Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WooCZlREtqJpsNX-dVdyWFsb9HA.roa
File: WooCZlREtqJpsNX-dVdyWFsb9HA.roa (raw, json)
Hash identifier: L1BoZz7yCCI8ttwU8FChMxMP4vqZN+YISEPnoPjuQvs=
Subject key identifier: 5A:8A:02:66:54:44:B6:A2:69:B0:D5:FE:75:57:72:58:5B:1B:F4:70
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188BE1454D6735D3A30AECEA0B1F971AF5E
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WooCZlREtqJpsNX-dVdyWFsb9HA.roa
Signing time: Thu 15 Jun 2023 08:03:03 +0000
ROA not before: Thu 15 Jun 2023 08:03:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 79.175.95.0/24 maxlen: 24
79.175.96.0/24 maxlen: 24
188.255.128.0/24 maxlen: 24
188.255.144.0/24 maxlen: 24
79.175.67.0/24 maxlen: 24
188.255.212.0/24 maxlen: 24
109.121.38.0/24 maxlen: 24
109.121.36.0/24 maxlen: 24
109.121.37.0/24 maxlen: 24
109.121.33.0/24 maxlen: 24
109.121.43.0/24 maxlen: 24
109.121.42.0/24 maxlen: 24
109.121.40.0/24 maxlen: 24
109.121.39.0/24 maxlen: 24
109.121.47.0/24 maxlen: 24
109.121.45.0/24 maxlen: 24
212.69.11.0/24 maxlen: 24
178.253.237.0/24 maxlen: 24
109.233.185.0/24 maxlen: 24
109.233.184.0/24 maxlen: 24
77.105.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:14:54:d6:73:5d:3a:30:ae:ce:a0:b1:f9:71:af:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 15 08:03:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8a02665444b6a269b0d5fe755772585b1bf470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:95:b5:6a:51:e8:4e:0d:0c:6a:c7:65:21:a3:
48:69:a0:56:a1:43:7a:7e:0c:0e:cb:fb:b2:a7:f2:
a7:e2:8a:7b:0c:13:49:ba:28:7e:20:1e:de:e6:39:
42:56:3e:91:59:9f:0e:3a:4a:55:98:80:ca:b6:35:
21:5b:13:f5:e8:29:f1:8c:17:57:a8:cb:15:37:41:
8a:35:6c:c7:3d:7c:29:16:dc:d7:dd:58:fa:28:aa:
d2:b4:76:82:f9:81:d5:67:a9:11:5a:b1:9f:a2:4c:
97:a6:3f:4b:cc:7c:32:3c:73:db:56:e5:90:7e:bf:
ed:fe:6d:a9:14:a0:05:17:8f:28:da:89:a7:cb:fb:
2c:a4:14:24:b4:5c:92:20:14:8f:f9:5f:ba:49:3b:
7d:e0:65:28:1c:99:e9:2f:b2:49:7e:ba:e5:d3:d4:
53:3f:d9:4c:d2:80:ab:da:1e:36:f7:22:9a:3f:6a:
f8:a3:24:8c:25:39:c8:0b:56:b3:92:79:15:91:2e:
d0:68:dc:50:4b:c6:2e:23:e7:af:a0:6b:bb:4d:6f:
a2:b4:7d:8e:74:69:be:d5:11:ef:95:94:73:65:b5:
a9:6f:fb:0b:5d:90:ed:89:9d:88:a6:ba:27:dd:f5:
4a:86:c4:7b:85:38:1e:da:b5:67:b4:a1:b0:a7:bc:
6e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8A:02:66:54:44:B6:A2:69:B0:D5:FE:75:57:72:58:5B:1B:F4:70
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/WooCZlREtqJpsNX-dVdyWFsb9HA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.8.0/24
79.175.67.0/24
79.175.95.0-79.175.96.255
109.121.33.0/24
109.121.36.0-109.121.40.255
109.121.42.0/23
109.121.45.0/24
109.121.47.0/24
109.233.184.0/23
178.253.237.0/24
188.255.128.0/24
188.255.144.0/24
188.255.212.0/24
212.69.11.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e9:4d:ad:c3:90:d7:f7:c0:02:df:31:6e:42:0e:49:1a:b4:
f8:11:0c:24:39:cb:d1:31:ed:a2:3d:05:56:96:d6:14:34:90:
db:80:00:17:15:e9:0d:0a:02:f7:6b:e2:25:b9:81:4b:88:14:
a2:57:1e:ab:a3:e7:92:66:c2:4a:da:a6:45:bd:93:1a:c9:bc:
d6:21:95:6c:4c:93:85:0c:01:87:5b:7c:bb:cd:7b:24:5a:fd:
62:ea:f3:10:93:c8:c2:17:da:80:84:e8:a1:1b:67:8c:85:3b:
32:1e:c2:25:3d:4e:b6:36:b3:14:75:84:05:af:5f:a4:b8:01:
58:57:f6:57:6d:27:72:26:be:e7:2b:06:e1:9d:0a:23:5a:60:
4e:8b:fe:e3:58:e0:cd:f2:38:4a:2f:74:7a:1d:34:ea:4a:10:
f3:7e:9f:79:b3:f0:17:d6:41:82:cc:99:fd:3e:34:fa:95:df:
6b:4a:bf:b8:c2:26:fc:19:3f:b5:7b:ce:d4:af:2b:7c:6c:f3:
be:b4:1c:80:14:22:ad:f4:0a:24:17:fa:30:ac:95:c1:90:fc:
d1:6b:72:86:69:4a:30:97:3f:aa:95:76:09:fd:22:f6:f1:b2:
70:b2:50:ea:c2:32:c4:e7:c2:24:5c:1a:cd:f5:5c:f8:92:29:
c9:fa:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-fra.rpki-client.org