Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/wyPMQeaHS3DffehGHuLs7vwZw8M.roa
File: wyPMQeaHS3DffehGHuLs7vwZw8M.roa (raw, json)
Hash identifier: KDoieDHhzxFN11vCoV7Bft77ns95L75+p4E6g8CCfbo=
Subject key identifier: C3:23:CC:41:E6:87:4B:70:DF:7D:E8:46:1E:E2:EC:EE:FC:19:C3:C3
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 01867FD9FB08AAF1C98C350F3662D1067BA9
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/wyPMQeaHS3DffehGHuLs7vwZw8M.roa
Signing time: Thu 23 Feb 2023 19:57:17 +0000
ROA not before: Thu 23 Feb 2023 19:57:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205449
IP address blocks: 185.218.88.0/22 maxlen: 22
2a0c:f400:53::/48 maxlen: 48
2a0c:f400::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7f:d9:fb:08:aa:f1:c9:8c:35:0f:36:62:d1:06:7b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Feb 23 19:57:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c323cc41e6874b70df7de8461ee2eceefc19c3c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:4a:15:87:5a:3d:dc:88:84:0a:52:02:b9:
c6:5a:2c:79:67:d8:c0:46:04:6a:92:92:8a:00:4d:
d6:9d:52:5b:63:38:ba:6d:c8:c6:20:df:26:a0:6a:
94:5b:49:24:9e:dd:41:a0:3d:1c:d1:e1:db:e5:0e:
a4:db:13:cb:8b:af:66:52:9f:ac:0a:87:65:b7:05:
99:22:71:c5:b7:46:6a:39:79:ea:81:43:78:6b:11:
d4:fe:6c:27:77:0c:d6:bb:68:a7:04:cb:30:f2:5b:
6c:4a:ee:08:48:08:21:ca:e9:a4:4d:94:16:8b:3a:
cb:29:ad:fc:07:8a:1e:34:b6:10:a9:a7:9e:c2:6d:
9d:0d:89:aa:b9:2b:64:64:59:8b:61:ce:8e:14:7e:
60:36:09:9c:d3:7b:b2:30:df:2c:30:77:17:30:2a:
bd:73:70:c6:a0:ba:f5:e6:8b:8f:c7:4d:ea:6b:4d:
67:c7:9c:ec:6d:01:25:5e:6b:32:ec:60:75:17:d6:
61:98:6c:fe:fe:26:e4:e6:64:91:aa:a3:e3:60:43:
18:86:ab:3d:d9:68:bf:5c:b0:a8:af:45:cb:9e:53:
8e:db:b6:38:42:c7:53:d8:7c:78:63:95:25:99:6b:
1b:99:be:df:07:e1:a6:12:87:ea:d7:aa:0a:27:08:
be:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:CC:41:E6:87:4B:70:DF:7D:E8:46:1E:E2:EC:EE:FC:19:C3:C3
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/wyPMQeaHS3DffehGHuLs7vwZw8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.88.0/22
IPv6:
2a0c:f400::/29
Signature Algorithm: sha256WithRSAEncryption
96:81:e6:4b:e1:af:d8:d4:9e:c6:e4:4a:78:cd:2c:3c:e1:b9:
79:f9:e5:a7:50:6e:2c:5e:dd:29:90:0c:f0:f4:54:ca:db:a4:
c3:cb:96:ca:b3:2e:ae:f1:99:23:b5:24:60:8b:2d:13:c6:ca:
b5:da:8d:a4:78:5f:89:d1:29:09:25:3c:c9:b9:09:85:9b:58:
b1:a2:08:79:57:0c:d8:d8:43:f5:a5:f3:4a:c3:8b:7b:8c:ee:
cb:ca:c1:97:8a:45:32:fd:39:6c:d0:bf:a1:5c:a2:bc:10:45:
7d:e1:fd:e5:80:ec:c4:83:1f:87:67:96:9d:07:7e:f0:76:0c:
78:41:c8:a0:af:25:15:f3:c6:83:d6:7f:05:04:3e:9c:44:22:
11:fa:ea:72:b9:d4:43:e0:26:12:84:e2:f2:20:e6:dd:19:ee:
ff:06:9d:9e:d9:81:63:c4:39:a4:df:af:eb:0d:31:85:cd:63:
32:72:45:ac:4e:cf:b8:b9:49:fc:34:e0:59:0f:aa:0d:a8:66:
ab:6f:8d:e5:88:e0:d3:6b:2c:68:ad:4a:86:06:e2:87:04:c9:
3d:20:8f:29:1c:5f:18:eb:5e:4f:58:64:6c:41:46:15:e0:6c:
a8:da:8d:75:4e:5b:fc:c7:b1:e8:07:f9:b7:23:d2:55:97:8a:
28:dd:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:50 2024 by rpki-client on console-fra.rpki-client.org