Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/wGlwTQ1HGuS32vLWVvFQGgVCaas.roa
File: wGlwTQ1HGuS32vLWVvFQGgVCaas.roa (raw, json)
Hash identifier: KIJVPYL0VxoIh8+JbSgMZQncIHTFj13Mk7Pips6QI3o=
Subject key identifier: C0:69:70:4D:0D:47:1A:E4:B7:DA:F2:D6:56:F1:50:1A:05:42:69:AB
Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Certificate serial: 01856C5CAEF086BAA4FDBD0153DC3FE30EDA
Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/wGlwTQ1HGuS32vLWVvFQGgVCaas.roa
Signing time: Sun 01 Jan 2023 08:04:51 +0000
ROA not before: Sun 01 Jan 2023 08:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43436
IP address blocks: 185.6.140.0/22 maxlen: 23
193.58.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:ae:f0:86:ba:a4:fd:bd:01:53:dc:3f:e3:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06
Validity
Not Before: Jan 1 08:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c069704d0d471ae4b7daf2d656f1501a054269ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1b:9e:07:42:b9:2d:26:fd:4a:b0:af:61:b6:
78:64:f4:54:20:42:90:d4:ca:ed:f6:f9:c8:8e:be:
16:61:42:7d:f5:06:0c:ae:97:20:c9:af:b0:86:bc:
dc:7a:3f:08:bc:b7:c4:3f:9e:b4:cc:cd:8a:68:bc:
15:d3:46:77:ec:c1:10:45:6b:26:e2:85:c3:62:01:
e0:ea:26:06:bc:fa:98:e1:6c:9f:ad:59:17:e9:0c:
b7:c5:26:47:68:a1:75:cb:18:da:fa:9e:2e:2a:94:
17:f7:5d:8d:97:8b:be:4b:16:2c:53:31:63:cf:de:
99:32:30:31:49:64:3d:2d:1b:74:2c:08:a7:d5:e7:
86:a9:5e:f5:70:e2:6a:0a:7b:9c:b9:32:5d:03:f5:
a8:45:11:c7:99:a2:1e:45:24:e4:e8:91:e7:8a:0a:
47:c2:8b:50:4a:3b:8c:8c:60:19:7b:0c:98:29:b0:
95:ac:38:32:41:9f:5e:5a:60:ec:4f:b7:72:34:38:
82:df:cf:c6:e0:b9:1d:ec:cf:fc:57:3c:0e:0a:80:
55:07:e1:a2:38:9a:80:7c:4c:ec:2d:a9:f9:45:9c:
dd:77:6c:b2:9b:18:45:b5:36:dc:f8:af:ed:1b:dc:
22:6e:6b:81:73:d7:fb:60:28:2f:e9:38:b0:da:38:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:69:70:4D:0D:47:1A:E4:B7:DA:F2:D6:56:F1:50:1A:05:42:69:AB
X509v3 Authority Key Identifier:
keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/wGlwTQ1HGuS32vLWVvFQGgVCaas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.140.0/22
193.58.247.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:12:d7:c7:63:b3:5a:d9:7a:91:21:c1:20:73:91:63:7b:ba:
c3:66:d1:bd:4d:23:39:09:3b:96:94:ad:e5:de:0b:80:a7:a7:
e7:56:f2:a6:02:38:19:60:ea:36:2e:31:ec:0c:8a:4e:54:50:
c6:bd:c7:88:f7:f5:54:c0:53:34:99:39:11:87:85:ee:4b:cc:
c5:bd:72:05:e2:6d:33:ed:3f:18:64:d9:1e:2f:fa:ce:ce:10:
57:6e:79:6c:5d:e1:86:90:45:53:65:2f:de:cc:ed:b3:2f:92:
c5:3a:e3:8f:f6:6b:fc:f1:7f:0f:f3:5d:32:60:af:ec:a7:46:
70:c0:f8:9e:3a:86:07:bc:78:24:bb:9e:fa:39:54:40:ff:8d:
fe:aa:7d:e7:4f:6b:c5:0a:d4:ff:a4:0c:ca:d3:60:bc:0b:7c:
68:b0:d9:d8:0f:d1:55:fc:56:30:89:12:75:7b:b3:8b:e7:c8:
d2:59:8b:6a:96:95:ca:72:2d:ef:f5:cb:c2:aa:16:e2:ae:5c:
9a:7c:01:22:f8:a3:83:c4:12:de:ec:04:a3:40:65:c7:70:97:
55:b6:39:89:a3:41:22:6b:3a:27:37:2f:c7:e2:ca:f2:2f:98:
5d:cd:d9:94:ed:2b:6f:7d:ba:b9:ce:6c:56:fa:70:5a:91:96:
9d:3d:1d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:09 2024 by rpki-client on console-fra.rpki-client.org