Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WaYk0I7uKFREUhlmoP9jyBtxV5Y.roa
File: WaYk0I7uKFREUhlmoP9jyBtxV5Y.roa (raw, json)
Hash identifier: yD68KqLveo6+rAkXQ9rd7PScZuqMAb+PJayXWvv8FkQ=
Subject key identifier: 59:A6:24:D0:8E:EE:28:54:44:52:19:66:A0:FF:63:C8:1B:71:57:96
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018572470239715DB7136608D3E2888ABF1B
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WaYk0I7uKFREUhlmoP9jyBtxV5Y.roa
Signing time: Mon 02 Jan 2023 11:38:54 +0000
ROA not before: Mon 02 Jan 2023 11:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41390
IP address blocks: 146.185.233.0/24 maxlen: 24
146.185.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:47:02:39:71:5d:b7:13:66:08:d3:e2:88:8a:bf:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 11:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59a624d08eee285444521966a0ff63c81b715796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8e:b2:78:49:3f:1a:a6:19:64:67:57:b4:06:
e3:f9:aa:3a:0d:1b:af:17:c0:83:aa:b3:f8:31:c6:
f0:69:b1:56:39:6e:15:be:0f:4a:a0:51:b7:62:c9:
2e:bf:e1:da:a2:fa:1d:d3:96:ce:e4:11:bc:67:fb:
a8:79:ec:09:3b:a2:86:bc:ec:30:d8:a2:49:a8:2b:
35:53:15:9d:56:5e:bb:f0:68:a7:65:6a:ab:36:9f:
e2:7b:9a:eb:0a:5a:1b:a2:36:75:ea:ef:d4:59:54:
64:19:63:20:a7:cf:ae:b2:89:b4:a9:8e:6c:7c:36:
1f:67:cd:b3:ca:ef:52:83:13:b2:87:c3:db:ac:50:
73:08:b0:37:0a:c8:c1:3b:f2:95:d9:c2:3e:42:ce:
0d:4e:3c:00:fa:20:37:ef:c3:4d:69:63:7b:d1:aa:
c5:83:06:e1:e7:e3:a8:f6:76:5d:b8:ce:ed:05:7e:
d6:12:7b:5f:39:35:9f:55:8c:5c:36:d1:8d:e6:2f:
0e:1b:e0:27:79:15:ce:4c:80:75:10:6b:ca:26:3a:
0e:5d:48:29:7d:8b:44:5d:26:c5:f6:0f:07:ec:e8:
7c:8c:d1:71:11:8f:ae:8e:ce:6d:9a:36:dc:aa:93:
b2:89:da:9e:9e:63:71:7f:de:b3:73:a4:4e:93:71:
0b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:24:D0:8E:EE:28:54:44:52:19:66:A0:FF:63:C8:1B:71:57:96
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/WaYk0I7uKFREUhlmoP9jyBtxV5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.185.213.0/24
146.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
00:be:6c:29:b7:fb:2e:39:6c:9a:cf:41:8f:1a:35:39:ea:1e:
ae:d4:e9:de:03:68:63:92:9f:34:d7:74:34:fe:14:94:88:c5:
b6:0d:e5:1c:a4:bc:b0:fb:48:d5:6b:0c:43:89:7a:1b:00:94:
eb:df:b7:e8:1c:45:87:95:e7:6f:be:1d:17:b9:c9:eb:21:bf:
5a:4c:3f:44:12:3e:0f:b1:3c:59:66:dc:f6:08:1f:3d:4e:9a:
e4:75:16:2a:40:0b:7e:c3:15:de:ef:cc:60:b7:e8:6d:29:ab:
cf:77:8f:27:92:28:2e:42:d3:78:01:c0:38:a0:5d:00:9c:ab:
97:89:72:39:0c:e3:57:0a:1e:23:23:2b:ff:61:37:01:72:49:
d5:b5:1e:6e:d3:bc:dd:e4:66:29:5d:94:b6:dd:a7:8b:a9:7f:
42:bf:4a:da:b4:43:c5:d2:c5:ad:61:98:15:ae:89:25:31:61:
d7:c2:50:c2:22:9c:17:97:77:46:32:31:70:9b:ea:c2:85:51:
5f:75:cc:99:38:0d:81:6a:04:3c:23:50:bb:66:20:d5:45:25:
d4:6d:8b:a3:07:da:e2:ac:d7:51:52:02:27:b9:31:a3:d7:53:
e3:95:fa:a1:34:d6:fb:21:8f:bc:1b:c5:cb:6b:cc:56:42:43:
b7:e2:0d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:25 2024 by rpki-client on console-fra.rpki-client.org