Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/wJwXOLfCwsWK6jWNjrj2gpsqGS8.roa
File: wJwXOLfCwsWK6jWNjrj2gpsqGS8.roa (raw, json)
Hash identifier: 8rmfBW1uxTVGRVBqWo+FGj7tpAaBOqcwcZjTh+w63Lc=
Subject key identifier: C0:9C:17:38:B7:C2:C2:C5:8A:EA:35:8D:8E:B8:F6:82:9B:2A:19:2F
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 018733F6B51B4FD66D4EA1F32CF1D854A799
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/wJwXOLfCwsWK6jWNjrj2gpsqGS8.roa
Signing time: Thu 30 Mar 2023 19:20:18 +0000
ROA not before: Thu 30 Mar 2023 19:20:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 88.218.80.0/24 maxlen: 24
194.124.41.0/24 maxlen: 24
176.118.189.0/24 maxlen: 24
176.118.188.0/24 maxlen: 24
176.118.191.0/24 maxlen: 24
45.130.184.0/24 maxlen: 24
45.130.185.0/24 maxlen: 24
45.130.186.0/24 maxlen: 24
194.53.188.0/22 maxlen: 24
5.104.74.0/24 maxlen: 24
5.104.72.0/24 maxlen: 24
5.104.75.0/24 maxlen: 24
88.218.239.0/24 maxlen: 24
194.28.157.0/24 maxlen: 24
84.252.64.0/22 maxlen: 24
45.140.7.0/24 maxlen: 24
193.160.68.0/24 maxlen: 24
193.160.72.0/24 maxlen: 24
91.245.239.0/24 maxlen: 24
95.214.83.0/24 maxlen: 24
185.177.76.0/24 maxlen: 24
185.177.77.0/24 maxlen: 24
95.214.92.0/24 maxlen: 24
95.214.95.0/24 maxlen: 24
95.214.93.0/24 maxlen: 24
212.69.135.0/24 maxlen: 24
77.83.20.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:33:f6:b5:1b:4f:d6:6d:4e:a1:f3:2c:f1:d8:54:a7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 30 19:20:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c09c1738b7c2c2c58aea358d8eb8f6829b2a192f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:65:02:64:c4:72:15:94:e5:d6:39:a2:cc:b1:
1b:b0:c8:ab:41:bf:fc:ef:06:7f:57:76:9b:02:82:
ba:ca:49:63:1b:2d:fa:4b:d2:2b:e6:eb:46:17:d0:
d3:57:6f:00:83:6c:2d:97:5e:fd:89:f8:12:b2:3b:
02:7e:8b:0d:16:a6:63:f1:80:f2:1c:bb:54:74:0e:
cf:cc:fc:06:5a:da:07:f6:db:01:b2:14:b7:98:a8:
62:05:af:82:2e:07:87:d3:08:96:e0:97:38:61:25:
80:80:6a:c3:1f:bb:7b:37:19:17:4c:8a:4b:57:ed:
c1:97:d4:b8:fd:90:9d:21:4f:2c:45:5f:2a:83:19:
f0:e0:12:50:9c:37:b8:ee:e4:e7:f5:09:62:ed:fc:
d8:b7:bf:b8:5e:9c:ec:22:c0:39:9c:c5:e0:b8:df:
68:39:2f:f1:86:26:0b:1a:10:30:97:04:c2:74:96:
99:e3:2f:b3:7c:8f:14:cf:34:25:cb:e7:ac:86:7d:
53:da:66:6a:c9:f9:e2:e0:bd:eb:64:e3:ba:b3:8d:
eb:ed:4d:00:89:a6:c3:4a:0a:15:fc:5a:25:6e:f2:
64:8c:47:ea:7a:f1:83:c7:ae:77:0a:fc:a3:89:66:
63:8e:99:43:0d:3b:30:ee:1f:ee:91:d6:16:b5:36:
aa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9C:17:38:B7:C2:C2:C5:8A:EA:35:8D:8E:B8:F6:82:9B:2A:19:2F
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/wJwXOLfCwsWK6jWNjrj2gpsqGS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.104.72.0/24
5.104.74.0/23
45.130.184.0-45.130.186.255
45.140.7.0/24
77.83.20.0/22
84.252.64.0/22
88.218.80.0/24
88.218.239.0/24
91.245.239.0/24
95.214.83.0/24
95.214.92.0/23
95.214.95.0/24
176.118.188.0/23
176.118.191.0/24
185.177.76.0/23
193.160.68.0/24
193.160.72.0/24
194.28.157.0/24
194.53.188.0/22
194.124.41.0/24
212.69.135.0/24
Signature Algorithm: sha256WithRSAEncryption
02:23:01:49:a1:db:1d:e3:d6:65:1a:5a:ba:cd:d1:34:32:f1:
f9:02:a8:3c:dd:6e:9f:b9:47:6c:76:0d:9e:de:35:4f:cb:21:
e6:5d:39:45:ab:a0:2e:a4:98:fa:79:b7:56:8a:e9:0e:35:dd:
65:b7:00:41:a4:1d:36:bd:e4:1e:5c:d9:d4:85:c0:47:1a:68:
29:f0:df:d1:9a:b9:4b:2d:2f:2a:44:cd:d2:0e:a7:43:fc:35:
b5:a1:1e:74:62:d8:11:42:35:0a:6e:ce:36:59:cf:c1:2d:93:
db:2d:f6:47:b6:32:03:ca:dd:c8:37:3d:bc:d7:23:74:7d:31:
a1:18:5a:d0:7f:e0:4c:42:f4:2a:24:ef:26:c5:53:13:b1:35:
ad:9c:8b:88:94:a4:64:b3:ce:eb:e0:fd:fa:ba:f7:46:ac:0e:
d2:70:0f:9f:10:ad:04:69:6a:4c:9a:2a:f3:52:41:e0:b8:1e:
63:a5:ad:12:0d:93:82:e0:dd:3e:58:0c:b1:98:77:92:1c:c6:
e2:9a:6f:30:11:8e:eb:77:6d:bd:d5:af:f9:36:0e:7a:dc:02:
ea:44:4f:52:a6:8b:53:5c:cc:57:e4:7a:7a:6e:dc:72:f9:72:
c2:14:bf:8a:16:c5:2e:cc:48:c1:e9:b3:55:ce:8f:9a:bd:32:
b4:96:b8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:40 2023 by rpki-client on console-fra.rpki-client.org