Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SWoS4avX1xrYhZoh2YZ1ug8lUPQ.roa
File: SWoS4avX1xrYhZoh2YZ1ug8lUPQ.roa (raw, json)
Hash identifier: Di8O50mPb2CjYBFHtrNznCUYuO1EuPMXsG1Mh5Hwt2Q=
Subject key identifier: 49:6A:12:E1:AB:D7:D7:1A:D8:85:9A:21:D9:86:75:BA:0F:25:50:F4
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01862787189E44B6558D81EA162F9E1F3EE4
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SWoS4avX1xrYhZoh2YZ1ug8lUPQ.roa
Signing time: Mon 06 Feb 2023 16:20:10 +0000
ROA not before: Mon 06 Feb 2023 16:20:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 178.218.145.0/24 maxlen: 24
185.186.67.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:87:18:9e:44:b6:55:8d:81:ea:16:2f:9e:1f:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Feb 6 16:20:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=496a12e1abd7d71ad8859a21d98675ba0f2550f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:34:3e:99:c7:7a:4d:65:0f:b6:ec:dd:69:d0:
27:0c:0d:6a:07:65:8c:00:67:fc:ab:6f:7a:a8:0e:
96:47:69:64:b3:a9:79:41:65:f4:96:f3:41:7b:0c:
b3:2b:1c:69:94:44:00:4e:bd:a3:fe:d9:10:17:56:
05:ff:3b:da:bf:a3:1a:5d:44:af:07:ac:d9:49:4e:
de:9d:99:c5:ae:7d:30:a6:ff:68:e7:19:42:28:eb:
9f:0d:94:ee:59:39:e3:ae:a1:82:5b:67:3d:ca:28:
2c:ad:ab:dc:c1:a8:db:51:0d:de:31:67:35:30:bc:
69:25:de:31:93:f2:4e:c0:db:3d:45:0e:ca:15:ae:
6c:36:fc:61:2a:0e:a9:84:3d:c8:41:d6:0b:7b:ca:
b5:0d:c3:fd:af:0e:1f:13:7b:7d:b9:36:64:dc:2c:
a7:6a:d3:2b:34:ed:c7:9e:19:76:06:44:68:ed:64:
71:2a:c2:93:b0:eb:b1:02:5b:8b:af:1b:89:bc:e8:
77:60:2a:78:2e:91:51:bf:e9:07:4c:ff:9d:6a:cd:
96:3f:fb:6c:8f:46:ff:11:63:62:46:3d:55:e5:73:
2f:fb:a3:09:27:9e:a5:3c:fb:4e:24:26:d1:52:b7:
b7:e3:42:35:f1:f9:50:9f:4d:cb:dd:67:76:a0:3d:
d5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:12:E1:AB:D7:D7:1A:D8:85:9A:21:D9:86:75:BA:0F:25:50:F4
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/SWoS4avX1xrYhZoh2YZ1ug8lUPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.218.145.0/24
185.186.67.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:c7:0e:34:fa:38:d3:21:c9:e8:be:eb:c8:53:08:fa:ef:70:
43:6d:77:c1:c7:b5:14:93:ed:da:b2:ac:f2:32:2c:6c:20:5b:
20:79:f1:37:09:7e:56:e5:1b:74:80:44:d2:79:46:72:f7:78:
42:ab:f1:c8:36:be:41:a0:cf:10:9f:44:14:a9:07:05:37:73:
4b:e8:b9:d7:c1:d2:84:d3:80:6f:c2:92:c2:e3:cc:1a:7a:92:
7b:37:10:3c:ac:61:6a:9a:03:05:f8:a4:3f:78:c7:fe:e8:12:
40:12:a1:ad:ed:08:65:f9:62:55:e1:6a:34:d3:5f:0b:04:ae:
09:67:6a:ff:35:63:96:a9:74:29:1f:bf:51:f7:75:6f:a5:23:
8f:72:0b:07:6e:fa:2a:6f:fe:1d:fe:be:9c:39:1e:1e:33:eb:
05:da:d4:07:10:26:e6:0a:06:a9:ec:d4:c5:d3:52:05:cb:cb:
92:77:04:72:ba:dd:b9:54:19:98:5a:4b:b8:59:9a:d9:bb:88:
ec:1a:9f:58:cc:f8:9f:54:4a:1b:cf:d8:f9:17:af:e4:25:f1:
c5:24:3d:71:49:02:c4:d4:0f:47:21:f1:91:ed:b7:b7:f9:00:
35:98:14:38:d2:9d:1f:b6:d7:d4:88:b6:03:42:13:1e:89:f0:
ba:48:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:26 2023 by rpki-client on console-ams.rpki-client.org