Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/wmUk72id8PfdxjApJU03_8bLvdw.roa
File: wmUk72id8PfdxjApJU03_8bLvdw.roa (raw, json)
Hash identifier: WtmdtICu5mscwbswKqJfjzFwYBv4dnWLM/bqKboY+cA=
Subject key identifier: C2:65:24:EF:68:9D:F0:F7:DD:C6:30:29:25:4D:37:FF:C6:CB:BD:DC
Certificate issuer: /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial: 01856F42E3D8E25A90CC4C547FD6E9C0E8FC
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/wmUk72id8PfdxjApJU03_8bLvdw.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60627
IP address blocks: 77.237.90.0/24 maxlen: 24
46.209.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e3:d8:e2:5a:90:cc:4c:54:7f:d6:e9:c0:e8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c26524ef689df0f7ddc63029254d37ffc6cbbddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bf:68:4a:eb:ef:61:f0:06:fb:7c:0c:0b:03:
93:e8:4b:10:9f:7b:81:64:31:59:b2:84:37:8e:f6:
20:87:4d:b0:8f:6c:09:a9:90:45:28:8b:0a:44:e3:
ca:61:03:0a:cd:4e:69:4c:d8:64:48:71:2a:f7:2c:
28:69:fd:bd:d8:3c:2a:b3:96:6c:8a:6d:0b:84:fc:
24:ca:da:f1:05:dc:49:52:63:41:ac:3e:6e:f2:95:
b1:29:f0:00:c4:47:5b:ef:ee:1b:d0:f8:93:db:10:
81:f8:81:ff:bf:44:05:e1:f4:da:0e:7d:78:78:c7:
3d:4e:74:06:ca:41:17:da:0c:25:f7:8e:9e:94:6d:
10:0f:1c:17:ad:60:2e:8c:e0:f7:5a:49:eb:cb:cd:
21:55:05:0d:20:37:bb:35:9f:64:5b:26:fc:c6:61:
d2:b1:d4:c2:f3:62:6b:27:0b:32:d9:61:ba:57:cc:
ec:9c:cb:94:d8:b3:cb:e7:bc:13:cd:05:8b:bc:28:
eb:7f:7d:2c:f3:51:de:15:01:93:24:46:4b:32:b3:
2a:eb:96:3d:9e:66:81:7c:15:e8:3f:a2:44:2a:1c:
72:be:07:ef:a0:48:59:02:3f:c8:04:8f:54:24:7e:
2a:3f:b0:02:c2:7a:aa:10:8d:67:3d:52:b9:35:49:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:65:24:EF:68:9D:F0:F7:DD:C6:30:29:25:4D:37:FF:C6:CB:BD:DC
X509v3 Authority Key Identifier:
keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/wmUk72id8PfdxjApJU03_8bLvdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.209.72.0/24
77.237.90.0/24
Signature Algorithm: sha256WithRSAEncryption
62:07:3f:7e:0d:cc:4c:6d:c1:33:a6:c3:f2:8b:b5:32:cb:98:
71:fc:dd:ce:cb:53:d0:f8:ec:88:c6:cd:73:f2:2b:21:2a:3b:
49:1d:44:a8:40:c3:13:6d:e6:2d:b9:a7:b7:dd:88:4a:76:10:
1e:b9:9c:27:46:cb:ed:e0:ba:cc:bd:ea:4b:e1:35:f5:90:1e:
07:de:bb:b4:0c:04:ae:88:46:43:eb:5f:17:ff:28:29:6f:83:
0c:bc:67:20:82:2e:5a:fa:a1:9e:0c:97:cd:ef:99:d6:f0:5d:
01:bd:88:7b:88:95:13:5f:17:c3:9b:8f:23:5b:58:03:ea:04:
3a:50:5a:7b:4c:64:da:a2:45:e2:17:3b:b4:98:ba:56:f8:9c:
29:ba:b7:ad:26:e0:15:dc:71:f2:38:58:30:b6:4c:5f:2d:25:
c6:7c:96:cb:2d:0e:8b:a9:0a:f8:b1:e5:89:bf:b4:39:7a:6a:
8e:90:0e:99:3b:27:d2:55:81:e0:a2:cc:37:31:ec:54:6e:12:
cb:00:c3:e2:bc:65:a4:8a:bd:9a:63:01:1b:f7:a3:e2:10:ed:
d4:c3:26:48:b8:9f:a4:f7:d4:0f:66:cd:e9:3f:22:67:e8:80:
bc:39:78:05:4d:80:d8:2f:90:3a:13:25:79:de:b7:8a:29:3c:
f5:01:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:49 2024 by rpki-client on console-fra.rpki-client.org