Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wi7bs1emFjlXV8Y2Ais-LrM-zMw.roa
File: wi7bs1emFjlXV8Y2Ais-LrM-zMw.roa (raw, json)
Hash identifier: 1uA1yZ/c6H+gvjPXp3QYwFHM+tysg9LeX7XU3DMWKEk=
Subject key identifier: C2:2E:DB:B3:57:A6:16:39:57:57:C6:36:02:2B:3E:2E:B3:3E:CC:CC
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0185E74F56E58BFB9FDC86CC1686B163BB45
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wi7bs1emFjlXV8Y2Ais-LrM-zMw.roa
Signing time: Wed 25 Jan 2023 05:03:34 +0000
ROA not before: Wed 25 Jan 2023 05:03:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 138687
IP address blocks: 194.87.255.0/24 maxlen: 24
194.58.154.0/24 maxlen: 24
194.87.180.0/24 maxlen: 24
194.58.61.0/24 maxlen: 24
193.124.94.0/24 maxlen: 24
194.87.191.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
212.193.11.0/24 maxlen: 24
212.193.9.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:4f:56:e5:8b:fb:9f:dc:86:cc:16:86:b1:63:bb:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 25 05:03:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c22edbb357a616395757c636022b3e2eb33ecccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:73:c0:42:9e:15:ce:41:0c:72:e3:00:38:8e:
5f:5a:2f:80:c2:4c:61:3e:cc:8f:78:b5:a1:94:84:
0f:10:ab:1d:5b:f3:09:3a:78:8e:5a:74:8a:91:8a:
ff:c9:e5:06:2f:38:6c:43:f7:70:34:4d:88:b7:8f:
ed:a6:df:23:06:d8:9f:61:d9:35:d6:28:92:75:f8:
d4:c3:83:c3:d4:2e:bc:a8:0f:88:fc:98:6b:18:92:
a0:9c:a2:03:dc:a0:8c:08:0c:a0:ff:68:fa:c1:a4:
24:1f:c1:ce:7a:ca:0f:e2:04:f6:dc:43:8f:a9:ad:
07:4f:cc:4d:06:a5:5c:5a:5d:7f:a2:9e:35:b6:45:
e6:6e:6a:a2:00:61:2c:ca:19:97:0c:73:c3:cf:66:
8e:05:cc:34:2d:10:59:46:77:ad:e7:e3:d6:86:98:
6a:4d:07:31:26:d8:b0:2a:36:8e:a4:31:cf:90:4c:
72:c2:75:ac:88:fb:dc:25:17:e4:3c:10:7b:c0:01:
79:37:0d:15:f2:93:16:b3:f5:8f:8f:90:f9:7e:36:
c5:09:cf:f4:79:96:30:b7:28:18:51:94:e9:14:28:
91:1c:dc:09:e9:d5:b5:e9:5c:f7:24:b7:de:50:ee:
43:66:1a:fa:2c:52:07:03:1a:56:73:03:8a:6f:9e:
58:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:DB:B3:57:A6:16:39:57:57:C6:36:02:2B:3E:2E:B3:3E:CC:CC
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wi7bs1emFjlXV8Y2Ais-LrM-zMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.94.0/24
194.58.61.0/24
194.58.154.0/24
194.87.180.0/24
194.87.191.0/24
194.87.255.0/24
212.193.5.0/24
212.193.9.0/24
212.193.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0c:b1:99:19:d6:e3:08:d8:bf:cd:2c:af:9e:5c:e1:fc:e7:
6b:9c:4b:db:e0:f7:b2:8a:ae:26:4a:f0:92:16:88:de:6a:2d:
3e:f4:9b:08:21:ea:c6:4e:0b:da:f8:8f:15:3f:48:07:4c:01:
35:7c:b0:a0:5a:7f:37:14:0c:13:46:96:94:13:93:2a:ef:51:
36:75:41:c6:5b:be:c6:f3:1b:3e:71:f2:a5:93:f8:56:ff:02:
67:47:55:a3:62:19:49:c5:31:34:e4:0d:2e:eb:37:24:a0:e4:
b1:34:15:76:bd:6d:9b:e3:54:db:80:92:31:9c:28:40:39:73:
67:0a:a1:7b:ae:45:c8:07:bb:29:90:7b:65:bb:a2:31:d3:93:
37:80:ae:d3:e2:ef:32:77:a8:c1:5e:a2:d4:f5:04:18:d6:cb:
af:e0:09:86:60:4e:23:98:47:1c:76:21:4c:d1:55:cb:f2:04:
14:4c:65:2e:b6:97:56:f9:da:82:80:e2:41:b3:39:69:4b:3d:
53:ac:5d:19:45:03:6f:73:9f:7e:bb:69:43:e2:32:b2:eb:5b:
58:4e:6a:5b:2b:0f:9e:2b:05:0d:60:fc:e2:fa:26:13:d3:d5:
89:a4:37:7e:e1:f5:b2:be:12:68:be:b4:67:36:29:be:36:0f:
92:09:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:08 2023 by rpki-client on console-ams.rpki-client.org