Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/wvNKtXhSRDpy6fAxDuaGwCcjLhI.roa
File: wvNKtXhSRDpy6fAxDuaGwCcjLhI.roa (raw, json)
Hash identifier: /MWf+yBO+0XEH+VnAfJk8F5STV9QlO2bHtJMmyT84q0=
Subject key identifier: C2:F3:4A:B5:78:52:44:3A:72:E9:F0:31:0E:E6:86:C0:27:23:2E:12
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 018679674A683964D075DB2323BE79A16F70
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/wvNKtXhSRDpy6fAxDuaGwCcjLhI.roa
Signing time: Wed 22 Feb 2023 13:54:17 +0000
ROA not before: Wed 22 Feb 2023 13:54:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201324
IP address blocks: 185.78.140.0/22 maxlen: 22
2a03:5960::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:67:4a:68:39:64:d0:75:db:23:23:be:79:a1:6f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Feb 22 13:54:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2f34ab57852443a72e9f0310ee686c027232e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4f:64:22:5d:df:7b:9f:cf:9a:a2:db:d0:dd:
aa:f3:99:14:24:81:76:42:57:85:d6:b9:92:20:ea:
52:7a:35:33:ec:2f:93:d4:c9:a3:10:06:c4:30:9d:
92:4f:ae:6b:30:1a:1b:a1:4b:b6:77:bf:23:47:b1:
19:e4:fa:fd:e2:62:cc:9e:78:f2:cf:c9:5f:03:db:
4b:2e:f0:f5:a7:20:f3:7b:c9:81:ed:aa:ab:8c:68:
83:82:cd:d3:d9:21:26:d1:ca:45:23:a3:b1:30:ba:
21:c8:d8:6c:09:71:63:71:43:ce:cc:bb:4a:a9:6d:
9d:e4:ff:85:df:58:66:e0:e3:fc:54:b0:ad:ee:ea:
3e:d4:c5:f4:50:48:23:bb:12:c9:b3:a9:cd:55:9e:
79:b1:08:38:f0:42:7b:71:62:78:d1:fd:99:ed:96:
2a:a6:88:d7:09:a4:f5:ca:91:c2:51:77:f7:01:37:
14:e5:8e:1f:e3:71:7e:65:6c:8f:3d:f5:05:4d:3f:
27:12:c7:36:ce:0d:30:ed:35:dc:cf:73:a9:f8:3a:
4b:c3:a4:38:50:8d:c1:1d:06:05:b7:bd:f1:c7:6c:
73:5e:bb:c8:b8:5e:94:dd:0a:35:05:6a:0a:46:37:
d3:76:71:0e:79:3a:06:b5:15:35:66:6d:46:73:fc:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F3:4A:B5:78:52:44:3A:72:E9:F0:31:0E:E6:86:C0:27:23:2E:12
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/wvNKtXhSRDpy6fAxDuaGwCcjLhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.140.0/22
IPv6:
2a03:5960::/32
Signature Algorithm: sha256WithRSAEncryption
08:c6:70:ac:de:6d:6d:98:df:ee:91:ee:fa:91:74:83:07:1a:
6e:f6:cd:50:83:d7:03:1c:26:e5:4b:fb:4d:8b:87:db:3c:7e:
20:f9:7f:fe:ef:10:66:75:ea:2e:8c:06:04:79:a2:c0:92:b3:
d5:b7:f6:85:f2:79:57:65:c9:6d:1c:19:ba:b3:f2:c0:ec:2f:
7b:c5:74:1a:ec:98:f6:44:3f:57:54:5a:3c:54:1f:56:8b:24:
1b:47:70:81:c5:f0:90:24:3d:69:0a:bb:c5:8e:4d:ae:5f:86:
79:41:b3:f3:b6:22:e7:60:b3:d8:33:73:89:4c:d9:31:47:52:
cb:60:ea:48:49:94:93:39:16:85:95:6c:c9:66:fb:e5:ae:db:
7f:9e:03:4a:aa:d7:a8:3c:11:13:63:a9:22:e3:8a:95:53:ec:
73:e9:88:5a:e9:ea:e4:8a:c0:ca:b6:e2:84:ec:a0:22:5c:3e:
95:f0:f9:68:05:48:51:51:68:49:94:95:6f:22:68:79:20:f9:
80:e4:a9:59:64:cb:00:85:a5:29:83:a4:80:e7:b5:8d:2a:a8:
68:1f:f7:94:7b:d2:94:a0:a2:54:d6:d2:96:62:cf:88:2e:41:
47:cc:fb:78:cd:8a:6f:39:72:98:0a:3c:ed:62:41:c7:a7:57:
c4:18:71:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:18 2024 by rpki-client on console-fra.rpki-client.org