Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wp0oOkJ-b71mRsyC9CpuDmJXVAs.roa
File: wp0oOkJ-b71mRsyC9CpuDmJXVAs.roa (raw, json)
Hash identifier: Hy++aPYCBXjg+4ofZ4se03c6DT3L2U01ArVhK7bWPNQ=
Subject key identifier: C2:9D:28:3A:42:7E:6F:BD:66:46:CC:82:F4:2A:6E:0E:62:57:54:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189922A394C4A8159995ECAF1F712456568
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wp0oOkJ-b71mRsyC9CpuDmJXVAs.roa
Signing time: Wed 26 Jul 2023 12:26:27 +0000
ROA not before: Wed 26 Jul 2023 12:26:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 94.156.10.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
94.103.126.0/24 maxlen: 24
195.178.121.0/24 maxlen: 24
194.169.173.0/24 maxlen: 24
87.120.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:2a:39:4c:4a:81:59:99:5e:ca:f1:f7:12:45:65:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 26 12:26:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c29d283a427e6fbd6646cc82f42a6e0e6257540b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fc:0b:9d:40:5a:07:09:56:aa:2d:90:b4:4c:
fd:e0:37:49:e7:f4:7c:40:b8:46:69:bd:05:cc:52:
ea:fe:49:8c:82:92:4f:fb:2f:ff:8c:79:c0:c4:d7:
34:5d:62:22:82:e5:cc:82:8b:75:87:de:00:35:57:
a3:f8:18:3d:6d:1d:71:44:97:85:d2:0e:0f:62:27:
3d:01:ee:58:6f:86:bf:ca:18:65:40:91:f2:f4:af:
7b:a9:c1:af:6f:35:1f:f7:c8:64:89:f5:de:59:aa:
9b:95:96:28:25:ee:5f:68:c1:56:d7:73:6f:bd:71:
0a:ec:a6:ff:df:8a:43:37:dc:65:70:16:45:85:fe:
e1:f1:75:ea:e7:82:a7:b5:23:9b:ed:49:01:ba:69:
be:88:14:fa:39:8c:d6:63:ac:1b:e3:50:ba:a7:9e:
6a:3d:c6:04:47:ae:14:5a:09:21:54:5b:21:a4:b6:
e2:87:e0:6f:13:8a:86:08:15:cb:d4:ed:6a:83:a7:
4f:db:62:94:11:2b:0a:03:57:df:58:61:03:07:f9:
5c:db:ec:00:64:7b:b5:e9:ce:dd:70:a4:29:8c:7e:
b1:16:a9:f7:50:a0:e3:e9:36:a7:1e:83:cc:f9:8b:
5a:b8:4e:db:d6:6c:08:77:05:e4:66:82:5a:ee:82:
ac:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9D:28:3A:42:7E:6F:BD:66:46:CC:82:F4:2A:6E:0E:62:57:54:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wp0oOkJ-b71mRsyC9CpuDmJXVAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.5.0/24
94.103.126.0/24
94.156.10.0/24
141.98.4.0/24
194.169.173.0/24
195.178.121.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:bc:3a:b5:94:4f:18:25:0d:d0:52:a8:6b:3c:da:62:66:5e:
b1:00:76:65:38:dc:0e:6a:7a:13:ec:e0:40:9d:b3:e6:84:f6:
db:63:bd:90:87:f2:e7:47:e5:85:9f:f7:87:01:e1:db:7c:19:
e8:82:5a:4f:1a:40:2f:2f:32:ce:d6:93:12:76:9a:f9:43:6e:
a5:76:22:fb:cc:dd:55:b9:08:cb:07:3a:23:f6:de:6f:55:31:
99:93:ce:63:77:f1:9e:9f:2d:b5:9e:5e:67:0c:9f:b4:dc:af:
23:fe:a3:ce:29:e0:f6:5c:44:9a:30:7b:8e:6f:58:64:e1:78:
07:7a:51:44:31:d1:6a:b6:e2:7a:c0:53:d8:89:b9:4c:e8:e6:
23:ee:03:6f:37:9b:d0:b3:66:21:d0:f3:df:0e:3f:27:ce:53:
d7:39:b1:12:fc:94:99:61:bb:5e:cd:3b:9c:3a:f5:8e:cf:f6:
96:20:77:d1:a0:38:f6:83:9a:15:4b:0a:b8:2c:a9:f4:87:27:
c1:42:03:67:a2:f4:cb:c4:68:fa:68:85:27:fc:8f:b1:e7:2e:
6e:a6:89:06:58:d6:6b:51:1f:85:4f:93:0a:e2:06:25:d0:50:
7c:b0:c4:33:3d:96:15:86:71:52:71:5a:85:40:4b:fb:d3:e0:
3a:26:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 31 07:44:18 2023 by rpki-client on console-ams.rpki-client.org