Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/W3Sj59IYwmJoF-8msBiRAa8w0S4.roa
File: W3Sj59IYwmJoF-8msBiRAa8w0S4.roa (raw, json)
Hash identifier: WTZVfWzXT3dto+G5YeuZqbLF+ujMGEFmZikaSek1ZpI=
Subject key identifier: 5B:74:A3:E7:D2:18:C2:62:68:17:EF:26:B0:18:91:01:AF:30:D1:2E
Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial: 01856E2F98123089A79FD13B66EEAEEB635E
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/W3Sj59IYwmJoF-8msBiRAa8w0S4.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 46.143.206.0/24 maxlen: 24
46.143.205.0/24 maxlen: 24
46.143.204.0/22 maxlen: 22
46.143.204.0/24 maxlen: 24
109.122.240.0/22 maxlen: 22
109.122.244.0/22 maxlen: 22
109.122.248.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:98:12:30:89:a7:9f:d1:3b:66:ee:ae:eb:63:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b74a3e7d218c2626817ef26b0189101af30d12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bf:87:b1:18:7f:33:54:d0:ab:f6:4f:0b:13:
9f:6b:4f:f8:e9:5c:ed:66:a2:91:79:28:a1:0c:ca:
bf:b8:4a:5a:df:85:b0:8e:ef:29:6e:37:b7:cb:ca:
7b:91:34:91:be:86:be:ad:19:a9:f5:c5:47:b6:db:
f0:0e:39:12:b2:13:7d:12:f0:ac:75:34:20:73:31:
00:56:b3:9e:26:d7:fd:54:7b:00:bd:ee:50:08:4e:
03:9e:5d:36:8f:e7:41:aa:ca:a0:ce:62:d0:3c:03:
58:32:cb:92:61:27:a5:0e:74:9a:82:96:87:c6:e1:
c4:8e:d8:df:c2:d9:25:09:86:09:96:20:c7:3d:34:
c9:ab:e9:05:ef:08:af:da:eb:4f:8f:ac:95:4a:3e:
ac:76:37:1b:06:68:59:3d:13:68:d3:72:81:bf:a6:
9f:ba:8e:15:1a:0f:7d:e3:23:c8:d0:10:05:7b:43:
b3:da:c4:e5:b5:d7:01:a3:a5:4a:28:32:ae:e9:d8:
3b:db:e8:88:71:8d:c1:16:cd:42:76:bd:3e:dd:80:
c6:ff:df:47:37:9f:58:93:da:13:b4:21:06:ae:23:
d0:8b:68:15:ba:58:20:8b:ce:bf:52:cd:35:23:f2:
48:51:bf:d0:9a:86:72:5d:3d:7f:5c:04:df:f5:45:
44:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:A3:E7:D2:18:C2:62:68:17:EF:26:B0:18:91:01:AF:30:D1:2E
X509v3 Authority Key Identifier:
keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/W3Sj59IYwmJoF-8msBiRAa8w0S4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.143.204.0/22
109.122.240.0-109.122.251.255
Signature Algorithm: sha256WithRSAEncryption
33:28:56:ea:36:65:54:44:9c:86:c4:df:50:df:7c:79:aa:58:
27:7c:c7:2d:0a:25:eb:d2:9d:bd:2d:8b:0f:0f:b2:30:b5:f6:
3b:43:27:e7:44:5e:03:71:8c:0f:f3:aa:1b:ae:2b:48:49:d5:
d7:38:d1:4e:2f:b2:63:48:f3:31:bb:14:f7:07:71:35:36:fe:
0a:c6:da:cd:1a:3a:42:fb:19:c9:fc:97:85:24:62:1f:13:0c:
8d:f4:42:c3:eb:0b:05:7d:d3:a4:07:1c:58:57:77:e5:49:d5:
d5:c9:e7:da:39:c7:28:02:5d:9b:90:d0:c3:e6:6f:52:a3:fe:
53:69:bc:79:99:b0:bc:d6:14:a9:b9:a9:18:1a:e0:b5:38:ac:
1b:77:06:b1:39:95:9f:3a:df:9b:cd:b1:59:26:c6:53:31:43:
bb:ef:cc:42:67:b6:96:25:8b:e6:e6:0f:17:97:c2:33:a6:5d:
8b:83:3c:db:34:16:2c:0f:01:97:99:c2:84:95:be:95:03:30:
81:90:93:8a:a9:50:b5:f8:ca:e0:2a:fc:bc:e6:77:ea:f5:89:
e6:83:94:ef:54:a5:d0:dd:69:36:86:7c:bb:5f:4e:63:57:87:
7b:cc:2f:67:b4:8f:09:15:0e:a5:be:a7:6d:e6:11:18:48:33:
cf:5d:f3:3e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:50 2023 by rpki-client on console-fra.rpki-client.org