Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/WO6iiv8dY6C624mW5NxmNm4A9qA.roa
File: WO6iiv8dY6C624mW5NxmNm4A9qA.roa (raw, json)
Hash identifier: 98owcijJugQ6KyCbn+GwWDl2wnAuW2Eomc5251NejGY=
Subject key identifier: 58:EE:A2:8A:FF:1D:63:A0:BA:DB:89:96:E4:DC:66:36:6E:00:F6:A0
Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Certificate serial: 018659E480D82EBBB62EE410FA28C282514A
Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/WO6iiv8dY6C624mW5NxmNm4A9qA.roa
Signing time: Thu 16 Feb 2023 11:03:12 +0000
ROA not before: Thu 16 Feb 2023 11:03:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 158.46.149.0/24 maxlen: 24
158.46.148.0/24 maxlen: 24
178.171.70.0/24 maxlen: 24
178.171.69.0/24 maxlen: 24
158.46.160.0/23 maxlen: 23
158.46.177.0/24 maxlen: 24
178.171.88.0/23 maxlen: 23
178.171.20.0/22 maxlen: 24
178.171.32.0/22 maxlen: 22
178.171.36.0/24 maxlen: 24
178.171.37.0/24 maxlen: 24
158.46.251.0/24 maxlen: 24
158.46.250.0/24 maxlen: 24
158.46.188.0/22 maxlen: 24
178.171.104.0/24 maxlen: 24
178.171.101.0/24 maxlen: 24
178.171.100.0/24 maxlen: 24
158.46.205.0/24 maxlen: 24
158.46.200.0/21 maxlen: 21
178.171.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:e4:80:d8:2e:bb:b6:2e:e4:10:fa:28:c2:82:51:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13
Validity
Not Before: Feb 16 11:03:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58eea28aff1d63a0badb8996e4dc66366e00f6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6d:f6:03:53:12:e1:d5:0f:58:f3:a9:62:9d:
c2:ed:af:83:75:d4:37:b8:7c:c8:9e:c1:5b:07:80:
61:9a:ae:fc:1e:8f:e4:d2:c7:a4:b4:45:33:fe:55:
07:fc:6d:9f:ab:a0:46:a4:79:0b:99:cf:fb:14:c2:
91:78:0a:9c:f2:14:7f:08:f0:23:3f:92:7d:e5:13:
07:22:9e:18:69:ab:2a:3b:a0:ab:3f:9c:cf:5d:e3:
d6:ac:d4:eb:dc:a6:4e:22:47:4f:95:4b:01:f6:34:
27:01:e6:57:ff:54:f6:d7:6d:67:de:38:eb:94:60:
c1:4e:d1:c5:dd:24:73:f5:7f:00:b3:ab:d7:77:bb:
32:01:ba:dc:31:8e:53:c1:4f:30:77:1c:cb:82:30:
1f:d2:d0:4f:7f:4d:82:5b:7a:6c:bf:ce:48:e9:17:
10:f2:64:6a:72:1e:1d:bb:08:8e:0f:dc:10:a1:3f:
46:b3:ef:c3:b6:51:f3:5c:5a:c7:a1:5e:78:26:c9:
6f:98:fc:0c:2c:35:3f:52:35:32:2c:d7:17:0c:e1:
19:be:da:aa:1a:8a:4c:eb:23:a8:7b:15:fa:de:23:
6a:0a:03:d1:d6:27:87:ea:2f:b1:e4:3b:e6:72:08:
4c:b1:37:b8:5b:dd:f5:4d:b1:78:fc:80:ef:2e:43:
9e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:A2:8A:FF:1D:63:A0:BA:DB:89:96:E4:DC:66:36:6E:00:F6:A0
X509v3 Authority Key Identifier:
keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/WO6iiv8dY6C624mW5NxmNm4A9qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.46.148.0/23
158.46.160.0/23
158.46.177.0/24
158.46.188.0/22
158.46.200.0/21
158.46.250.0/23
178.171.20.0/22
178.171.32.0-178.171.37.255
178.171.69.0-178.171.70.255
178.171.88.0/23
178.171.100.0/23
178.171.104.0/24
178.171.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:43:b6:f2:ec:6b:a0:71:62:03:67:67:7d:e6:6c:de:aa:7c:
31:7e:60:86:15:28:b9:f5:41:23:06:b4:16:3e:f0:ca:c1:c9:
e2:c7:9a:e5:93:72:0d:1d:72:90:e2:a8:08:3a:a0:64:d9:c1:
46:24:1a:b5:5b:0b:9d:29:ab:9f:7e:a4:a9:f9:4d:f8:16:bf:
5c:bb:e4:1f:57:c9:1a:12:b3:02:0d:a9:6c:d2:c1:6b:b6:43:
a4:e5:b6:74:d6:8a:57:c7:7f:34:0d:50:f7:b7:04:be:1f:d4:
47:57:12:ba:64:4c:92:58:47:d9:33:fb:6f:d3:1c:c7:6c:15:
0a:74:96:2b:91:87:93:fc:c5:20:7c:27:25:94:2d:ac:34:3a:
e9:4b:e5:e1:6a:8d:ef:56:35:c4:44:ab:9f:5e:fd:f4:7d:43:
27:36:64:ea:7b:10:24:62:85:a6:24:02:73:29:58:27:8e:76:
92:9b:c6:04:6b:9c:42:77:c5:b6:58:d9:ce:6b:99:2b:ff:26:
06:32:8c:34:cf:f5:1e:55:8a:39:83:ef:29:44:50:46:1d:35:
df:77:68:d3:dc:5a:51:a5:6d:30:dc:da:3a:b4:dc:6f:0d:9f:
80:09:04:be:b0:15:30:f9:7a:e3:e0:e5:ed:68:29:9e:9f:d8:
62:e2:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:22 2023 by rpki-client on console-fra.rpki-client.org