Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/w-dVjAriuJIK5WmzmLpc9bDIEkw.roa
File: w-dVjAriuJIK5WmzmLpc9bDIEkw.roa (raw, json)
Hash identifier: 1wspqvX5rd4cUOLwPdWstOlli80NPw4nVZ2Nn/l10gQ=
Subject key identifier: C3:E7:55:8C:0A:E2:B8:92:0A:E5:69:B3:98:BA:5C:F5:B0:C8:12:4C
Certificate issuer: /CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Certificate serial: 018572E826FF14D59B8C62139FB5C8444842
Authority key identifier: 8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/w-dVjAriuJIK5WmzmLpc9bDIEkw.roa
Signing time: Mon 02 Jan 2023 14:34:54 +0000
ROA not before: Mon 02 Jan 2023 14:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206591
IP address blocks: 185.181.179.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:26:ff:14:d5:9b:8c:62:13:9f:b5:c8:44:48:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa73a7cc1e4d37f764036877c4281da8b00907f
Validity
Not Before: Jan 2 14:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3e7558c0ae2b8920ae569b398ba5cf5b0c8124c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:99:50:56:e8:96:c7:40:44:fa:72:a8:fb:
8d:5a:48:0a:06:6f:3e:a4:67:d1:ab:08:ce:88:d1:
2f:31:43:1a:cb:49:b6:db:03:c7:f3:c0:17:1d:b6:
6c:9b:d2:05:70:92:0c:31:2f:a2:36:5b:52:e5:7c:
9a:50:fe:79:50:e2:25:0c:2b:11:3b:f6:a8:5f:e8:
8e:6f:ee:2e:af:e3:12:8e:1e:79:5b:bc:02:e0:b1:
5e:80:e9:1b:79:b6:c8:f9:d6:44:1a:38:c3:15:17:
0c:5b:5b:df:2d:ba:12:31:68:f9:70:31:69:0a:0c:
ac:49:0d:5a:e2:73:1d:5f:ce:cb:32:b3:58:97:62:
90:62:0c:39:73:a0:48:0a:0b:c1:ac:9f:8b:f6:f4:
4b:ab:45:77:66:51:bb:9b:e1:fb:27:37:d0:a1:f6:
93:1f:73:fb:ec:2e:75:97:4d:f4:cf:0a:10:a5:3c:
f3:e1:8e:bd:d9:f5:91:6d:5b:ee:9f:c3:db:03:5e:
3d:07:84:33:d3:03:76:93:e3:ab:b1:e3:2d:76:03:
ae:7b:58:f8:e6:c5:79:1e:ea:8d:32:72:ed:68:4f:
a2:00:8c:a8:87:ea:e8:37:76:1b:69:e9:58:1b:cd:
b9:ea:84:3b:c9:80:50:58:ef:19:7b:9e:03:0f:69:
2b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:55:8C:0A:E2:B8:92:0A:E5:69:B3:98:BA:5C:F5:B0:C8:12:4C
X509v3 Authority Key Identifier:
keyid:8F:A7:3A:7C:C1:E4:D3:7F:76:40:36:87:7C:42:81:DA:8B:00:90:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6c6fMHk0392QDaHfEKB2osAkH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/w-dVjAriuJIK5WmzmLpc9bDIEkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/e93812-227b-409e-b555-afa3b0bea0b7/1/j6c6fMHk0392QDaHfEKB2osAkH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.179.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:3c:a0:9b:f5:19:c6:fe:4f:a2:74:50:a7:f3:35:e6:f7:e4:
ca:ba:e8:95:8f:1c:53:9f:75:94:d9:b7:1b:62:f2:61:24:f7:
3f:6b:f7:7f:ed:71:fe:98:40:cf:91:b3:6b:74:80:70:50:c1:
6d:b3:85:b4:be:6e:1b:82:61:da:af:ac:f9:d2:5f:e2:4d:09:
ab:16:28:bd:98:d0:0d:d4:b0:f3:6d:45:d2:4f:d2:50:a1:cd:
ed:ce:74:59:f5:6a:a0:ce:82:1b:aa:4d:53:18:62:fa:bf:f8:
2f:02:8a:f2:5d:0a:1d:35:d8:ff:ae:62:17:fd:77:55:21:b8:
ce:3d:af:c6:7a:09:65:14:7d:5e:85:d0:2f:2b:ba:9c:b5:68:
b2:d5:85:df:36:db:48:50:bd:a1:70:37:e7:06:a5:b1:7c:e9:
e3:13:19:eb:31:30:1f:dc:07:89:fa:52:94:c3:7a:4a:c8:90:
48:54:b6:11:57:69:3a:cc:e3:d9:94:a6:59:e6:2f:c4:d6:70:
3b:f5:f2:95:24:72:31:38:5f:85:84:c5:64:d0:2c:a4:67:46:
06:dc:05:88:68:eb:0a:1a:b5:4f:7d:93:35:da:47:d2:36:9c:
0f:f4:2e:dc:a5:af:cb:ba:33:e1:4a:2f:01:b0:39:58:d8:e8:
d6:a0:fd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:50 2024 by rpki-client on console-fra.rpki-client.org