Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/wVkMu_CY0ttT691QbSaQXzzDJY4.roa
File: wVkMu_CY0ttT691QbSaQXzzDJY4.roa (raw, json)
Hash identifier: 3rewt5oaiFxNkm0OcQDN/AkA8w5w9D/XOrI87KbiTS0=
Subject key identifier: C1:59:0C:BB:F0:98:D2:DB:53:EB:DD:50:6D:26:90:5F:3C:C3:25:8E
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 018570F0A79831782D395F622D302DB65FAD
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/wVkMu_CY0ttT691QbSaQXzzDJY4.roa
Signing time: Mon 02 Jan 2023 05:24:57 +0000
ROA not before: Mon 02 Jan 2023 05:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203971
IP address blocks: 185.118.48.0/22 maxlen: 22
185.222.93.0/24 maxlen: 24
185.222.94.0/24 maxlen: 24
185.222.95.0/24 maxlen: 24
185.222.92.0/22 maxlen: 22
185.222.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Feb 2023 13:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a7:98:31:78:2d:39:5f:62:2d:30:2d:b6:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Jan 2 05:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1590cbbf098d2db53ebdd506d26905f3cc3258e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1f:41:53:33:ad:38:0e:49:5f:72:4c:ae:ce:
a4:de:35:0d:e6:66:cf:52:79:4a:6e:54:8c:68:fc:
05:93:ba:d0:a8:51:79:07:02:b4:be:38:5d:21:2b:
f6:8d:be:fe:97:e4:c7:62:ee:64:dd:a2:f6:f7:2f:
ee:c1:d2:3a:da:c6:08:97:08:b5:b9:90:29:39:d8:
34:87:36:7d:ee:02:c6:ff:4e:0e:26:8b:0c:14:7e:
7e:77:78:1f:9d:14:b1:cf:a6:9e:b6:03:82:86:7a:
5e:1a:9d:3c:ae:be:c1:02:ea:4d:76:be:52:b5:a9:
3e:26:ad:be:29:86:e2:78:05:5e:65:a8:14:13:21:
9d:b7:3b:f3:40:4d:9a:f2:3c:d7:03:a4:db:30:68:
52:37:a5:6f:f4:ac:9d:2d:5f:23:67:2c:50:cd:ac:
f5:d8:fa:8a:0e:1e:5a:88:4d:95:9f:04:9d:b9:56:
58:4e:03:24:cb:cd:ed:fd:77:bd:42:15:02:dc:31:
94:91:4e:56:7d:6a:45:a0:c1:ed:bf:86:38:98:ea:
fc:bf:ac:8b:97:72:b5:71:61:21:46:02:5f:a5:e7:
79:76:03:3f:f5:fd:f3:89:d4:75:45:07:c6:ed:5e:
51:4f:8c:6f:1a:b9:75:03:cf:4f:c7:55:bc:f7:69:
e7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:59:0C:BB:F0:98:D2:DB:53:EB:DD:50:6D:26:90:5F:3C:C3:25:8E
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/wVkMu_CY0ttT691QbSaQXzzDJY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.48.0/22
185.222.92.0/22
Signature Algorithm: sha256WithRSAEncryption
15:e9:d6:71:0a:ad:8b:1d:ca:f0:c9:d4:98:22:06:e6:ba:71:
c8:c4:ae:50:10:44:3b:28:88:13:69:02:f7:66:93:c1:cc:e2:
3b:3a:4f:e6:b7:98:fe:ee:f8:8b:5f:95:00:9e:f5:c3:12:a7:
e7:7c:1b:17:20:80:1a:dc:2c:9d:3c:85:43:85:95:5e:e9:41:
b2:97:22:16:0f:a6:cc:ab:62:5a:c5:25:c1:71:61:2e:4c:ba:
ee:47:88:dd:07:b6:68:6d:11:b2:4c:bb:32:09:17:79:08:a3:
54:1a:ce:17:1c:2d:7d:2f:23:e8:f8:a4:80:bb:ac:39:1d:6f:
8d:2f:dc:34:11:4f:7d:97:27:7f:86:77:c4:31:e1:bd:13:55:
81:1f:2c:fd:0c:3c:a3:94:f7:0a:84:06:f9:dc:74:d5:c3:4c:
7e:ac:6c:2e:0a:3b:f7:99:08:f0:53:82:02:03:f0:52:37:fc:
18:a4:e7:ca:19:32:61:89:3b:0e:94:87:59:a8:ee:25:0d:31:
f4:79:5a:bd:24:60:ef:82:82:67:31:f9:fb:6c:3a:51:d9:94:
4f:12:9b:41:29:05:b5:20:08:01:8c:49:3d:35:6d:c6:e4:07:
1f:48:67:88:de:f3:7b:de:11:5c:88:b5:25:f5:14:9d:15:9c:
37:12:be:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:47 2024 by rpki-client on console-ams.rpki-client.org