43256ded52cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0c:66:97:3d:67:09:5a:b0:a9:6b:47:73:77:
8f:4b:4d:29:a0:e5:72:a4:90:a4:32:64:31:49:bd:
10:88:62:f8:93:11:1f:fc:92:64:7e:c3:0c:7b:72:
1f:7c:f1:5e:89:09:1d:db:2c:8a:9f:5c:9a:b4:8c:
1b:8a:a9:46:44:f4:c2:66:b7:43:8b:51:a9:7f:4e:
11:68:62:a4:a7:b7:2a:5e:e9:8b:cd:45:58:be:82:
ce:4d:d0:e0:dc:15:b9:32:a2:3d:7d:1b:1b:b0:7e:
2b:a1:32:b1:89:47:2f:26:31:76:6d:16:23:1b:70:
33:ac:60:de:2f:f4:40:ac:2f:df:a6:c7:95:c9:c0:
c5:8f:8f:54:37:b0:97:56:3a:31:0f:30:a5:b4:82:
5b:44:b3:49:82:2f:9f:26:8f:a5:23:da:f5:a4:ed:
03:68:16:ae:60:ee:bd:6b:6b:38:38:9d:54:8d:29:
de:7b:2b:7c:4b:f7:9f:d0:29:a5:d9:7d:72:be:ae:
cc:4e:82:2f:8c:89:fc:2e:ac:01:bb:f1:b5:0b:b5:
7f:12:5e:8f:cb:c1:9b:86:23:be:47:00:26:05:7f:
2b:78:c4:1f:bb:fb:ef:8a:26:21:95:be:8c:27:dd:
ef:66:85:8e:ec:4f:29:28:e7:a6:9d:c0:05:e9:0b:
1e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:61:81:EF:3F:D2:06:B7:C5:5F:F9:FC:DC:A4:32:56:DE:D5:2C:FF
X509v3 Authority Key Identifier:
keyid:70:F5:D9:EE:EF:A3:05:AE:CA:EE:31:E6:FC:B4:E2:23:21:B2:80:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPXZ7u-jBa7K7jHm_LTiIyGygEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/wGGB7z_SBrfFX_n83KQyVt7VLP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/140105-e462-48d2-a58f-a57035792e57/1/cPXZ7u-jBa7K7jHm_LTiIyGygEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.128.0/22
IPv6:
2a07:2400::/29
Signature Algorithm: sha256WithRSAEncryption
ac:9d:50:a2:34:01:87:ea:3d:62:da:ad:c2:42:96:2e:d7:72:
d7:eb:26:16:52:05:95:f0:b3:83:f5:7b:eb:8e:59:38:b5:0c:
64:36:1a:68:54:54:0c:75:77:3e:9c:93:0c:21:db:c4:92:ae:
b9:32:b2:e7:e8:a7:8c:eb:af:31:4c:c0:36:91:fc:88:c5:67:
22:b6:db:ab:74:29:3f:50:f8:4a:26:d3:05:b5:3e:e6:54:2a:
21:91:ac:7c:09:ea:0e:6b:a2:8f:66:17:54:98:91:f2:7a:07:
95:ff:b0:10:ca:eb:a2:98:8c:31:97:04:ff:1e:53:3e:bf:07:
f2:7b:d5:99:9b:99:1d:86:ae:c8:af:ec:11:c9:ce:72:f5:ae:
ce:f0:f2:bc:a3:a2:6b:3c:d3:e0:4c:76:04:97:b8:41:a3:ca:
65:a3:be:6d:3b:dd:8f:f5:e4:7d:8c:92:98:16:08:c1:49:46:
15:07:4c:98:aa:aa:82:8e:61:06:52:02:5b:3b:5b:9b:c2:02:
9e:db:21:79:c6:6f:ea:a0:bd:81:41:ec:7f:b5:e4:2f:4e:50:
70:71:96:cb:63:7b:16:23:85:7b:b6:1c:26:58:31:08:b1:3d:
7b:ff:98:3b:49:4f:35:c3:45:8b:d9:6a:68:2a:c6:e2:ba:ea:
0b:a2:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org