Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WBWNMMiCsEUlG8pezTNYRh5jIHA.roa
File: WBWNMMiCsEUlG8pezTNYRh5jIHA.roa (raw, json)
Hash identifier: biSFEinD9ipLkcwlKc5gjTNBVQgdxI1UrM4x9lSOxcE=
Subject key identifier: 58:15:8D:30:C8:82:B0:45:25:1B:CA:5E:CD:33:58:46:1E:63:20:70
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018653DFADF679FF27A809A00E90CF2D1B5F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WBWNMMiCsEUlG8pezTNYRh5jIHA.roa
Signing time: Wed 15 Feb 2023 07:00:13 +0000
ROA not before: Wed 15 Feb 2023 07:00:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 85.209.132.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:53:df:ad:f6:79:ff:27:a8:09:a0:0e:90:cf:2d:1b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 15 07:00:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58158d30c882b045251bca5ecd3358461e632070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:94:82:b7:25:29:eb:dc:f0:16:11:08:d3:0a:
3f:08:7f:4c:59:e5:ee:fc:15:87:8f:f7:b0:58:0e:
77:36:ed:5c:bd:cc:fd:52:28:9d:a8:0d:71:5f:b5:
57:28:0f:00:64:7e:19:10:08:50:99:d7:a5:08:6b:
f0:e6:19:7c:f9:c6:cf:73:a5:43:0d:93:75:86:c5:
94:c9:04:c8:49:e8:29:32:bf:d1:bf:bc:19:ad:56:
ae:b4:3b:60:ef:e9:30:52:10:eb:1c:ad:a1:e8:7a:
b5:7e:e5:0d:ad:3f:1b:b3:ae:b6:1f:b2:f5:a5:d2:
e0:58:9c:f6:d9:4a:76:a4:7f:1b:fe:e3:bc:00:1b:
f3:16:08:19:e4:3a:ff:b4:64:22:a3:66:99:21:62:
c7:f3:e7:4a:f9:d0:63:c2:e7:60:9c:bc:1e:5e:03:
5b:71:b0:9b:5a:db:89:6b:ad:ea:d8:a1:27:cd:83:
52:4a:f0:b9:46:6e:a7:ba:70:f8:d8:21:93:f3:c8:
c1:f6:23:80:cb:23:a9:38:94:c7:e3:34:7c:ad:80:
b2:51:e2:55:5f:a6:33:d5:5f:3e:24:ca:f3:85:0f:
3e:b9:f1:51:3a:d0:04:24:d1:43:aa:7b:95:93:43:
c4:eb:de:1d:90:7b:2e:89:4a:8d:b5:c4:4b:e0:63:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:8D:30:C8:82:B0:45:25:1B:CA:5E:CD:33:58:46:1E:63:20:70
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WBWNMMiCsEUlG8pezTNYRh5jIHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f0:4a:a8:bd:02:04:f6:af:13:b6:4a:a0:9c:75:19:4c:31:
87:9a:f1:f0:5f:72:c2:d8:16:63:43:2b:6d:ce:3a:ed:17:8e:
11:bb:65:e3:bb:96:56:8d:c6:c3:7a:81:c0:3f:79:0c:73:c8:
5b:d8:92:8b:4d:49:ee:e3:17:4b:47:a4:58:4d:6c:26:74:48:
84:6c:32:f3:a4:2b:52:21:9f:3e:1a:9c:53:c6:12:de:27:dc:
93:33:45:b1:f1:bb:e5:dc:f3:29:e8:5e:d1:2a:86:37:7c:8e:
26:c1:a4:26:65:bf:e8:67:56:cf:b8:cb:4d:29:98:ae:36:ee:
a5:db:1d:c0:80:5f:67:b7:5d:e0:2f:2a:29:ee:dc:bc:cb:a2:
39:ce:5b:53:51:a7:2b:4c:2d:97:e3:72:69:12:89:c5:c0:81:
5b:d1:d4:c4:6c:23:22:78:2e:0e:2f:12:37:5a:47:3d:7e:12:
30:01:ea:99:10:17:1c:61:d5:d3:41:51:53:6f:91:68:20:a7:
63:8a:c4:23:34:f9:f3:8d:d1:6a:6b:de:1b:79:ce:61:58:e6:
f7:3b:16:f0:2f:da:a9:6b:b3:6d:4e:75:0d:71:59:dc:c0:ea:
f1:8b:ce:ec:14:e4:d4:eb:eb:4f:35:bd:5d:12:db:ee:e1:f4:
61:91:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:38 2023 by rpki-client on console-ams.rpki-client.org