Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/wDo6Oaky0G-ZQLhkOFl10FvgGsA.roa
File: wDo6Oaky0G-ZQLhkOFl10FvgGsA.roa (raw, json)
Hash identifier: UbdGYHcKYUI5qR1lxfau9dNH6caG52MsAM5AUmgy2Gc=
Subject key identifier: C0:3A:3A:39:A9:32:D0:6F:99:40:B8:64:38:59:75:D0:5B:E0:1A:C0
Certificate issuer: /CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Certificate serial: 0185EF22B83D1A34ADA842329E4759463EFA
Authority key identifier: 8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/wDo6Oaky0G-ZQLhkOFl10FvgGsA.roa
Signing time: Thu 26 Jan 2023 17:31:48 +0000
ROA not before: Thu 26 Jan 2023 17:31:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200325
IP address blocks: 91.200.176.0/24 maxlen: 24
193.162.131.0/24 maxlen: 24
109.104.146.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 22:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:22:b8:3d:1a:34:ad:a8:42:32:9e:47:59:46:3e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e702a616c04941e2c9f071651e49c5df3aed0b1
Validity
Not Before: Jan 26 17:31:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c03a3a39a932d06f9940b864385975d05be01ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3c:53:6c:5d:ef:8e:a8:a2:e0:59:83:1a:5a:
c4:8a:c1:fe:bf:45:31:8b:a7:5f:5f:91:f0:41:2a:
3a:39:62:a3:49:41:a9:f2:f3:be:67:b8:cd:ca:1d:
b8:76:0a:1c:4b:bb:18:4c:3a:54:79:09:9b:cf:59:
64:7b:01:61:83:f6:88:66:9c:a8:b2:e9:ab:c4:47:
00:51:40:28:ad:ef:d7:b7:4b:af:69:a1:4c:fb:f2:
d3:e2:0b:6c:a2:80:1c:45:e9:32:b9:83:5a:cb:a6:
83:d8:e4:83:53:0e:e2:b7:99:ac:65:86:10:3f:32:
61:8b:24:b3:d5:b2:a8:82:b8:ed:ba:5a:58:1f:b4:
67:af:23:71:79:e7:ea:32:61:7d:0e:af:89:49:bd:
1f:03:b1:32:dd:31:97:e4:51:91:7d:ee:3c:c6:09:
8e:77:0c:3f:c2:9c:b4:b3:b2:45:44:06:46:01:1a:
48:06:8c:c3:42:ff:20:86:f6:cd:32:57:a5:68:69:
b4:9a:35:c0:67:91:7d:98:9b:99:3f:af:80:e5:f0:
05:7a:85:2c:4e:d3:b6:d7:a8:aa:09:17:92:05:95:
c3:18:f0:dd:ad:f1:75:7c:73:91:01:cb:5b:b9:ba:
e4:5b:c2:9a:13:27:0a:ab:83:19:a2:84:00:1d:4c:
04:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:3A:39:A9:32:D0:6F:99:40:B8:64:38:59:75:D0:5B:E0:1A:C0
X509v3 Authority Key Identifier:
keyid:8E:70:2A:61:6C:04:94:1E:2C:9F:07:16:51:E4:9C:5D:F3:AE:D0:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnAqYWwElB4snwcWUeScXfOu0LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/wDo6Oaky0G-ZQLhkOFl10FvgGsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2b8877-e523-4e9c-9fc3-cd60c891001b/1/jnAqYWwElB4snwcWUeScXfOu0LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.176.0/24
109.104.146.0/23
193.162.131.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e1:9d:77:f3:ef:f2:8a:25:d2:c0:b4:e9:67:1d:dd:64:d3:
aa:cc:08:65:18:44:75:40:03:ae:28:c1:c5:32:0d:ed:fb:d6:
ce:06:44:50:ba:cc:c8:65:fe:b6:f6:da:15:41:a0:16:8c:8a:
ce:34:b8:6e:aa:43:0f:bd:1f:b8:ff:14:b4:ac:08:a4:fd:6d:
eb:74:f8:c0:50:fd:60:db:f3:f4:4e:62:e3:f7:d5:68:d1:8b:
fb:4f:6d:b6:24:8a:a8:8c:23:a2:7b:ec:46:ef:64:da:f3:49:
f4:12:70:a9:86:b5:1e:15:8b:ad:d6:ac:c6:9f:a3:c9:72:d7:
09:6d:f5:32:64:b1:1c:f9:e3:d3:02:a3:ff:e8:b6:06:ff:3d:
3d:dc:bb:2f:91:84:a9:6e:3c:26:ed:6f:4e:6a:e6:71:85:c8:
a1:45:94:f0:54:a9:32:1d:48:9c:70:17:43:e3:a6:ca:5b:7d:
d9:6f:90:eb:1f:40:fd:82:b8:22:cc:12:52:29:37:e7:3a:c3:
af:f2:9b:72:4a:d5:92:f8:68:07:e4:fb:75:a5:f4:8c:e1:4c:
a4:10:e1:d5:2f:4c:98:13:f8:4b:ae:3a:75:92:3f:c8:39:d0:
54:a6:9a:64:ba:7e:5f:6d:82:4b:e8:83:81:42:5e:b6:0c:91:
27:13:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:01 2024 by rpki-client on console-fra.rpki-client.org