Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/Wos7dDwLA8LRf8mBBlnAK5BHcDg.roa
File: Wos7dDwLA8LRf8mBBlnAK5BHcDg.roa (raw, json)
Hash identifier: /kP9kaDoIfe6GDpoiUz3e2QAOyZrdTSm55bbq9KQXmk=
Subject key identifier: 5A:8B:3B:74:3C:0B:03:C2:D1:7F:C9:81:06:59:C0:2B:90:47:70:38
Certificate issuer: /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial: 0189BBD66826A8E065546E68C999E8465D61
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/Wos7dDwLA8LRf8mBBlnAK5BHcDg.roa
Signing time: Thu 03 Aug 2023 14:38:58 +0000
ROA not before: Thu 03 Aug 2023 14:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34867
IP address blocks: 185.48.196.0/22 maxlen: 22
95.67.0.0/17 maxlen: 17
2a00:17a0::/32 maxlen: 32
2a00:17a0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:d6:68:26:a8:e0:65:54:6e:68:c9:99:e8:46:5d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Validity
Not Before: Aug 3 14:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8b3b743c0b03c2d17fc9810659c02b90477038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:a3:f9:c6:e5:8a:ca:40:d8:65:32:8c:f5:
2c:ef:6b:65:54:52:6a:d8:e4:5c:08:0e:fd:22:8c:
eb:1d:63:ea:fe:86:45:be:92:7e:29:1a:30:d9:75:
46:81:82:a0:54:a8:0c:f4:4d:c7:a4:04:2f:cc:fc:
0b:7a:a0:77:85:3b:9a:89:11:40:4b:bd:eb:0a:93:
35:8d:1f:b8:38:49:1f:96:f2:af:90:da:07:b1:94:
5a:76:01:78:e2:68:63:21:f0:a9:e2:38:41:e7:0f:
59:97:a5:76:d6:17:73:08:b7:78:ba:40:a2:ab:49:
70:28:b8:17:27:ca:e9:ec:eb:25:71:94:21:b9:40:
f7:6a:95:e4:bc:d9:79:a4:16:e0:e6:cd:ef:93:cc:
f7:ba:e5:d9:81:36:30:97:e2:ce:d4:30:a3:9c:81:
5c:2b:af:34:86:b8:9b:9e:b8:0d:35:1b:64:31:7c:
8a:5d:77:f4:a0:98:14:a7:32:77:cf:f8:0a:5a:34:
fa:a7:02:dc:c7:94:6f:5a:2f:65:c6:42:16:65:cc:
d6:e8:8e:07:68:71:a3:80:2a:f3:2b:8c:dd:25:4c:
21:c8:96:60:0b:2b:3a:1a:de:f0:15:c9:50:66:51:
3e:df:82:81:43:4e:3c:8d:32:0f:d6:e9:82:8c:54:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8B:3B:74:3C:0B:03:C2:D1:7F:C9:81:06:59:C0:2B:90:47:70:38
X509v3 Authority Key Identifier:
keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/Wos7dDwLA8LRf8mBBlnAK5BHcDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.67.0.0/17
185.48.196.0/22
IPv6:
2a00:17a0::/29
Signature Algorithm: sha256WithRSAEncryption
76:10:f3:fb:0c:ff:7d:a7:06:ed:f7:f0:7b:bf:ff:84:b0:a4:
3d:8d:63:25:60:ff:d1:0c:07:52:a8:59:46:08:01:5f:22:48:
08:a9:f7:b7:05:a0:b8:a6:b0:0e:79:e5:a3:42:1e:57:1f:d5:
49:33:6c:cd:c9:a8:e0:dc:f7:f7:b2:85:02:5c:59:9f:c7:4f:
06:b5:73:fc:61:e7:ea:c7:02:95:ab:32:3b:f4:3e:23:b4:da:
fb:67:0f:62:13:57:a3:65:21:78:4b:8e:81:67:9a:94:c9:73:
c9:36:b9:3b:bb:ae:cb:87:d3:b4:85:4b:68:5a:f2:31:2d:34:
3b:13:65:df:3c:ae:37:c6:39:97:20:c2:fe:f5:65:0c:a1:e4:
96:00:f3:06:58:fa:64:64:f0:0d:8d:c6:a9:00:ba:90:c8:ec:
ce:92:31:60:15:30:46:a0:0f:49:97:c7:e2:76:1f:90:05:4c:
13:fb:e6:35:3a:b5:3e:1e:cc:b1:85:af:8b:8d:ce:55:fd:fc:
bf:f8:87:d5:0a:46:a7:df:25:a7:35:e2:6d:36:d2:a5:68:f7:
e6:a4:33:cf:cf:6a:9e:be:cb:c7:39:b9:dc:c3:1c:30:3f:c8:
ff:c4:b6:18:e8:c3:ad:cc:96:e2:a3:f2:6c:a7:a7:f4:83:b2:
f9:f2:1b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:24 2024 by rpki-client on console-fra.rpki-client.org