Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W5Nv3M_sItWokBi3JAW1YFJTNPM.roa
File: W5Nv3M_sItWokBi3JAW1YFJTNPM.roa (raw, json)
Hash identifier: wFpiM45QtLUnkw1+sLvKR5s34TbSfIVyj4vmAI0hsac=
Subject key identifier: 5B:93:6F:DC:CF:EC:22:D5:A8:90:18:B7:24:05:B5:60:52:53:34:F3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0187C244CF4A0CF6F384D61126584FC707B7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W5Nv3M_sItWokBi3JAW1YFJTNPM.roa
Signing time: Thu 27 Apr 2023 10:31:42 +0000
ROA not before: Thu 27 Apr 2023 10:31:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200105
IP address blocks: 87.121.124.0/23 maxlen: 24
178.215.226.0/24 maxlen: 24
91.200.192.0/22 maxlen: 24
45.66.228.0/24 maxlen: 24
45.139.104.0/24 maxlen: 24
82.115.210.0/23 maxlen: 24
147.78.100.0/23 maxlen: 24
94.154.172.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c2:44:cf:4a:0c:f6:f3:84:d6:11:26:58:4f:c7:07:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 27 10:31:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b936fdccfec22d5a89018b72405b560525334f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:13:2a:3b:f9:da:0a:9f:b8:da:ce:23:d6:
66:98:31:86:69:36:3b:16:f1:59:c4:a8:ae:62:99:
86:db:3f:a8:85:b5:0b:35:fc:f2:d0:c4:e5:15:7b:
bf:44:c1:64:6b:98:3e:72:a4:72:e6:59:0b:6c:9c:
cb:28:72:94:24:90:f6:cf:f8:b8:5f:3d:ac:c4:1b:
85:d3:37:4e:37:99:ad:15:72:e0:80:ab:71:f2:8f:
79:a1:3c:96:6e:4a:a0:0c:91:9c:44:23:14:31:f1:
54:70:f2:60:3c:e5:8d:05:53:e2:06:e4:a2:d4:d1:
11:42:54:4a:92:55:22:95:fe:96:79:c7:cf:e6:b8:
c9:09:7b:71:fd:c8:55:28:d5:2e:11:1b:08:3b:d4:
f5:8c:8e:b2:2b:8f:3b:11:bf:b8:9f:07:39:29:37:
83:cb:2e:bb:f7:fd:3c:2a:36:43:10:90:e4:b6:6f:
ca:ba:c1:be:e8:d7:56:e5:1a:c4:15:5f:e4:fc:e3:
0c:6d:02:91:86:34:fa:64:46:ca:80:50:00:11:81:
b3:1c:5a:17:bf:47:d6:c1:28:f2:e6:b1:05:49:dd:
8e:0b:2f:13:55:ee:3c:7a:b6:3b:27:85:4b:b1:f3:
6e:2d:98:55:4b:56:e9:8c:37:fd:26:65:86:dc:6e:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:93:6F:DC:CF:EC:22:D5:A8:90:18:B7:24:05:B5:60:52:53:34:F3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/W5Nv3M_sItWokBi3JAW1YFJTNPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.228.0/24
45.139.104.0/24
82.115.210.0/23
87.121.124.0/23
87.121.220.0/24
91.200.192.0/22
94.154.172.0/24
147.78.100.0/23
178.215.226.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ab:13:7f:2a:02:09:57:40:84:46:38:6c:b3:4b:67:e0:7a:
88:0a:27:49:ae:2e:21:56:a4:31:8f:d2:99:09:f0:23:db:e4:
67:dd:2c:ec:25:54:0f:1d:c0:3b:7e:6a:bc:43:3f:23:79:e9:
ac:4b:7f:75:b2:1d:b5:5e:1d:14:ee:65:68:75:19:e5:da:f2:
b3:ca:4d:08:be:44:ab:d7:65:d0:b7:ad:73:55:59:0a:f8:32:
e1:73:a9:c6:7a:63:31:fa:ce:19:fe:4d:37:a0:2a:43:99:9a:
9e:ad:40:ea:99:bf:f7:a5:7d:65:5f:ad:39:c4:89:67:72:6e:
16:b8:77:cd:a2:18:07:94:82:cb:be:25:00:1f:f5:5d:39:11:
f8:27:96:81:7a:7c:ad:0b:67:89:e5:4e:e0:64:b0:a2:a5:73:
0f:c2:c4:cb:40:bd:d4:0a:64:20:43:b0:9d:e2:db:20:0f:9b:
4b:c4:11:d5:31:78:02:e3:6b:37:d8:a7:88:a8:38:c6:e9:bc:
6a:04:52:09:0d:ec:f3:55:d6:4d:da:ef:0a:81:41:44:0b:f9:
20:ae:58:71:f6:f9:f3:b5:42:05:eb:ab:5c:9b:b1:7c:4f:58:
4e:f5:ef:7d:92:8e:b6:98:1c:e8:ee:88:eb:3e:7d:e6:9b:ca:
06:80:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org