Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wm0egFyoECe3I7KG0pEKl8fGU4I.roa
File: wm0egFyoECe3I7KG0pEKl8fGU4I.roa (raw, json)
Hash identifier: 2mZjo9QOHAQnATeXC3B5djXqKuRuZKUDB/Z+E4EJEg4=
Subject key identifier: C2:6D:1E:80:5C:A8:10:27:B7:23:B2:86:D2:91:0A:97:C7:C6:53:82
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018C44E2992962E3B6BE399916D7B04609D9
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wm0egFyoECe3I7KG0pEKl8fGU4I.roa
Signing time: Thu 07 Dec 2023 15:25:50 +0000
ROA not before: Thu 07 Dec 2023 15:25:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206005
IP address blocks: 89.40.35.0/24 maxlen: 24
185.243.140.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:e2:99:29:62:e3:b6:be:39:99:16:d7:b0:46:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Dec 7 15:25:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c26d1e805ca81027b723b286d2910a97c7c65382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:bd:de:6e:d8:63:34:6a:87:8d:27:ec:db:
37:26:bd:8e:a5:f5:84:71:e9:90:28:5f:9f:a7:90:
31:fd:d2:f3:4a:7f:27:0d:df:72:20:7b:a6:a8:38:
63:2b:ee:d2:07:8d:c0:c8:54:e2:a0:30:bf:29:cf:
bc:53:42:b9:1b:eb:d1:4e:c5:c5:94:4a:c1:92:d3:
7c:c8:a6:63:d8:76:be:62:df:d6:37:1d:8a:a1:aa:
6c:5e:e3:bd:bf:a8:9f:5b:6d:5b:d7:56:13:bd:5e:
83:12:0c:9d:a9:92:d0:8d:b1:d4:3f:ab:5f:aa:4d:
57:c9:f1:1a:b4:ab:57:70:de:e6:8e:62:f3:35:74:
13:98:07:cc:de:c2:af:e4:b7:9a:3c:3e:ad:0f:8d:
07:ea:81:ba:e3:62:5f:f0:75:5d:3f:1a:2f:1d:b6:
83:de:87:09:77:f7:a9:dc:9f:69:8d:a8:04:0d:c4:
57:a4:3f:17:f9:32:ac:a7:92:3a:ba:e7:58:48:26:
1f:99:cc:99:38:87:db:1e:06:02:32:94:a9:c8:8d:
98:ad:dc:cb:63:b4:cd:3f:88:de:a0:2a:99:75:2f:
d3:02:86:eb:93:0c:9b:2c:7d:b6:bc:2a:79:fa:d4:
48:e7:e9:90:53:a9:fb:36:f3:3a:bb:d1:74:17:27:
bb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:1E:80:5C:A8:10:27:B7:23:B2:86:D2:91:0A:97:C7:C6:53:82
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/wm0egFyoECe3I7KG0pEKl8fGU4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.35.0/24
185.243.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:49:d7:9e:bf:5b:25:d1:0b:c7:92:e4:ba:2a:bf:f4:43:4a:
59:d8:87:7b:a7:de:b3:c7:75:a8:7f:d3:97:17:1e:7f:c1:28:
2b:c6:c4:72:58:b6:84:0c:83:35:39:70:b7:f5:b0:76:47:f7:
77:58:d2:1f:2d:98:ab:6c:55:66:11:86:5f:4f:06:5b:79:70:
c1:ef:b7:a2:7c:a5:73:02:ff:23:76:f5:d3:f3:da:9e:e9:84:
79:6e:ee:19:cb:e7:da:d2:ff:ab:17:d6:2d:33:69:10:e9:14:
bb:b3:1f:95:4c:4c:ef:07:8b:b4:ce:2b:82:a2:11:f3:97:40:
4b:68:3c:ee:98:be:13:85:c4:fb:f8:92:c6:38:8f:64:d7:1b:
b9:78:c1:47:61:09:b7:98:4f:c4:18:02:3d:9b:cb:aa:30:5b:
8b:6b:8e:2b:94:44:9e:80:93:1a:f1:6c:9d:1f:2d:ea:ce:c5:
04:6d:c8:f1:fa:d8:6e:43:97:ad:2a:d8:03:20:aa:2a:e9:94:
a2:39:53:f0:3c:18:05:9c:c2:f2:6e:5b:a4:62:e0:09:a6:46:
eb:d8:69:b6:27:8f:6a:19:61:8f:20:ae:3a:c6:51:7f:df:a7:
bb:a3:ba:32:69:d1:d7:1a:23:a2:64:f5:1e:e0:01:7e:95:47:
3e:6e:aa:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 7 16:39:46 2023 by rpki-client on console-fra.rpki-client.org