Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/swwU1as2e7VT_B2YiQT9S0tvg10.roa
File: swwU1as2e7VT_B2YiQT9S0tvg10.roa (raw, json)
Hash identifier: M6C1N35N2dUDc62RM3DPYqUuFigf7lUXxc+Av1k/d9M=
Subject key identifier: B3:0C:14:D5:AB:36:7B:B5:53:FC:1D:98:89:04:FD:4B:4B:6F:83:5D
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01857039A7156C35753CCAFA4ECA0666F080
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/swwU1as2e7VT_B2YiQT9S0tvg10.roa
Signing time: Mon 02 Jan 2023 02:05:04 +0000
ROA not before: Mon 02 Jan 2023 02:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 195.180.137.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
195.180.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:a7:15:6c:35:75:3c:ca:fa:4e:ca:06:66:f0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: Jan 2 02:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b30c14d5ab367bb553fc1d988904fd4b4b6f835d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:06:16:3b:68:14:e5:7e:b2:5c:1f:5a:c9:40:
2b:40:be:d1:8b:28:85:94:b9:de:0c:e8:3f:10:6c:
30:62:36:06:30:d4:0b:3a:b5:04:b4:23:24:29:8f:
0c:56:89:e9:60:9b:23:6c:60:fa:36:f4:10:85:50:
5a:a2:8a:78:83:b6:02:ef:1e:58:af:6e:3d:b7:cd:
ca:0c:7d:9d:4a:04:e2:2f:1d:c3:c8:c6:69:7d:45:
2d:51:95:c9:74:f9:32:64:80:4b:79:17:b9:35:34:
38:a5:95:75:76:bc:af:e8:41:34:c4:c3:5d:16:b3:
89:7b:d9:91:2f:1d:b0:42:02:68:76:08:50:4d:93:
10:aa:bb:4f:8e:5d:50:c1:14:35:1d:67:b6:cd:62:
da:96:0c:07:65:65:9e:8b:d1:74:cc:ed:d0:a2:5c:
94:8e:34:a1:70:02:e5:09:9a:27:40:c6:f1:9e:96:
98:2c:f7:ab:47:14:a7:05:d2:f4:b9:a2:e5:0f:09:
32:2d:e6:25:a4:09:3a:99:36:ea:59:17:64:49:84:
27:04:cf:37:51:b4:7a:7a:9f:7c:8b:e0:92:92:65:
7e:86:a1:e7:3e:1c:7f:7a:86:b9:07:26:68:bc:4b:
21:39:91:f4:1e:8b:ed:85:fb:86:7d:dd:df:1f:ce:
01:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0C:14:D5:AB:36:7B:B5:53:FC:1D:98:89:04:FD:4B:4B:6F:83:5D
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/swwU1as2e7VT_B2YiQT9S0tvg10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.148.0/23
195.180.137.0/24
195.180.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:02:50:42:89:0b:06:57:e7:44:f5:cf:91:7b:cf:6c:86:cb:
8a:1d:7a:b4:04:7d:ac:0e:49:9e:e3:e6:5c:6f:89:f9:53:45:
47:3a:ab:30:88:8b:9a:41:6e:cd:0b:74:49:10:44:3a:cd:08:
46:bc:e1:63:3f:f2:f2:47:d6:9e:df:72:a4:0e:90:1e:44:a5:
3b:af:e1:0e:67:a5:21:5f:7a:70:97:b7:e1:15:27:59:14:f4:
51:a6:e0:6e:8a:25:bc:49:0c:6d:80:4d:3a:8d:15:bd:0d:10:
31:e3:41:54:7a:98:ae:93:9a:e9:dc:cc:bb:5f:8a:07:5b:63:
4c:1b:c7:fc:b4:d4:e1:3f:c2:fe:fe:d4:74:2c:fe:99:e0:c0:
82:00:1f:33:64:83:f9:83:d8:73:0e:62:2a:de:77:66:8e:a7:
b9:cd:0e:99:f7:ef:3b:c2:e2:8b:7b:01:25:e5:be:2f:89:b3:
d8:bf:ae:42:71:b1:65:33:be:c8:ff:c8:83:fc:0b:9c:3c:ae:
0e:c6:1f:ad:e1:95:ff:dd:5a:56:a7:9e:18:56:98:ae:3a:a5:
f7:8b:34:d0:68:2e:7a:46:ba:dc:1f:d6:c9:97:c8:f3:c7:2c:
bd:57:ef:14:e9:43:31:a0:6b:45:77:60:14:ed:44:97:50:f9:
a8:3c:f8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:30 2023 by rpki-client on console-ams.rpki-client.org