Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/WJ49j4SKXDCSciX_IE_W6mZTlGA.roa
File: WJ49j4SKXDCSciX_IE_W6mZTlGA.roa (raw, json)
Hash identifier: VJ/oKFu/fhPbvm5eXV46v82IKYfhjGw6LZGBOYG/g0Y=
Subject key identifier: 58:9E:3D:8F:84:8A:5C:30:92:72:25:FF:20:4F:D6:EA:66:53:94:60
Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Certificate serial: 01856ECBA895C407A947723B9522E1F3DD42
Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/WJ49j4SKXDCSciX_IE_W6mZTlGA.roa
Signing time: Sun 01 Jan 2023 19:25:18 +0000
ROA not before: Sun 01 Jan 2023 19:25:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47697
IP address blocks: 193.105.196.0/24 maxlen: 24
185.116.204.0/22 maxlen: 22
185.116.204.0/24 maxlen: 24
2001:678:100::/48 maxlen: 48
2a03:4ba0:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:a8:95:c4:07:a9:47:72:3b:95:22:e1:f3:dd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473
Validity
Not Before: Jan 1 19:25:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589e3d8f848a5c30927225ff204fd6ea66539460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:ef:6d:b7:c7:3c:73:2d:a3:a8:90:0f:48:
94:22:40:e6:5b:4e:29:8c:e9:15:3a:85:8d:5d:ce:
4c:f4:11:14:ee:d3:e7:17:fb:e0:b1:57:00:31:8c:
4d:c0:5c:80:fa:13:d9:23:07:05:6a:e3:a4:ab:7e:
41:c8:22:4f:d6:de:2b:e3:7c:fc:62:e7:da:00:d4:
16:03:f5:27:9d:bc:99:5d:fa:48:a2:40:d6:46:03:
63:56:69:fc:47:49:a7:d9:85:6d:12:0c:f0:a5:2f:
f6:10:8c:ce:c6:e1:c6:8f:80:b1:54:b9:f5:80:87:
2e:d6:46:e8:18:16:80:99:89:eb:c7:0f:5f:e3:9d:
21:e6:81:27:54:fb:bf:46:66:f9:53:fe:f3:63:0d:
fd:38:76:22:60:f7:0a:56:da:4c:19:97:0f:e7:1d:
19:52:3a:7c:36:4d:38:11:45:b6:83:78:75:7e:a6:
58:8d:07:da:7c:08:66:d8:d2:31:b5:37:51:46:e0:
43:73:9d:3d:aa:21:bd:d3:3b:d8:0a:90:5d:ac:a8:
17:7a:9d:11:7f:84:92:a4:4a:b2:98:b1:77:1e:58:
c4:a0:93:b7:f8:17:83:9d:c8:d0:08:cb:8b:90:d5:
4d:dd:05:80:af:a8:1b:34:c9:0e:07:54:fe:bd:16:
b7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:3D:8F:84:8A:5C:30:92:72:25:FF:20:4F:D6:EA:66:53:94:60
X509v3 Authority Key Identifier:
keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/WJ49j4SKXDCSciX_IE_W6mZTlGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.116.204.0/22
193.105.196.0/24
IPv6:
2001:678:100::/48
2a03:4ba0:1::/48
Signature Algorithm: sha256WithRSAEncryption
a3:06:63:b8:fa:cf:2f:bb:a5:3a:94:4c:f3:65:5f:db:3f:1d:
42:ce:f2:07:f0:1c:5d:76:98:a0:5f:ea:db:8d:c4:5c:62:9a:
ea:54:42:6d:82:6d:d5:15:9b:a6:08:56:16:ef:11:6e:14:ea:
63:27:4e:3d:6c:39:75:30:2d:8b:6f:dc:45:a0:94:b9:01:0c:
fb:0e:5b:2f:da:5a:1e:79:5b:44:ae:87:f8:50:e8:53:7f:cd:
89:6e:39:da:4e:b9:06:b8:62:1f:55:d8:89:70:5c:0d:bd:b3:
d4:a3:76:60:29:94:5f:e6:7e:18:11:5e:2f:5a:cd:a8:a7:a7:
52:5e:a9:62:44:07:f6:28:86:d0:08:57:33:6e:72:7e:90:74:
dd:ca:23:a2:aa:e6:3c:96:a1:b2:6c:0b:c5:3d:7f:49:73:e5:
64:f3:8a:1f:9f:23:28:7a:6c:3c:a2:10:69:bc:60:6f:a1:8a:
17:05:f7:4b:0c:56:a5:6e:2d:36:e2:f9:f5:39:7e:c6:dd:1d:
e7:b2:82:34:7f:2a:c3:1e:30:14:72:50:6d:6c:8d:ea:36:10:
70:e6:dc:6b:0d:f0:e6:07:24:df:c9:e1:24:2c:02:c8:73:63:
25:ea:1f:8e:fc:7c:5d:68:fc:3b:c3:58:f9:a9:05:82:70:a5:
f6:a1:f9:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:33:49 2024 by rpki-client on console-fra.rpki-client.org