Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/wO_2ov0lCVg5M0rdv3P88mcmlbo.roa
File: wO_2ov0lCVg5M0rdv3P88mcmlbo.roa (raw, json)
Hash identifier: WgOnyn8QOgBH6TITAX1KQyG5lCuaYlUoaIqsgp61SN0=
Subject key identifier: C0:EF:F6:A2:FD:25:09:58:39:33:4A:DD:BF:73:FC:F2:67:26:95:BA
Certificate issuer: /CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Certificate serial: 018996159DE8C4CE1EA753103FFF46716BE1
Authority key identifier: 2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/wO_2ov0lCVg5M0rdv3P88mcmlbo.roa
Signing time: Thu 27 Jul 2023 06:42:26 +0000
ROA not before: Thu 27 Jul 2023 06:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41714
IP address blocks: 185.163.148.0/23 maxlen: 24
185.163.148.0/22 maxlen: 24
93.157.80.0/21 maxlen: 24
185.225.172.0/22 maxlen: 24
2a06:e300::/29 maxlen: 36
Validation: Failed, certificate revoked on Thu 27 Jul 2023 06:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:15:9d:e8:c4:ce:1e:a7:53:10:3f:ff:46:71:6b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d86956ccd7e3abb4291dd54dbd8b4342bf957cc
Validity
Not Before: Jul 27 06:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0eff6a2fd25095839334addbf73fcf2672695ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:92:a1:99:1e:c9:cc:58:50:97:b9:c5:b4:1a:
10:b0:dc:18:42:17:1a:cf:ca:7a:7a:dd:ee:54:e4:
8a:d1:57:28:f2:54:fc:d3:dd:b1:bf:4f:fd:e9:78:
d6:26:e5:01:92:03:5f:04:4d:ad:71:ff:67:16:24:
46:b7:d4:ac:3c:86:6d:35:9d:91:c2:4a:8d:e8:95:
14:e1:8d:fe:a5:1a:75:3a:8f:a9:ec:b6:df:79:79:
c1:6e:7e:77:0a:ba:92:b0:43:f2:ed:d2:e2:3a:63:
c4:96:57:04:93:4e:91:8d:c0:9b:fe:e2:55:aa:6c:
47:2c:b9:5f:7c:c6:56:61:42:df:36:24:78:5e:a4:
fb:b1:95:0e:2e:6f:a6:10:10:f6:f2:f3:83:0b:a5:
5b:0d:35:1b:35:1d:5e:1a:c9:8e:10:43:b2:8c:66:
de:ed:79:f4:d6:13:1e:74:eb:e1:59:55:5f:f4:ce:
fd:9a:db:1e:ab:44:03:61:25:24:d3:d6:0a:da:b0:
93:5a:7d:ee:9a:d2:10:ac:1b:e7:46:78:09:55:77:
d4:d4:73:ce:a1:25:59:e5:7a:af:14:b0:5e:44:27:
95:41:d1:bb:1d:2d:85:9b:d2:38:10:b7:91:2e:d8:
2a:08:56:63:df:7c:d8:7b:b1:e7:7e:4f:22:bb:0a:
22:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:EF:F6:A2:FD:25:09:58:39:33:4A:DD:BF:73:FC:F2:67:26:95:BA
X509v3 Authority Key Identifier:
keyid:2D:86:95:6C:CD:7E:3A:BB:42:91:DD:54:DB:D8:B4:34:2B:F9:57:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LYaVbM1-OrtCkd1U29i0NCv5V8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/wO_2ov0lCVg5M0rdv3P88mcmlbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/064e35-8814-43f6-b48b-a26de313b34d/1/LYaVbM1-OrtCkd1U29i0NCv5V8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.80.0/21
185.163.148.0/22
185.225.172.0/22
IPv6:
2a06:e300::/29
Signature Algorithm: sha256WithRSAEncryption
44:c7:ec:9e:10:e8:67:ce:08:35:f5:81:41:1f:e1:89:c2:03:
04:51:2c:8f:7c:a1:50:d6:b0:81:28:58:71:3e:96:51:33:2b:
c2:06:8d:ac:ba:08:87:75:05:b1:b7:82:a3:f9:2c:6f:09:93:
2f:60:56:77:53:fa:4b:bc:fc:51:ad:6b:ea:8c:1e:bb:95:ab:
e8:f3:ae:0a:f6:d3:ee:ac:a7:fc:ff:fe:bc:fe:0c:84:e9:14:
af:43:dc:0d:12:8e:72:bb:d9:cd:a9:ca:76:20:ab:47:5e:ea:
a0:a2:c4:3c:32:fc:5b:a7:a8:20:8a:b7:f7:e1:65:c9:8d:7c:
45:49:8d:7c:d3:15:0c:ce:72:58:40:92:91:25:3e:12:a5:01:
87:d5:ca:cf:62:3a:f3:d2:bf:6e:08:4a:3c:eb:18:11:20:a2:
98:d9:d1:b2:cc:bf:89:c9:06:7e:f9:70:56:f8:34:c8:31:d2:
6b:0d:00:97:87:27:e5:61:c3:f3:43:f2:55:a3:4c:08:ff:74:
19:ce:cd:26:37:74:f2:95:b6:df:44:4b:01:af:8f:2e:67:56:
e3:2c:a9:d7:b1:55:16:d2:8f:98:9c:58:d3:ec:5e:92:73:ac:
c2:05:81:a2:18:25:94:f0:74:65:d8:bb:c0:22:ed:2f:1e:e0:
19:de:53:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:00 2024 by rpki-client on console-fra.rpki-client.org