Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WpvvWTZSXsL_JWM7r6ZzUiu7ZUY.roa
File: WpvvWTZSXsL_JWM7r6ZzUiu7ZUY.roa (raw, json)
Hash identifier: kuXvh43j2YWa6iN3u+x9itilHw8IKJ2qxPg7/DVh8Cw=
Subject key identifier: 5A:9B:EF:59:36:52:5E:C2:FF:25:63:3B:AF:A6:73:52:2B:BB:65:46
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01887B41D737F53C6F3FDFAAD45E164EF8E7
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WpvvWTZSXsL_JWM7r6ZzUiu7ZUY.roa
Signing time: Fri 02 Jun 2023 08:38:12 +0000
ROA not before: Fri 02 Jun 2023 08:38:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203068
IP address blocks: 185.241.120.0/23 maxlen: 23
185.244.232.0/23 maxlen: 23
185.71.30.0/24 maxlen: 24
185.242.173.0/24 maxlen: 24
185.242.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7b:41:d7:37:f5:3c:6f:3f:df:aa:d4:5e:16:4e:f8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 2 08:38:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9bef5936525ec2ff25633bafa673522bbb6546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:13:ad:f7:58:89:b6:c1:f6:6e:90:89:e1:
f6:70:c3:a4:75:50:b0:24:d6:c5:02:0b:a4:ed:c8:
68:a7:66:d3:10:b4:39:55:c4:24:e5:c2:ed:81:00:
bc:53:d5:22:85:a3:c4:1a:52:a8:7e:35:be:af:e1:
ec:87:84:4d:32:3e:ff:2d:a0:79:16:4e:20:5c:52:
94:80:63:52:7a:ea:08:78:d2:77:46:53:51:fe:59:
6a:71:7b:ef:e8:01:ec:c0:1e:55:df:55:67:cc:89:
c0:1f:a5:27:4d:4d:8e:d0:f4:29:5e:f0:ab:d8:8e:
de:10:e7:55:70:df:d0:94:bf:fb:39:4b:f4:eb:56:
da:44:a7:6f:fc:a0:1d:6f:d9:84:03:c5:6e:d5:4e:
2f:88:51:70:ff:eb:21:3a:78:20:ec:34:1a:cd:ea:
f5:df:27:56:ef:ae:3d:05:83:86:db:77:3b:bb:79:
3b:eb:2f:72:9a:88:5c:37:25:d9:94:33:b6:90:31:
6d:11:89:77:ec:69:ff:45:7f:db:29:8f:12:d0:52:
59:1d:35:48:13:62:4c:d8:1d:08:8d:0f:f8:0b:95:
e8:e5:d5:44:8b:09:76:34:e5:70:bb:ef:f2:02:e2:
d5:97:1b:67:4c:8e:a5:a1:a0:e9:f4:52:59:73:d2:
18:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9B:EF:59:36:52:5E:C2:FF:25:63:3B:AF:A6:73:52:2B:BB:65:46
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WpvvWTZSXsL_JWM7r6ZzUiu7ZUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.30.0/24
185.241.120.0/23
185.242.173.0-185.242.174.255
185.244.232.0/23
Signature Algorithm: sha256WithRSAEncryption
90:8d:07:22:49:4c:ab:86:c9:b0:ac:86:5a:fd:26:a5:78:f5:
8d:9b:a1:ab:1e:19:cd:1e:d0:04:25:a7:92:b9:6a:23:f4:4b:
14:a8:e6:8d:8a:95:1c:a7:d7:2a:d4:bf:15:f7:b6:0e:f0:82:
ae:ab:7e:b5:67:b8:83:a2:89:a4:3e:b1:87:0c:42:13:b4:2b:
28:e4:e0:15:a5:7a:30:d8:64:c6:8c:ec:60:9c:f7:53:4e:8d:
9e:3b:0f:e8:40:ae:0f:93:4c:89:a1:5f:49:ec:6d:23:df:5c:
5c:63:92:c1:c0:44:84:b3:34:67:d7:37:df:fe:da:c4:aa:71:
4a:52:91:99:60:21:5b:57:12:ed:39:3b:dd:4a:aa:74:65:d5:
a2:c4:5a:0c:bd:72:fa:7c:00:a8:45:18:72:7d:96:f5:ba:ab:
2d:32:93:a9:a4:55:fe:d8:de:88:7c:df:bc:f4:c7:6e:91:e0:
f5:1b:78:cb:2d:c2:96:97:45:33:cc:9a:c3:dc:8d:b6:9c:0c:
a6:7c:bd:b9:64:2b:b6:ed:40:ed:33:d2:f1:4b:66:75:e5:43:
0c:e1:04:7c:1c:26:af:72:74:01:c0:77:38:e8:19:1d:94:b2:
f2:00:ce:dd:2d:dc:e0:d7:d9:15:c4:2a:57:99:99:84:79:b5:
f6:3e:b5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:08 2024 by rpki-client on console-ams.rpki-client.org