Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/Cwr0rn-1woC-mFO5D2SNMu91ExY.roa
File: Cwr0rn-1woC-mFO5D2SNMu91ExY.roa (raw, json)
Hash identifier: fcJ7ytIE/G9LAdOpFig4uLwRB6QYpUR1MIDUrdpZk2g=
Subject key identifier: 0B:0A:F4:AE:7F:B5:C2:80:BE:98:53:B9:0F:64:8D:32:EF:75:13:16
Certificate issuer: /CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Certificate serial: 01879327A4E1456BB6080A83BBADECFED0EE
Authority key identifier: 47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/Cwr0rn-1woC-mFO5D2SNMu91ExY.roa
Signing time: Tue 18 Apr 2023 06:57:41 +0000
ROA not before: Tue 18 Apr 2023 06:57:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212907
IP address blocks: 185.187.84.0/24 maxlen: 24
185.187.85.0/24 maxlen: 24
2a13:f480::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Apr 2023 08:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:93:27:a4:e1:45:6b:b6:08:0a:83:bb:ad:ec:fe:d0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=479762e88d8f67fad4aa059a1b8b46fa4cc7a893
Validity
Not Before: Apr 18 06:57:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0af4ae7fb5c280be9853b90f648d32ef751316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0f:34:e6:66:57:83:7d:d5:97:f2:8f:fd:48:
32:4c:e5:10:99:79:4e:13:51:db:16:70:91:fe:a2:
58:2b:54:4e:27:7b:77:34:e9:39:c7:b0:d5:92:c2:
57:ce:9f:2a:a3:4b:03:31:26:bc:5f:f5:1c:e5:85:
9d:8a:78:ae:a9:dd:75:0f:28:d4:02:70:2f:7b:fc:
80:16:82:af:0b:87:4c:3d:1a:e2:b0:1f:d3:2c:5a:
01:36:2e:65:7e:a9:f7:5d:da:54:89:12:06:a0:85:
5c:8b:71:f5:fa:a8:1e:b5:07:97:98:63:7f:38:80:
fa:75:01:bf:68:dc:e9:4e:dc:8a:5a:f5:c4:d4:e7:
dd:02:b9:4a:a3:b3:e1:13:90:41:ca:a5:76:8b:00:
08:53:1b:59:59:2f:8b:ad:87:44:0b:51:07:b0:57:
65:ca:ad:16:21:d1:24:55:4f:5f:15:79:fe:dc:ca:
2b:e8:1d:ae:8e:c3:5b:90:0e:47:45:58:3f:f8:cd:
0c:5c:e0:b9:4d:28:5a:a6:29:ef:9b:76:7f:49:0d:
80:39:a9:a6:ce:f8:89:69:13:f8:0c:0b:57:1b:61:
9e:5e:d0:c4:e5:c8:9f:89:4e:d4:de:5b:b0:fe:3a:
c4:06:04:aa:42:c4:38:3a:a9:7f:79:8c:ce:9a:3e:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0A:F4:AE:7F:B5:C2:80:BE:98:53:B9:0F:64:8D:32:EF:75:13:16
X509v3 Authority Key Identifier:
keyid:47:97:62:E8:8D:8F:67:FA:D4:AA:05:9A:1B:8B:46:FA:4C:C7:A8:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R5di6I2PZ_rUqgWaG4tG-kzHqJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/Cwr0rn-1woC-mFO5D2SNMu91ExY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/2c5af2-0937-4f40-88e0-1104841d374e/1/R5di6I2PZ_rUqgWaG4tG-kzHqJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.84.0/23
IPv6:
2a13:f480::/29
Signature Algorithm: sha256WithRSAEncryption
82:9f:a1:b8:07:05:66:08:ae:28:14:ad:25:1e:88:27:fb:bd:
ce:2e:62:c0:61:af:28:18:e4:86:c3:18:0d:40:bf:71:21:ca:
e9:fd:2a:59:79:64:83:b1:7a:13:04:57:63:3a:b6:d6:ff:8c:
1b:f2:bc:2f:03:b9:72:15:57:d3:40:ce:1b:cb:c1:12:ff:49:
d9:ab:d3:c9:f8:bc:71:26:7b:cb:43:ea:68:04:d8:8c:e0:cc:
16:2e:2a:c1:ea:7e:90:89:d8:0b:84:08:14:a9:94:f6:b2:e9:
f1:67:84:7b:8f:23:d2:fb:66:d5:2e:70:04:51:11:23:ec:1e:
18:c9:9a:46:02:7a:ae:42:0b:3b:30:bc:7f:fe:78:b7:02:58:
3e:4a:65:fd:d9:53:42:dc:ed:81:8e:7a:45:ea:01:d0:55:0f:
d8:4c:0d:96:0a:16:ff:af:cf:d9:a1:17:17:4a:8f:22:d3:ff:
52:0c:19:05:81:88:a0:15:af:9b:f2:74:07:a8:73:3e:6f:4f:
17:46:22:34:8a:97:e2:7c:0a:18:01:f7:b3:76:51:c1:f0:6c:
67:20:1d:f0:e9:c2:a9:c6:41:8b:c4:4c:53:c4:8e:20:40:25:
cd:29:85:5b:4d:88:e5:53:0a:c5:6c:72:3a:be:df:3a:df:b4:
76:af:ed:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:21 2024 by rpki-client on console-ams.rpki-client.org