Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w1r_2O_wlXFkEuF0qEJT31lttYc.roa
File: w1r_2O_wlXFkEuF0qEJT31lttYc.roa (raw, json)
Hash identifier: 4xxdPLbSc73cSHOA6M80nvOyLI0NS0zG68FDkUQlEzQ=
Subject key identifier: C3:5A:FF:D8:EF:F0:95:71:64:12:E1:74:A8:42:53:DF:59:6D:B5:87
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01894E94F30C0F66374599D680986D15BBA0
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w1r_2O_wlXFkEuF0qEJT31lttYc.roa
Signing time: Thu 13 Jul 2023 09:28:51 +0000
ROA not before: Thu 13 Jul 2023 09:28:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34358
IP address blocks: 85.121.136.0/23 maxlen: 23
217.156.42.0/24 maxlen: 24
217.156.44.0/23 maxlen: 23
85.120.35.0/24 maxlen: 24
81.180.200.0/24 maxlen: 24
217.156.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:94:f3:0c:0f:66:37:45:99:d6:80:98:6d:15:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 13 09:28:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c35affd8eff095716412e174a84253df596db587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:44:7b:6c:4e:18:54:44:da:b4:73:a2:33:
f0:f9:78:45:85:92:47:40:8f:c1:37:98:3f:02:8c:
8b:fd:11:b1:25:08:ca:fa:f3:e4:cb:67:54:54:4f:
46:08:e5:f2:44:ed:37:df:2a:2a:3c:85:65:1d:56:
df:28:c5:a1:e9:f3:e3:0d:c7:cb:92:2a:9c:49:2b:
81:4a:f6:e1:91:e5:51:95:45:bb:a0:c7:02:17:49:
12:e9:b0:b3:51:c9:e6:fc:2b:09:ae:c8:77:ef:96:
22:2b:91:69:00:5d:50:16:ce:6b:9a:0d:03:d8:1a:
6b:f5:0d:88:ad:6a:57:c6:96:01:ef:40:4d:73:e6:
ea:dc:9b:df:b9:98:50:d7:15:b2:66:8b:65:66:ae:
54:9e:3f:f5:5c:5c:89:8a:a9:60:a4:9b:e6:04:1f:
56:5f:c9:c9:e4:da:af:d1:bc:a7:6c:10:da:fc:57:
0f:22:46:5e:65:1f:3e:f7:a2:c5:d3:6e:e9:dd:0d:
52:bb:d5:a8:a7:9c:93:16:68:a6:f1:16:66:e0:fc:
5b:58:3c:1a:98:a9:be:78:aa:59:68:85:13:23:cb:
59:86:9f:7d:1e:0d:ac:53:9e:4f:e9:9b:75:b5:ad:
bc:c9:d8:e2:da:22:e6:ee:99:76:81:40:0f:67:00:
06:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:FF:D8:EF:F0:95:71:64:12:E1:74:A8:42:53:DF:59:6D:B5:87
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/w1r_2O_wlXFkEuF0qEJT31lttYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
85.120.35.0/24
85.121.136.0/23
217.156.42.0/24
217.156.44.0/23
217.156.103.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:5a:29:6c:91:f4:19:27:38:e4:99:9e:c4:6d:81:c3:15:15:
b0:8f:28:cd:b0:90:97:ea:d1:aa:4b:40:ca:0f:ba:c0:ec:d5:
23:6b:d4:9b:af:e6:27:ac:e4:ac:b4:c8:6e:4e:7f:51:1f:f8:
06:c0:95:47:26:de:75:0c:77:87:34:b9:ae:0d:c5:6d:a6:34:
ea:94:8a:16:29:8c:0b:f8:7b:0a:d9:c6:7d:01:4e:cb:72:dd:
ae:f3:16:3b:59:57:be:33:8a:2a:e0:36:e9:c3:e1:1e:8e:2c:
a3:40:83:d4:03:e0:06:ae:96:59:7f:36:82:e3:37:99:3d:e0:
c2:38:11:bb:20:dc:d0:ac:db:24:72:dd:66:3e:1e:ee:1b:55:
2a:2d:35:27:f6:22:ac:c7:23:2d:74:e6:2c:30:d1:0f:cd:43:
24:45:7e:51:88:26:55:b7:f5:66:b3:ae:4e:3c:8a:19:30:d1:
1d:9c:08:3e:f5:06:50:91:d5:15:e6:d6:d5:f8:37:75:0b:8f:
41:1d:d6:15:ee:77:55:8c:ce:3e:59:9f:24:63:9c:24:17:1f:
ce:f9:e4:68:d8:b6:4e:99:ab:10:7f:e5:ed:14:bb:6c:36:fb:
a6:2f:27:6d:4b:f6:ed:b8:09:ad:40:fc:e0:62:f3:a6:3b:cf:
c6:58:b0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org