Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cWW16_dHro4QMF7Cemq7xEjkNdU.roa
File: cWW16_dHro4QMF7Cemq7xEjkNdU.roa (raw, json)
Hash identifier: I5DuyV2Jkez7my0vPi+1N1029azPuRNOaLFAX90Krtw=
Subject key identifier: 71:65:B5:EB:F7:47:AE:8E:10:30:5E:C2:7A:6A:BB:C4:48:E4:35:D5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B93F25D901A975AD2B0E801A980A39DD3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cWW16_dHro4QMF7Cemq7xEjkNdU.roa
Signing time: Fri 03 Nov 2023 06:50:16 +0000
ROA not before: Fri 03 Nov 2023 06:50:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209193
IP address blocks: 185.216.69.0/24 maxlen: 24
185.207.12.0/24 maxlen: 24
185.147.100.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:93:f2:5d:90:1a:97:5a:d2:b0:e8:01:a9:80:a3:9d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 3 06:50:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7165b5ebf747ae8e10305ec27a6abbc448e435d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:80:56:ba:65:b1:9b:34:7c:bd:76:3c:51:
34:64:69:df:33:9d:40:97:d4:62:88:eb:d2:4f:08:
a7:a5:bb:09:b4:b5:31:ca:31:5c:63:31:46:81:b6:
26:f7:4e:d9:37:2b:ec:ee:29:89:e0:e0:a8:57:3d:
05:1d:cb:95:87:17:d2:8d:07:75:57:ad:6a:2c:0c:
78:5a:2f:2a:84:f8:82:0f:f9:79:20:d5:42:98:58:
21:c4:e5:47:3f:b5:64:3e:99:6c:78:28:7e:9c:96:
49:2b:06:89:ae:75:50:c1:bb:5d:46:7f:15:51:00:
3f:af:d4:e7:0a:d4:b3:a7:53:f1:4e:3b:8d:00:c5:
a5:e1:c3:1e:ec:30:08:79:8d:38:c0:2a:2e:75:5e:
86:19:29:bb:c9:e4:f2:33:e8:72:25:1b:bb:96:43:
4e:b7:b4:d7:5d:d5:c7:f2:12:bf:cc:4e:71:cc:b6:
6e:cc:73:8d:d3:2e:f8:9c:84:57:80:7f:55:95:44:
66:86:c0:87:f0:85:9f:ab:1a:9a:74:dc:9e:f4:13:
45:12:4a:02:aa:07:09:37:34:cc:a5:00:16:25:34:
07:51:97:46:89:07:d9:38:b4:6f:8c:71:16:9c:d2:
51:2c:8a:d8:38:1e:bd:dc:8b:6b:7d:a2:e0:ff:cd:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:65:B5:EB:F7:47:AE:8E:10:30:5E:C2:7A:6A:BB:C4:48:E4:35:D5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cWW16_dHro4QMF7Cemq7xEjkNdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.100.0/22
185.207.12.0/24
185.216.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:50:27:95:42:4f:67:43:33:b4:c0:61:3f:72:7d:1d:48:8c:
58:b5:89:18:c4:f0:ba:37:af:9c:47:69:00:d8:e7:b6:b1:5a:
34:25:48:9b:6a:9c:e7:b0:66:9c:e4:2f:8c:82:0c:c2:eb:4f:
a3:90:bd:27:40:73:64:e8:33:2b:3e:ec:a4:7a:45:f9:0f:16:
1d:f6:48:8d:67:87:cc:b0:53:d3:e7:a7:03:f5:78:74:05:11:
0c:6a:50:41:f2:c3:e1:41:8e:08:87:a2:e7:37:75:83:65:eb:
78:ef:6f:22:1a:79:e2:2f:72:47:92:2c:66:8d:c9:de:ee:b2:
7e:c1:b5:11:7f:44:5e:a8:e4:67:24:87:6f:1e:bf:00:e7:d9:
7a:6b:91:f6:12:32:97:34:d0:c9:73:84:5b:8c:4d:a6:e2:15:
14:78:ad:55:05:fa:b6:21:2e:c2:56:04:b7:29:d2:42:ac:fa:
a8:43:f8:5a:dd:44:e8:52:e8:0d:c5:4e:60:bc:dd:19:a5:f9:
87:a6:d3:32:82:4b:84:93:c0:ec:64:58:b6:d6:f7:04:70:a0:
30:8a:13:44:48:50:97:94:1d:63:ff:a5:58:21:93:53:83:6a:
4c:fb:a5:e8:6f:96:b4:59:05:8b:2b:56:18:f6:c7:47:b6:bb:
e5:57:66:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 12:55:02 2023 by rpki-client on console-ams.rpki-client.org