Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/WuqhfwVejCD42HrwqtdrDS-n9_g.roa
File: WuqhfwVejCD42HrwqtdrDS-n9_g.roa (raw, json)
Hash identifier: WfZJkg7wJ7NLYCwhTtPle0/xPZCiJP9TeRtcjPQFFk4=
Subject key identifier: 5A:EA:A1:7F:05:5E:8C:20:F8:D8:7A:F0:AA:D7:6B:0D:2F:A7:F7:F8
Certificate issuer: /CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Certificate serial: 0187B7E048784C6202C47360CB08B74FC0BE
Authority key identifier: B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/WuqhfwVejCD42HrwqtdrDS-n9_g.roa
Signing time: Tue 25 Apr 2023 10:05:41 +0000
ROA not before: Tue 25 Apr 2023 10:05:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34636
IP address blocks: 185.237.11.0/24 maxlen: 24
185.237.9.0/24 maxlen: 24
185.237.10.0/24 maxlen: 24
185.237.8.0/24 maxlen: 24
185.237.8.0/22 maxlen: 22
185.189.122.0/23 maxlen: 23
185.189.122.0/24 maxlen: 24
185.189.123.0/24 maxlen: 24
185.189.120.0/24 maxlen: 24
185.189.120.0/23 maxlen: 23
185.189.120.0/22 maxlen: 22
185.189.121.0/24 maxlen: 24
185.132.80.0/24 maxlen: 24
185.132.80.0/23 maxlen: 23
185.132.80.0/22 maxlen: 22
185.132.82.0/23 maxlen: 23
185.132.83.0/24 maxlen: 24
185.67.102.0/24 maxlen: 24
185.67.103.0/24 maxlen: 24
185.67.100.0/22 maxlen: 22
185.67.100.0/24 maxlen: 24
185.67.101.0/24 maxlen: 24
185.233.14.0/24 maxlen: 24
185.233.15.0/24 maxlen: 24
185.233.12.0/22 maxlen: 22
185.233.12.0/24 maxlen: 24
185.233.13.0/24 maxlen: 24
88.135.41.0/24 maxlen: 24
88.135.42.0/23 maxlen: 23
88.135.42.0/24 maxlen: 24
88.135.40.0/22 maxlen: 22
88.135.40.0/24 maxlen: 24
88.135.40.0/23 maxlen: 23
88.135.43.0/24 maxlen: 24
88.135.44.0/24 maxlen: 24
88.135.47.0/24 maxlen: 24
2a04:f080::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:e0:48:78:4c:62:02:c4:73:60:cb:08:b7:4f:c0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d14118dbd227298daa80c7acab11eea6d63e21
Validity
Not Before: Apr 25 10:05:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aeaa17f055e8c20f8d87af0aad76b0d2fa7f7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9c:46:a5:07:aa:7d:71:f2:20:06:e4:d8:56:
36:81:e7:22:7c:50:b8:b3:99:14:80:a7:cb:f2:4a:
ec:96:88:af:7f:2a:35:36:53:3e:b8:26:c8:57:1c:
0c:06:69:d0:39:38:52:61:b2:9c:b0:00:f8:9f:ce:
db:a3:69:6d:ff:34:a6:d7:91:66:a7:46:6f:0e:15:
cf:43:16:9e:24:da:c1:bf:c1:c4:ec:ee:89:71:e7:
15:13:59:0e:27:e5:21:c7:65:39:80:af:46:05:1b:
88:6a:87:53:ae:0d:ff:29:20:ab:da:f4:44:9c:32:
11:a7:3c:97:39:31:65:09:0f:f1:06:47:f8:4b:c6:
5e:78:8b:52:83:62:ad:db:48:81:51:70:18:9c:2f:
af:d8:78:60:35:0d:35:c6:55:19:7d:b6:bb:8b:1a:
2b:49:a2:2a:a6:f2:c0:b5:a9:a5:2b:b3:49:96:38:
bd:88:d8:91:3a:e3:2a:13:a8:1c:31:19:d4:fd:2b:
5c:17:d8:6c:45:03:46:fd:b8:bb:0c:72:50:4e:5f:
12:d0:e1:c9:55:0b:18:b0:25:6c:bb:9f:0b:5f:21:
08:39:f0:f0:25:b4:2c:58:59:ab:5f:b8:b4:3d:97:
0e:d7:24:57:67:c2:71:e2:73:e6:5a:d5:4b:7b:6c:
25:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:A1:7F:05:5E:8C:20:F8:D8:7A:F0:AA:D7:6B:0D:2F:A7:F7:F8
X509v3 Authority Key Identifier:
keyid:B6:D1:41:18:DB:D2:27:29:8D:AA:80:C7:AC:AB:11:EE:A6:D6:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttFBGNvSJymNqoDHrKsR7qbWPiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/WuqhfwVejCD42HrwqtdrDS-n9_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/ed51d7-64fd-4c73-9e8c-0e37e11d0ec3/1/ttFBGNvSJymNqoDHrKsR7qbWPiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.40.0-88.135.44.255
88.135.47.0/24
185.67.100.0/22
185.132.80.0/22
185.189.120.0/22
185.233.12.0/22
185.237.8.0/22
IPv6:
2a04:f080::/29
Signature Algorithm: sha256WithRSAEncryption
1a:da:c4:46:e1:79:43:47:42:be:ee:b0:b6:59:c5:d3:77:e7:
81:4d:47:e7:3a:e6:3a:3d:c7:25:ba:7c:d2:b5:4a:c1:40:51:
83:a4:58:db:db:ee:50:5c:9d:5f:2f:bc:fb:6f:3c:9c:a1:5f:
07:48:62:73:68:72:14:94:3b:cb:f0:c7:f8:fa:cf:f6:fe:35:
e5:d6:5d:8e:9e:e1:54:b9:b9:b1:72:97:06:ec:d0:cd:4d:f8:
9f:ce:a2:5d:f8:d9:b5:16:95:9d:f6:72:41:6b:ff:9c:e7:d5:
9a:63:88:93:a4:bc:bf:e6:a5:01:0c:ff:a3:cb:4d:8b:42:93:
ea:bb:1e:2e:57:41:d0:70:5b:49:ea:29:a6:77:f0:1c:ee:bf:
35:00:a7:a2:7a:c8:0f:6e:e3:ad:f4:e4:0b:9d:ee:0c:6f:d0:
86:35:2b:2c:ac:1b:0c:c2:0d:c5:84:b8:9b:24:3c:c8:88:02:
99:36:ea:c7:06:f9:91:97:bd:d2:36:90:a6:83:11:a3:aa:dd:
56:19:1b:40:d0:6f:ac:7f:bb:79:34:33:fa:3a:82:fe:f7:a9:
60:b1:5e:2f:a8:42:cf:b7:c7:87:ea:d0:36:9d:61:bd:5f:8e:
74:5e:39:36:4c:c9:45:9d:49:bd:84:cd:0e:2d:53:ed:97:d3:
57:ec:98:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:20 2023 by rpki-client on console-ams.rpki-client.org