Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Wqejp0LfBZI5Wd9oiWcjfEfS6jE.roa
File: Wqejp0LfBZI5Wd9oiWcjfEfS6jE.roa (raw, json)
Hash identifier: MydB3mNeMcHqmLvUfb08D3s1G0i0oBTCLUebaTgZOeI=
Subject key identifier: 5A:A7:A3:A7:42:DF:05:92:39:59:DF:68:89:67:23:7C:47:D2:EA:31
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D65C44B861AA98D4C61CEE76836D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Wqejp0LfBZI5Wd9oiWcjfEfS6jE.roa
Signing time: Sun 01 Jan 2023 19:35:20 +0000
ROA not before: Sun 01 Jan 2023 19:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206077
IP address blocks: 185.226.192.0/23 maxlen: 24
217.26.188.0/24 maxlen: 24
217.26.188.0/22 maxlen: 22
217.26.188.0/23 maxlen: 23
217.26.189.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d6:5c:44:b8:61:aa:98:d4:c6:1c:ee:76:83:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aa7a3a742df05923959df688967237c47d2ea31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:1d:2d:7a:60:bb:6e:28:9f:ff:71:a9:9a:
8e:c4:0f:66:6c:05:f9:93:a7:d3:3c:56:74:f7:e1:
23:db:e9:87:12:19:eb:df:87:6d:b7:aa:26:27:3b:
a9:37:23:02:e2:80:8b:d1:cc:d4:73:0e:8e:a5:38:
04:45:66:89:12:09:27:c0:cd:08:72:57:0d:e7:1e:
be:3a:6d:74:a0:0a:89:cd:31:57:cc:16:93:bb:66:
6e:a1:10:48:8c:2d:e1:de:bc:d6:4c:33:5f:f4:96:
d8:94:2f:00:63:79:5a:95:b9:44:ec:6d:8e:f9:91:
0a:00:55:ba:d2:75:04:63:05:e1:0b:d4:58:de:61:
bc:e6:cb:54:19:bb:85:cb:14:19:62:5d:ef:2b:9f:
cd:00:03:d8:43:bf:b4:df:6b:25:97:a2:08:3a:b2:
06:38:95:59:ae:46:e1:78:e9:d1:c8:02:9e:a1:fa:
dc:31:00:1f:36:c6:08:f5:0d:b1:6b:7a:5b:95:4a:
7a:c8:7e:79:8d:85:13:3d:ec:d5:3d:63:d6:c9:0b:
08:b3:03:f2:fa:e3:37:cf:9b:f1:84:ff:1f:03:db:
a4:6f:ac:a5:12:4b:e3:05:69:2c:3f:93:b0:20:a4:
51:cc:1d:ef:2d:09:ac:2c:be:ee:33:00:3b:12:04:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A7:A3:A7:42:DF:05:92:39:59:DF:68:89:67:23:7C:47:D2:EA:31
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Wqejp0LfBZI5Wd9oiWcjfEfS6jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.192.0/23
217.26.188.0/22
Signature Algorithm: sha256WithRSAEncryption
47:c5:24:00:50:ab:d6:48:b2:0e:df:b2:82:c7:18:c0:4c:ef:
8f:45:03:09:99:d4:bf:26:56:e7:3b:23:c5:af:94:89:00:f1:
88:52:6b:d0:3c:cf:91:ca:d4:99:ca:1f:9b:a0:26:67:a4:a4:
b4:17:36:9d:02:a5:44:36:d8:18:40:ba:cc:e4:f7:76:a3:ea:
24:6c:ed:20:2d:25:38:1e:b4:ca:6f:12:4e:ec:5c:8c:3f:96:
3d:5c:12:3f:10:d6:42:92:90:0b:d2:f5:57:f3:db:5b:ab:30:
8a:8d:b3:69:2c:37:f2:a0:1f:ca:e2:06:f9:95:ba:2c:19:61:
43:61:98:08:62:0e:df:bc:85:3f:28:82:c3:4b:9e:dc:96:1d:
ac:57:c9:c9:f6:b6:a8:de:1c:9d:3b:57:26:7f:d2:22:ac:93:
3f:18:1e:7e:28:1d:25:b2:73:a9:8d:6b:0f:6f:e1:58:f3:ff:
25:39:ac:95:3c:77:66:5e:5b:a8:07:4b:7d:72:63:23:51:38:
f1:33:dc:f6:3d:86:c1:c5:3a:64:a2:18:50:c4:e9:53:be:99:
ad:3e:b8:a6:3e:bc:13:00:6c:d6:82:9e:17:ad:ef:03:62:ce:
e7:c3:62:84:1f:57:ac:7c:47:9b:d8:7e:7d:84:61:93:a7:11:
7a:bc:1a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:35 2023 by rpki-client on console-ams.rpki-client.org