Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/dwRJ9J04qSw8Ye9r3lUuxcxIln4.roa
File: dwRJ9J04qSw8Ye9r3lUuxcxIln4.roa (raw, json)
Hash identifier: PpluYrh2KOWXzT7fm03Vtpuxm93zFp7uUuVc32xXv5o=
Subject key identifier: 77:04:49:F4:9D:38:A9:2C:3C:61:EF:6B:DE:55:2E:C5:CC:48:96:7E
Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b
Certificate serial: 018570FBCECA08C0FE1B416C58D1625E90E3
Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/dwRJ9J04qSw8Ye9r3lUuxcxIln4.roa
Signing time: Mon 02 Jan 2023 05:37:08 +0000
ROA not before: Mon 02 Jan 2023 05:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209103
IP address blocks: 185.159.157.0/24 maxlen: 24
185.159.159.0/24 maxlen: 24
2a07:b941:e10::/44 maxlen: 44
2a07:b941:e20::/44 maxlen: 44
2a07:b941:f10::/44 maxlen: 44
2a07:b941:f00::/44 maxlen: 44
2a07:b941:e40::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:ce:ca:08:c0:fe:1b:41:6c:58:d1:62:5e:90:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b
Validity
Not Before: Jan 2 05:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=770449f49d38a92c3c61ef6bde552ec5cc48967e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9e:46:e0:69:2f:01:a1:a3:92:55:e7:f2:73:
ca:6e:dc:14:4a:3f:2d:42:3c:cc:cf:1f:c4:33:22:
a2:0e:f4:25:32:c4:c1:78:b2:16:e2:01:3e:6a:48:
73:06:0f:54:1e:cb:57:6b:25:2e:4e:ff:0b:c7:33:
a1:72:0c:61:fd:9c:44:ea:8d:45:91:09:2a:6d:56:
de:6b:e5:b0:50:ea:92:f7:cf:f0:32:e2:84:5c:7d:
dd:52:3f:3c:59:4d:3b:25:0f:d5:cf:a7:39:39:81:
fc:96:5d:74:f7:d4:2b:06:14:bf:bd:12:3d:92:97:
13:cf:d9:df:14:90:34:c4:d3:03:15:dd:a1:40:45:
67:79:91:1f:44:34:a0:52:68:d5:86:01:46:93:36:
fe:c4:28:87:d1:53:e8:51:91:d7:0e:da:23:87:a1:
2a:d9:6b:02:0c:99:97:4a:f2:51:7b:a0:4a:5f:91:
72:a0:65:b0:ff:62:c1:cd:86:bc:75:5b:3e:45:1a:
58:90:49:e0:3f:25:61:53:8f:eb:5b:8f:d6:88:7a:
27:04:81:bf:19:8b:17:f7:8f:56:55:34:13:47:f2:
41:76:05:12:be:1d:6f:00:d6:c0:5b:b4:a2:c7:d2:
59:76:9d:81:ec:99:66:ba:7a:21:0e:62:de:35:07:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:04:49:F4:9D:38:A9:2C:3C:61:EF:6B:DE:55:2E:C5:CC:48:96:7E
X509v3 Authority Key Identifier:
keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/dwRJ9J04qSw8Ye9r3lUuxcxIln4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.157.0/24
185.159.159.0/24
IPv6:
2a07:b941:e10::-2a07:b941:e2f:ffff:ffff:ffff:ffff:ffff
2a07:b941:e40::/44
2a07:b941:f00::/43
Signature Algorithm: sha256WithRSAEncryption
2e:a8:7f:a1:86:8e:e8:db:53:df:69:0e:01:97:0a:df:aa:1b:
cf:2c:87:18:bf:a9:a1:41:e1:5c:84:0e:8e:90:46:32:38:22:
a9:c9:5c:f3:51:44:e3:27:7a:00:b2:8e:bc:7e:3c:58:d6:f2:
51:32:2a:5c:a4:87:10:80:65:b4:aa:5f:e8:f4:16:18:8f:86:
32:44:4d:21:dc:05:e1:8f:db:6e:77:00:25:9a:70:fc:47:61:
ce:10:6b:55:d1:04:32:49:cd:0f:9d:7b:75:61:7d:e2:ae:ae:
b1:0b:86:0c:f2:6b:f7:67:3b:c3:0d:31:d6:a6:e5:2b:83:31:
87:50:bf:b2:f4:0c:d2:51:8a:bc:1e:f8:95:58:ef:b0:0b:b5:
8e:1d:57:dd:1a:6d:bf:30:30:60:23:69:03:9e:38:9c:f2:5d:
55:d8:be:a5:9c:8d:ae:75:21:f6:52:51:1d:73:c2:ae:cd:18:
02:05:7d:fb:32:3f:f0:15:0a:c1:80:20:6b:50:8a:d8:77:1f:
9f:84:a6:46:c5:5c:14:aa:e5:16:a9:5f:ed:41:12:ab:a7:92:
a7:68:34:36:b8:69:c2:56:9f:9f:c0:23:9c:80:33:e3:8b:a7:
66:f8:7f:c4:a3:08:77:e6:b4:37:0d:4b:06:2a:3d:0b:d4:17:
f6:a7:40:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:12 2024 by rpki-client on console-fra.rpki-client.org