Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/wMfalUEOEQLzMm6i-OYdl1eOBHA.roa
File: wMfalUEOEQLzMm6i-OYdl1eOBHA.roa (raw, json)
Hash identifier: qoCn/sK2l4Zqml55XR2AN8J0RRgHcWmlFybzeCSio0I=
Subject key identifier: C0:C7:DA:95:41:0E:11:02:F3:32:6E:A2:F8:E6:1D:97:57:8E:04:70
Certificate issuer: /CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Certificate serial: 01856C138599D939B63F6FBCB69EEFD048A2
Authority key identifier: C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/wMfalUEOEQLzMm6i-OYdl1eOBHA.roa
Signing time: Sun 01 Jan 2023 06:44:56 +0000
ROA not before: Sun 01 Jan 2023 06:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203221
IP address blocks: 185.141.248.0/24 maxlen: 24
185.141.249.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:13:85:99:d9:39:b6:3f:6f:bc:b6:9e:ef:d0:48:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c93b063fc63e8a1aba1f430b2d074dbe270be395
Validity
Not Before: Jan 1 06:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0c7da95410e1102f3326ea2f8e61d97578e0470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:dd:87:24:6a:46:d5:79:1a:3c:f5:ff:17:90:
0b:3a:59:ca:40:24:1b:b4:0f:74:01:8a:1d:1c:d0:
83:17:67:9a:86:a6:14:58:08:da:ab:19:79:ee:a6:
1a:e2:7d:2a:6f:63:d7:75:3b:99:39:42:92:03:82:
3c:83:e1:63:99:fd:1f:95:57:33:ea:93:2a:c1:4d:
4f:56:2c:88:e4:17:7b:5d:7b:2c:33:fa:8d:9c:f1:
40:52:69:96:12:d9:34:f0:ee:64:d9:83:bd:82:cf:
28:ac:22:57:58:54:e2:c9:6a:71:e9:ca:fe:09:2d:
b8:77:7a:f2:94:14:e8:12:13:91:0d:45:75:0c:91:
bc:1f:7b:9c:94:18:54:bc:e6:c5:ac:79:7c:0b:86:
1e:1b:a2:a7:a0:02:cb:37:92:f2:0e:d2:ac:f2:7c:
49:e5:8b:e4:53:6b:eb:24:af:54:c3:29:39:63:87:
f2:1b:9b:16:63:5e:dd:3c:60:6d:d3:a5:17:6b:41:
32:5d:34:6e:ee:99:24:79:33:22:19:cd:5a:1f:e1:
64:a6:1e:a6:1b:cd:35:ca:cc:d4:68:b1:93:5f:e0:
45:26:d5:73:ce:4e:7b:03:a9:1d:f6:ce:2a:fe:1a:
fa:6d:68:d5:14:bb:a5:d5:35:68:11:37:c2:3c:50:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C7:DA:95:41:0E:11:02:F3:32:6E:A2:F8:E6:1D:97:57:8E:04:70
X509v3 Authority Key Identifier:
keyid:C9:3B:06:3F:C6:3E:8A:1A:BA:1F:43:0B:2D:07:4D:BE:27:0B:E3:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTsGP8Y-ihq6H0MLLQdNvicL45U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/wMfalUEOEQLzMm6i-OYdl1eOBHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e632b0-08f6-4217-94bc-940bc8191659/1/yTsGP8Y-ihq6H0MLLQdNvicL45U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.248.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:e2:07:c6:ec:c2:d4:56:db:86:7a:8b:06:63:24:66:14:d7:
d6:2f:9b:c4:c6:89:3f:61:4a:75:fd:6c:be:ef:f7:07:ea:9c:
10:40:89:c9:98:f9:4f:67:d9:e1:0a:fe:89:66:09:13:f3:22:
e0:b1:1d:2d:af:3c:3b:b1:64:b3:6f:b6:97:be:26:15:e9:ec:
31:b6:ca:73:45:f5:0e:90:c4:29:d7:96:43:ee:f4:82:22:92:
f3:f3:a2:4c:38:3b:1f:a4:5c:73:9b:af:92:f8:ae:11:ce:73:
f9:41:b7:84:a2:f7:9c:c4:7c:3f:ff:a8:4b:b3:86:5e:bb:71:
2d:60:8f:96:88:a0:ca:07:f0:0b:1b:f5:77:1b:4d:63:b5:a1:
87:ea:bd:5b:87:38:77:51:09:4e:08:4c:49:9a:49:a4:5b:46:
63:55:0a:5d:fc:71:4d:dc:6c:57:c0:24:b0:db:0f:4a:15:dd:
96:1a:a4:9c:c3:69:91:45:2c:2d:de:29:d8:d6:35:75:67:00:
90:bb:f3:b6:fe:e3:59:85:9a:14:1e:ff:05:08:da:fb:2b:fb:
27:15:85:f4:cd:62:30:7e:6d:bd:c8:dc:e0:93:82:71:d1:89:
b9:85:0f:ff:55:9a:46:ad:10:fc:e3:e3:8f:50:ad:34:43:22:
5c:22:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:56 2024 by rpki-client on console-ams.rpki-client.org