Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WuTvY6VP00ZO_DVatTEm9MvWxqs.roa
File: WuTvY6VP00ZO_DVatTEm9MvWxqs.roa (raw, json)
Hash identifier: DMV6JYp+II1qE9AsHT+sTfB/xEsNXbCDFNmjUMZz5DI=
Subject key identifier: 5A:E4:EF:63:A5:4F:D3:46:4E:FC:35:5A:B5:31:26:F4:CB:D6:C6:AB
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 018C7E65708CFC2F4D00E7D02ECC8B42AE8A
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WuTvY6VP00ZO_DVatTEm9MvWxqs.roa
Signing time: Mon 18 Dec 2023 19:27:06 +0000
ROA not before: Mon 18 Dec 2023 19:27:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51714
IP address blocks: 185.236.10.0/24 maxlen: 24
45.86.158.0/24 maxlen: 24
192.144.33.0/24 maxlen: 24
192.144.34.0/24 maxlen: 24
2a09:ff00:103::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:65:70:8c:fc:2f:4d:00:e7:d0:2e:cc:8b:42:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Dec 18 19:27:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae4ef63a54fd3464efc355ab53126f4cbd6c6ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:14:10:43:ba:8a:05:e1:c0:2f:6b:5f:cc:e9:
3a:b6:22:1f:a3:49:ad:80:11:78:19:e4:1e:99:30:
63:a8:85:f9:f5:72:77:4f:27:54:9f:1a:dd:4b:92:
85:84:1e:30:c1:9b:78:13:12:8f:79:c9:81:9d:5c:
10:55:87:1d:e6:9b:e1:4e:c0:fd:83:b5:e2:4b:8d:
ee:76:3d:81:55:49:43:a6:ce:80:a0:83:86:6b:70:
a0:b7:e4:d6:d0:9d:d9:25:82:64:64:3b:c7:ad:81:
06:ba:b3:a7:61:16:60:de:b1:e5:76:b9:58:45:37:
15:3c:fb:09:19:bb:0a:f5:f3:c3:44:d1:8c:e7:2e:
9d:f3:12:a1:93:9f:bd:e7:ed:f3:7b:9d:67:a1:88:
00:b3:3a:ba:29:46:e6:5c:5f:0d:95:6b:6a:01:4b:
b8:ed:c7:d9:7f:d7:e4:cc:e6:cc:73:0a:06:e1:04:
0c:97:da:b7:e7:6a:c1:f5:4f:a9:cd:d1:8a:61:f1:
fe:e7:cd:7c:d1:3b:45:c0:9a:40:24:12:4e:27:7a:
1e:a5:b2:06:06:8c:b3:55:00:0d:c3:d9:d2:ad:02:
a9:b3:d8:4b:88:86:39:0a:a4:87:9d:67:03:ff:89:
57:a7:cb:bf:b1:86:ec:c9:28:72:8f:d0:6f:dd:e9:
44:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:EF:63:A5:4F:D3:46:4E:FC:35:5A:B5:31:26:F4:CB:D6:C6:AB
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/WuTvY6VP00ZO_DVatTEm9MvWxqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.158.0/24
185.236.10.0/24
192.144.33.0-192.144.34.255
IPv6:
2a09:ff00:103::/48
Signature Algorithm: sha256WithRSAEncryption
70:e2:62:f6:26:07:64:4a:f8:d7:65:d3:7a:fe:45:cf:3d:28:
1d:48:5b:a3:19:50:79:04:3c:e6:6a:27:b8:39:ab:40:83:69:
4e:39:c8:a7:be:52:a6:54:fe:a3:93:12:fa:76:5c:42:9d:ab:
37:f7:8b:c7:3d:a4:d0:fd:9c:dc:54:ec:0e:49:9f:af:3e:ae:
e4:b7:b5:0d:b0:ae:08:83:eb:41:83:86:28:cf:b2:02:19:07:
5a:0c:b6:14:17:d9:c5:15:8b:79:08:99:6a:0d:d9:6c:3a:64:
55:fb:bc:42:c9:e8:4a:fb:05:99:5d:98:17:f7:69:48:b2:5f:
88:a7:e5:61:08:bd:bf:74:33:ac:65:8c:29:d5:c3:62:12:20:
cd:d3:25:1a:0d:7d:7a:8b:12:11:67:79:1f:69:33:eb:b6:d3:
84:b0:61:aa:7d:20:35:dd:f3:8c:5a:09:da:c4:db:45:9b:e7:
44:6f:04:aa:92:4f:40:25:b6:81:02:aa:27:8d:e8:13:30:06:
21:d6:c6:86:be:f0:7e:3f:84:24:72:20:2e:b8:1e:57:7a:df:
8a:65:96:26:ea:de:19:42:10:af:bd:9d:88:ba:b2:af:67:35:
3b:48:47:58:68:28:0f:02:9d:4d:62:e9:9c:a3:07:b9:06:33:
31:01:d2:94
-----BEGIN CERTIFICATE-----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Generated at Fri Dec 22 20:31:04 2023 by rpki-client on console-fra.rpki-client.org