Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/wULn1Lb_eR7yhj9mJW83eYTxyqw.roa
File: wULn1Lb_eR7yhj9mJW83eYTxyqw.roa (raw, json)
Hash identifier: JKjdjFSs6k0S76dUxtbkZSDeibF0yfHUx/VVwBmN6z8=
Subject key identifier: C1:42:E7:D4:B6:FF:79:1E:F2:86:3F:66:25:6F:37:79:84:F1:CA:AC
Certificate issuer: /CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Certificate serial: 0188BA90620B13CB856C27B3FC2664E2A5B8
Authority key identifier: E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/wULn1Lb_eR7yhj9mJW83eYTxyqw.roa
Signing time: Wed 14 Jun 2023 15:40:04 +0000
ROA not before: Wed 14 Jun 2023 15:40:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49910
IP address blocks: 185.174.36.0/22 maxlen: 24
45.13.24.0/24 maxlen: 24
77.232.224.0/19 maxlen: 24
2a06:3e40::/29 maxlen: 48
2a12:9940::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:90:62:0b:13:cb:85:6c:27:b3:fc:26:64:e2:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ff5bbf540c65954b9913a68c24d174de97d829
Validity
Not Before: Jun 14 15:40:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c142e7d4b6ff791ef2863f66256f377984f1caac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:6c:90:a4:4e:5c:2c:da:ee:ea:42:2a:f2:
27:39:a4:9a:87:23:4f:4d:6a:5b:e8:cc:3d:89:e8:
02:4f:64:43:49:09:2d:82:cb:fb:ab:0a:9b:a5:df:
cd:6d:c7:ba:0d:f7:33:55:ed:26:70:18:67:5b:49:
e5:95:33:28:87:7e:8a:08:cf:22:33:51:a3:c6:4a:
84:b9:32:2c:2f:65:fc:93:c2:84:3b:72:4a:c9:f0:
f3:04:09:99:90:89:b1:3a:22:43:66:60:f3:c2:1e:
e5:d6:0f:06:9c:a6:ca:67:af:c4:ab:96:91:f3:c4:
32:43:7e:33:0a:af:22:8b:85:2a:98:b6:92:63:f2:
03:fb:60:16:6d:2d:90:42:6c:59:18:07:ab:09:ed:
3d:74:19:c6:90:cf:98:86:cd:c8:0a:b1:58:2e:c1:
10:55:70:8d:03:43:0c:52:43:be:2e:57:c0:b5:2b:
b9:27:fb:5d:0b:25:63:59:e3:01:79:71:99:65:3f:
10:78:3d:56:13:bc:76:0d:d1:20:2d:ec:c8:dc:73:
0a:db:72:9c:c0:2f:3d:4f:2e:bb:1c:c5:42:ce:c4:
bb:73:90:a9:f3:1a:00:1a:e6:99:5d:a7:e2:06:33:
4b:35:32:61:23:a3:d9:13:0a:26:75:34:a6:a4:af:
b8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:42:E7:D4:B6:FF:79:1E:F2:86:3F:66:25:6F:37:79:84:F1:CA:AC
X509v3 Authority Key Identifier:
keyid:E4:FF:5B:BF:54:0C:65:95:4B:99:13:A6:8C:24:D1:74:DE:97:D8:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5P9bv1QMZZVLmROmjCTRdN6X2Ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/wULn1Lb_eR7yhj9mJW83eYTxyqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4393e8-5f59-4d57-8198-5c0c46d04ee1/1/5P9bv1QMZZVLmROmjCTRdN6X2Ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.24.0/24
77.232.224.0/19
185.174.36.0/22
IPv6:
2a06:3e40::/29
2a12:9940::/29
Signature Algorithm: sha256WithRSAEncryption
7f:c8:d7:55:33:78:6a:56:9c:46:e2:fb:53:cd:4c:62:7e:6b:
b5:f7:6c:9d:d3:48:3f:4f:5b:24:aa:cc:80:a6:a5:fb:0c:52:
9e:81:f7:57:4e:b0:ff:31:38:d5:c8:21:a3:17:21:06:c8:f9:
cb:eb:87:eb:b4:06:53:6c:27:3a:75:dc:e2:6f:81:4c:ec:43:
6a:61:c4:b8:d3:e6:cb:44:a7:e4:2c:b5:3d:e7:6d:c3:74:84:
09:95:26:d5:35:48:e9:f9:0a:0c:e6:01:37:ee:25:19:64:95:
5b:0d:07:f9:3b:eb:cc:8b:29:e8:89:3d:4a:c2:93:ac:16:10:
33:61:52:4b:ed:82:a8:17:b0:6d:d7:81:a6:bf:11:7a:fe:ce:
d1:05:c3:65:27:b8:4d:02:9f:e2:32:94:23:83:52:f5:72:3e:
52:64:a0:eb:77:6a:d9:80:56:f9:02:f9:77:77:e9:5d:95:ac:
ad:a5:e5:49:f4:c2:00:0f:82:b0:cc:7d:16:c4:11:31:6d:20:
1f:ef:25:52:37:64:6a:68:61:0a:27:11:a1:da:42:ec:0c:7e:
71:09:78:81:49:bc:6f:54:93:4b:19:4c:1c:d5:df:6b:ed:5b:
2e:d5:bb:4e:d4:4c:bd:e8:f0:d9:c1:be:65:bd:49:74:5b:ad:
30:98:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:33 2024 by rpki-client on console-fra.rpki-client.org