Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/Wo3W_NhKEliaLGfJ6N3SZqbQGwg.roa
File: Wo3W_NhKEliaLGfJ6N3SZqbQGwg.roa (raw, json)
Hash identifier: UPd+CQDaMpGJkv/pBhSHySxhafIijHapzQ5HJfOWKWE=
Subject key identifier: 5A:8D:D6:FC:D8:4A:12:58:9A:2C:67:C9:E8:DD:D2:66:A6:D0:1B:08
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 01856C0A33ABE44F8C09A0E4CF74FE94833F
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/Wo3W_NhKEliaLGfJ6N3SZqbQGwg.roa
Signing time: Sun 01 Jan 2023 06:34:45 +0000
ROA not before: Sun 01 Jan 2023 06:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209231
IP address blocks: 185.161.236.0/22 maxlen: 24
2.56.140.0/22 maxlen: 24
2a09:c540::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:33:ab:e4:4f:8c:09:a0:e4:cf:74:fe:94:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Jan 1 06:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8dd6fcd84a12589a2c67c9e8ddd266a6d01b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1e:5d:54:04:93:09:04:2b:6a:91:e1:c0:95:
27:c7:74:2d:88:b4:92:37:a9:72:cb:54:89:19:d0:
e3:c1:2d:60:52:65:d8:dc:32:ff:eb:22:21:bd:b5:
9a:a3:4e:ab:f2:ae:62:20:4c:cc:ff:10:a8:77:8c:
bc:03:79:72:32:fe:d5:14:3c:54:e2:25:d3:d1:96:
a2:9b:f6:61:5b:88:5e:bc:16:3e:9f:13:3a:24:cd:
80:46:48:e4:7b:f2:69:66:57:6f:ad:af:9c:f4:dd:
c6:84:e4:63:b0:16:4e:e6:ed:a0:b0:14:0d:83:ba:
e5:c4:c0:e5:40:54:92:6a:5f:95:ae:41:a5:c6:fa:
a5:d9:8e:1f:25:e8:ee:39:31:bf:ac:97:6e:49:6b:
f1:a0:06:ff:02:02:0c:7e:80:0e:88:63:84:b0:06:
d8:22:5d:cd:13:f8:5b:e2:77:0e:f8:a7:06:93:65:
6d:8f:9c:9c:60:39:c6:db:d3:28:78:a4:19:e6:28:
2a:fe:18:7d:c1:3e:15:8f:9a:d2:5b:96:05:e4:65:
a8:27:3f:8d:29:b4:de:c2:09:d1:0d:12:0d:80:5e:
63:ab:8c:5e:8b:67:da:34:88:71:4d:2c:4d:19:54:
45:ab:ac:d1:88:9e:bf:da:0d:1f:83:f8:19:e9:fa:
9f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:D6:FC:D8:4A:12:58:9A:2C:67:C9:E8:DD:D2:66:A6:D0:1B:08
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/Wo3W_NhKEliaLGfJ6N3SZqbQGwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.140.0/22
185.161.236.0/22
IPv6:
2a09:c540::/32
Signature Algorithm: sha256WithRSAEncryption
60:0a:a2:97:2f:b2:21:31:86:84:25:48:ca:e6:ba:98:ca:5f:
80:81:8e:ea:b1:81:53:70:38:b9:a1:3c:e1:9f:29:56:85:03:
51:ad:26:07:c1:7e:3d:20:a4:9c:b6:a3:11:9c:11:af:db:eb:
d4:3d:aa:18:70:43:f7:c1:8d:01:7b:38:6d:f2:68:0a:62:e1:
a9:17:dd:79:0a:34:4d:84:bb:8f:38:9f:c2:54:81:5e:7e:01:
41:1c:26:79:b4:7b:f2:10:6f:9e:19:5b:04:c3:06:2d:1c:df:
93:29:43:67:89:f3:0c:1f:46:38:70:16:3e:c8:45:db:f1:df:
bd:3e:e6:c9:9a:4a:73:7b:53:97:44:55:bd:44:6b:22:0b:6c:
e1:8d:de:3d:44:08:d1:34:f2:a8:3c:c7:75:35:51:d6:48:12:
69:df:65:36:fe:3e:29:e0:7a:7c:5f:66:f4:b6:75:7b:40:df:
76:5d:21:0d:10:63:8e:55:4b:dc:42:b0:b0:2e:2f:5b:b5:ff:
ff:13:5f:2d:79:0c:8d:6f:38:c8:8c:c1:83:67:f4:be:0f:33:
4f:d9:e1:47:79:cd:5f:c3:f8:4b:6d:fd:01:c8:ba:8d:94:4d:
2a:72:3b:5a:9b:f0:48:ee:cc:9c:b5:5c:a2:04:a2:cc:c4:7f:
ce:ef:66:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:23 2024 by rpki-client on console-ams.rpki-client.org