Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CwM-X3pipZ6DvYnCfWhT5TXoDLE.roa
File: CwM-X3pipZ6DvYnCfWhT5TXoDLE.roa (raw, json)
Hash identifier: MORLR9GvCxatTD7nsViW9tIWwtlWir9LIBSp3L87YY4=
Subject key identifier: 0B:03:3E:5F:7A:62:A5:9E:83:BD:89:C2:7D:68:53:E5:35:E8:0C:B1
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D2AAB3F10392E1289C15750DD6F3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CwM-X3pipZ6DvYnCfWhT5TXoDLE.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204629
IP address blocks: 185.244.228.0/22 maxlen: 22
181.41.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d2:aa:b3:f1:03:92:e1:28:9c:15:75:0d:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b033e5f7a62a59e83bd89c27d6853e535e80cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:49:0c:15:bd:df:26:b1:52:b4:43:7e:0d:70:
42:13:01:a1:d4:8d:f3:a5:9d:17:b9:0b:50:44:df:
7a:17:ce:9b:f8:b7:24:42:64:2c:b4:f5:2a:1b:01:
5f:0c:bd:dc:9a:4d:4f:13:d7:93:c5:91:30:0d:00:
77:72:80:5a:e1:e2:0c:a6:8c:6b:59:dd:12:aa:15:
e5:de:38:fa:65:3b:6f:c4:94:a2:e4:e1:8d:ef:43:
e7:0f:f3:06:a5:ef:eb:dc:c8:a8:9d:41:f0:1b:a2:
5f:71:48:68:76:7f:1e:88:08:bb:92:9f:fc:01:c6:
23:db:bf:94:0f:2b:78:09:9b:82:42:58:5f:50:6a:
5d:da:56:96:b2:85:8e:d9:7a:e6:7f:9b:80:b8:bd:
44:e3:ad:91:2d:e6:8a:cf:1f:4d:4c:f8:1b:bf:c0:
47:3a:06:88:02:5b:f0:01:2f:a2:7f:7b:d8:e4:d0:
51:1f:50:06:d5:ea:ea:3c:20:a5:d8:05:cf:01:6f:
e2:02:76:58:28:f9:0f:99:03:a9:3b:75:1d:06:fc:
72:30:df:6a:3c:c1:51:83:ab:49:47:c3:e0:ef:a0:
ca:03:01:72:23:ba:71:59:77:cd:d8:00:a3:09:0e:
f1:6f:71:b5:ef:53:25:1a:8d:a7:2b:8f:39:8f:c4:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:03:3E:5F:7A:62:A5:9E:83:BD:89:C2:7D:68:53:E5:35:E8:0C:B1
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/CwM-X3pipZ6DvYnCfWhT5TXoDLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.41.155.0/24
185.244.228.0/22
Signature Algorithm: sha256WithRSAEncryption
42:3b:8c:68:3c:c3:62:d7:e5:58:52:56:3c:5f:28:04:bb:74:
35:29:2d:63:8e:7b:2e:b7:f6:ff:13:6a:7f:85:b0:e7:d0:59:
cc:dc:8b:f1:fe:a2:9d:67:7a:c2:c1:7f:5e:7d:99:34:95:e5:
54:00:d5:01:ea:f6:e9:37:b5:79:b5:ad:46:d2:3d:69:0e:69:
8a:d4:0c:b0:89:a0:99:35:85:d5:0b:91:e2:34:75:94:9e:6f:
91:8a:00:18:da:6c:68:d6:34:78:12:2a:1c:c7:05:6c:95:80:
1a:8f:fe:5f:e2:c6:89:e0:58:53:67:f7:6e:5f:f0:3e:1f:34:
f4:35:1c:6a:2a:1a:18:15:a3:b1:49:c9:72:36:a6:12:fc:40:
eb:c5:ab:37:d3:94:dc:f1:98:2b:16:d1:7d:d4:14:61:4f:cf:
68:78:bb:af:0b:1e:e2:7e:ba:64:ee:23:3c:0f:59:82:dc:a8:
6d:0d:61:71:0a:0b:25:20:50:e3:38:ab:9f:5f:11:0e:7c:1c:
77:54:f2:d6:69:bb:12:b5:8c:28:ce:83:9b:36:87:84:32:74:
21:48:d8:05:69:29:36:2d:dc:59:5d:21:03:bb:96:a7:3d:44:
84:2f:7c:04:39:db:7e:91:29:1c:ee:2a:0f:0b:7a:ff:9c:09:
70:b5:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:49 2023 by rpki-client on console-fra.rpki-client.org