Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wh2hLTqGe2-rR3lXY-87XtxZUsE.roa
File: wh2hLTqGe2-rR3lXY-87XtxZUsE.roa (raw, json)
Hash identifier: sl+g5GvDJl6g/QSwm+cvVYOAg+4NOreITU1AAW1THS4=
Subject key identifier: C2:1D:A1:2D:3A:86:7B:6F:AB:47:79:57:63:EF:3B:5E:DC:59:52:C1
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01857246C709385B91B74BB8519E25713219
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wh2hLTqGe2-rR3lXY-87XtxZUsE.roa
Signing time: Mon 02 Jan 2023 11:38:39 +0000
ROA not before: Mon 02 Jan 2023 11:38:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43151
IP address blocks: 185.122.140.0/24 maxlen: 24
193.93.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:c7:09:38:5b:91:b7:4b:b8:51:9e:25:71:32:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Jan 2 11:38:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c21da12d3a867b6fab47795763ef3b5edc5952c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:14:57:1a:98:6c:94:5e:1c:80:15:a8:14:
26:9e:a5:e9:1f:39:69:88:b7:83:e3:2a:18:87:6f:
6f:62:e5:a6:d6:aa:f6:be:e0:71:b1:3f:ae:32:32:
9a:01:0f:05:92:f1:55:a2:68:59:30:09:3c:18:c0:
7f:59:32:fd:d1:c4:16:23:f9:f2:fa:f8:21:ff:f9:
b7:fb:91:04:20:58:3d:ee:2e:41:9d:3f:32:e0:23:
ee:75:88:ab:75:52:d7:08:cf:d4:a0:74:a2:d3:6f:
36:ab:ef:b2:ac:06:95:f1:57:a0:c4:b3:eb:a3:6e:
c1:b9:a2:58:d9:b6:6a:a0:02:3a:ce:d5:ee:81:69:
76:2f:a6:6d:3b:0b:dd:42:6b:d3:e8:3c:87:e6:8f:
15:27:f0:93:57:b0:ed:0d:e6:ed:bc:45:c1:38:94:
f8:82:64:c4:35:21:75:ba:8b:07:6f:54:0a:15:2f:
5e:e8:ee:9f:31:9f:e6:68:85:67:85:40:32:6e:2e:
e3:54:cc:f6:ed:23:6b:d3:d3:ad:ac:b5:b3:4f:11:
cd:c5:74:6c:7e:58:76:9d:54:5d:12:06:d4:d8:3e:
29:21:44:ba:6a:92:a6:aa:b1:fa:ed:06:c3:d9:d9:
06:e8:b8:36:34:d5:17:4a:33:9e:5c:b5:d8:ee:a2:
3f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:A1:2D:3A:86:7B:6F:AB:47:79:57:63:EF:3B:5E:DC:59:52:C1
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/wh2hLTqGe2-rR3lXY-87XtxZUsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.140.0/24
193.93.63.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ad:45:29:fb:8a:c1:28:0b:db:45:35:cf:74:ca:fc:a2:c4:
e4:29:a7:32:36:ce:31:de:03:e0:9a:f0:c4:f5:80:7a:6c:a0:
4a:a3:71:4d:9c:89:46:10:76:fc:5f:3d:f1:8d:83:b5:4e:69:
05:07:98:ff:07:a1:43:62:c9:4f:2f:c1:aa:65:81:d9:a3:74:
6c:be:30:02:36:c9:60:19:c5:20:91:6b:12:36:a6:c5:c7:46:
ba:e6:df:dd:47:5d:95:57:96:4e:63:4e:c9:9e:e7:c4:c3:59:
f8:8e:d9:5a:3a:2f:97:d1:8b:36:7e:55:5b:5a:6e:9e:41:a6:
38:1e:bb:aa:81:32:06:ae:c8:8e:b4:82:d9:64:da:27:d4:02:
a6:72:a1:b7:8c:00:9a:c2:b1:69:29:34:66:1a:3d:ca:10:dc:
93:64:c3:d2:ed:8d:20:58:71:a1:67:49:73:80:84:0a:e4:ef:
05:fc:11:57:7f:29:da:c5:bd:b1:2d:d8:31:c0:63:f1:ed:2e:
02:1e:b8:31:66:89:4b:22:da:02:09:56:57:04:e2:38:02:0d:
c1:cb:5c:97:4b:f8:ab:67:eb:84:f8:30:af:0f:85:de:a6:a9:
d3:64:97:86:31:94:6c:b5:55:87:70:7d:8d:67:a3:d0:fd:8d:
e6:60:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:43 2024 by rpki-client on console-ams.rpki-client.org