Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/w2m79u3EsjEJMilRwrOZCjCXHfE.roa
File: w2m79u3EsjEJMilRwrOZCjCXHfE.roa (raw, json)
Hash identifier: pzIOJGNn+hAIPQ+6rZRld7pQShJWEjj7O+ikTwxtJmk=
Subject key identifier: C3:69:BB:F6:ED:C4:B2:31:09:32:29:51:C2:B3:99:0A:30:97:1D:F1
Certificate issuer: /CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Certificate serial: 01856D81CFDB39C4C1FFD1CED915F29D6C9D
Authority key identifier: 67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/w2m79u3EsjEJMilRwrOZCjCXHfE.roa
Signing time: Sun 01 Jan 2023 13:25:01 +0000
ROA not before: Sun 01 Jan 2023 13:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61044
IP address blocks: 185.40.92.0/22 maxlen: 22
37.148.192.0/21 maxlen: 21
37.148.196.0/24 maxlen: 24
2a03:10c0::/30 maxlen: 30
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:cf:db:39:c4:c1:ff:d1:ce:d9:15:f2:9d:6c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67bf353715a34dda28605fdcf7b7ae806d31159c
Validity
Not Before: Jan 1 13:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c369bbf6edc4b23109322951c2b3990a30971df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0a:b1:3b:1b:c2:1f:df:f3:a5:59:a5:93:6d:
b7:1d:e8:1b:f4:b1:de:2f:59:50:43:fe:ec:ad:21:
17:7c:b1:fc:7d:b8:fb:60:39:c4:62:c4:80:db:fe:
ce:85:dc:b2:44:68:1f:6b:7e:dd:b7:d8:e8:cf:4f:
0a:97:9d:d9:68:a6:84:d9:b9:a8:de:68:dd:fc:84:
ed:5d:bc:dd:a8:f6:2d:9b:20:4b:98:3f:98:3f:f9:
3a:07:38:dd:f5:b2:bd:d0:b7:5c:1a:9f:43:02:cd:
9e:a9:ea:5a:9b:e3:6a:79:af:84:bf:e0:55:6d:43:
42:c4:1e:25:37:82:99:50:da:12:9a:de:c2:db:d3:
c4:4d:2e:de:a3:16:c9:aa:ef:dd:68:40:37:98:8f:
70:61:0a:97:90:4b:af:bf:0a:1c:bd:b2:46:6e:b3:
58:2c:45:d4:f6:25:95:4c:94:e1:c3:c5:d4:ec:dc:
8f:af:5a:14:f6:c9:ab:69:3e:c3:1d:90:10:c9:31:
8f:41:50:d3:fb:4f:87:26:1b:a0:b8:49:53:6e:a6:
b9:12:61:f8:12:42:6d:c6:79:f2:2a:8e:0f:21:4a:
84:7b:71:0d:c4:c2:1e:03:c5:c9:ab:f1:fd:70:f5:
45:9c:6b:c3:b1:62:30:1d:c2:8e:8a:56:f8:c1:78:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:69:BB:F6:ED:C4:B2:31:09:32:29:51:C2:B3:99:0A:30:97:1D:F1
X509v3 Authority Key Identifier:
keyid:67:BF:35:37:15:A3:4D:DA:28:60:5F:DC:F7:B7:AE:80:6D:31:15:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z781NxWjTdooYF_c97eugG0xFZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/w2m79u3EsjEJMilRwrOZCjCXHfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/701933-8450-49ca-a3ef-69d8092b54e1/1/Z781NxWjTdooYF_c97eugG0xFZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.192.0/21
185.40.92.0/22
IPv6:
2a03:10c0::/30
Signature Algorithm: sha256WithRSAEncryption
59:b0:17:46:f5:e7:13:7b:d4:9f:b1:9b:a2:34:e5:0b:1c:3f:
71:0d:75:74:f2:63:b4:82:07:d3:66:30:9e:d6:87:14:2e:01:
e1:f6:21:f8:21:ff:78:99:b8:8f:71:d2:1d:6a:25:44:bd:1f:
bd:36:49:d8:20:7f:d0:d8:1c:48:5f:8b:71:5e:9e:e8:64:54:
30:11:25:41:d9:fe:e2:cd:e8:a5:5d:35:38:ca:d3:6a:8c:33:
7b:13:d9:3a:f4:5d:d7:d2:3a:95:52:4d:b0:3e:6a:8a:06:03:
96:9d:a6:59:87:2e:03:32:a1:53:a9:db:93:61:ac:b8:a2:b6:
13:09:0f:6a:18:15:d9:9d:57:b1:ed:c9:eb:24:a1:bc:e3:be:
2d:14:99:a9:95:05:54:09:1e:4f:5c:8b:45:da:86:1a:4f:e7:
06:d2:46:e0:e5:53:0d:cb:0d:8b:d2:16:2d:56:3a:92:84:c2:
79:19:37:f8:55:93:a2:55:46:e5:91:3e:ef:b9:ba:ec:c6:49:
b8:97:26:1f:46:28:db:ea:29:4e:cf:8d:c1:33:40:1d:84:76:
cf:c4:b0:00:f7:03:67:72:8e:1e:bc:af:56:96:eb:e7:ba:f5:
85:fb:a6:07:de:d1:f1:56:2c:32:5a:5e:a4:b9:62:f6:fa:c7:
4b:2d:f0:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:12 2024 by rpki-client on console-ams.rpki-client.org