Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/wLKmPPPBHV5MSXiHtNWNfJlvSAk.roa
File: wLKmPPPBHV5MSXiHtNWNfJlvSAk.roa (raw, json)
Hash identifier: KRimhpGgR0V26SNOfEMQ59DED9JF1t8eC44kay8iy7g=
Subject key identifier: C0:B2:A6:3C:F3:C1:1D:5E:4C:49:78:87:B4:D5:8D:7C:99:6F:48:09
Certificate issuer: /CN=6c05cf9c327b2fc877be8b561822b065e09690c2
Certificate serial: 01856F021F83294EEA71DD86289B30EB8474
Authority key identifier: 6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/wLKmPPPBHV5MSXiHtNWNfJlvSAk.roa
Signing time: Sun 01 Jan 2023 20:24:48 +0000
ROA not before: Sun 01 Jan 2023 20:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209014
IP address blocks: 194.93.68.0/22 maxlen: 24
185.245.56.0/23 maxlen: 24
2a0d:140::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:34:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:1f:83:29:4e:ea:71:dd:86:28:9b:30:eb:84:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c05cf9c327b2fc877be8b561822b065e09690c2
Validity
Not Before: Jan 1 20:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b2a63cf3c11d5e4c497887b4d58d7c996f4809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:5b:c9:b3:f9:78:58:ab:50:67:00:02:af:
44:03:46:6a:89:d6:6a:64:58:58:78:19:c9:80:8f:
ed:2c:ca:13:91:0a:75:f8:17:b7:4c:3a:c4:16:82:
1c:64:05:ae:c3:79:79:63:32:48:ba:94:57:fb:c2:
35:d0:63:a8:a9:48:a7:1f:6f:2d:42:23:ad:6b:49:
bd:3b:fa:8a:aa:6f:68:45:96:bc:af:6f:ec:b6:44:
27:f8:8e:0c:1c:34:af:6d:12:4b:75:37:d9:23:6d:
09:9e:24:fe:64:bc:31:f6:35:ea:d4:05:f7:58:f9:
08:92:93:59:41:e5:d1:db:d1:cf:bb:ff:e6:60:65:
02:50:55:f0:fb:a1:18:42:be:4b:97:ed:f8:93:19:
38:b7:73:c1:13:e2:b9:07:c2:c5:9b:84:a6:3a:80:
8b:24:08:7c:4f:a4:57:a0:ec:27:75:ac:e4:df:24:
2e:d9:ed:ce:ea:75:84:d6:34:75:20:b9:c4:20:9f:
45:bf:59:9c:a1:fa:8e:be:7e:3e:9d:3e:ae:6b:e1:
82:9b:3c:4b:b0:05:9d:ec:eb:ce:85:b5:1f:1d:c8:
1f:4d:ac:1d:50:54:9f:c1:f3:9e:fa:16:f6:dc:eb:
0f:3b:2e:b1:8a:f1:4c:ce:ec:67:37:f0:8d:8c:44:
c6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B2:A6:3C:F3:C1:1D:5E:4C:49:78:87:B4:D5:8D:7C:99:6F:48:09
X509v3 Authority Key Identifier:
keyid:6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/wLKmPPPBHV5MSXiHtNWNfJlvSAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.56.0/23
194.93.68.0/22
IPv6:
2a0d:140::/29
Signature Algorithm: sha256WithRSAEncryption
43:6b:ef:2a:90:b3:4c:55:35:eb:22:51:bb:75:b9:7e:a5:40:
66:f1:f5:77:2a:d6:c4:d0:fe:2d:82:ca:8a:88:95:0e:b0:61:
1c:64:ce:32:81:32:f3:e4:53:12:46:9b:28:06:a0:4f:fe:b4:
58:12:2a:cb:17:85:9a:81:10:07:33:3b:48:f6:f8:ed:ea:ed:
23:aa:25:7e:66:b5:14:50:bd:2e:6e:e5:ff:29:42:4f:94:82:
cb:01:e6:cc:f4:aa:cd:7a:b5:81:7a:3b:63:15:6c:d1:fc:8f:
fc:bb:4a:01:ef:0f:04:c5:e5:1e:ae:9a:3e:7d:5d:e9:02:dd:
99:ff:ee:e6:bb:d4:e5:b9:6c:87:00:9d:0e:b6:bb:ac:11:a9:
34:64:e4:6e:2e:79:83:48:98:b0:bd:fe:0f:70:ee:ee:ae:cf:
1f:97:9e:24:5f:15:11:15:e0:f3:cd:39:08:a4:70:91:38:46:
a9:e1:e3:69:56:0c:04:95:b6:ed:37:f6:30:37:fb:12:aa:91:
de:8a:3e:ff:07:72:70:54:17:a4:ae:8d:a3:21:7f:90:20:76:
47:32:50:7c:2d:1d:72:42:44:0d:d4:79:ab:fd:0b:db:87:65:
cf:18:3d:1f:19:2f:58:78:b8:83:bd:23:76:41:f8:42:30:50:
fe:ad:8e:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:31 2024 by rpki-client on console-ams.rpki-client.org