Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/wN3CP7SqMgk5Zro-Rz_9_0PvkyQ.roa
File: wN3CP7SqMgk5Zro-Rz_9_0PvkyQ.roa (raw, json)
Hash identifier: LlCoE7ltbHFRcPdxArt240i1YeR/hYnVpjIQv/c5iI8=
Subject key identifier: C0:DD:C2:3F:B4:AA:32:09:39:66:BA:3E:47:3F:FD:FF:43:EF:93:24
Certificate issuer: /CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Certificate serial: 018CC3B6B7D1288EB6721D8CD0EEC4385BF3
Authority key identifier: 0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/wN3CP7SqMgk5Zro-Rz_9_0PvkyQ.roa
Signing time: Mon 01 Jan 2024 06:29:40 +0000
ROA not before: Mon 01 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31543
IP address blocks: 185.221.76.0/22 maxlen: 24
91.217.38.0/23 maxlen: 24
185.58.52.0/22 maxlen: 24
2a02:61e0::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 12:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:b7:d1:28:8e:b6:72:1d:8c:d0:ee:c4:38:5b:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b403e71ef8c3d973ce76d42042f7dfa1891688b
Validity
Not Before: Jan 1 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0ddc23fb4aa32093966ba3e473ffdff43ef9324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:cc:61:d6:7f:b6:e6:9e:74:c2:15:ef:1b:
82:6d:8c:8e:ca:35:62:08:b3:59:0a:6a:32:c2:71:
d4:43:37:a6:07:ca:54:63:15:c1:35:d5:7b:ba:46:
86:d2:73:be:c8:fc:49:42:84:cb:80:7b:7b:d8:3f:
a9:bd:3d:ba:bc:74:c8:06:cc:fb:96:07:ed:02:6c:
1d:e2:7a:ae:5f:11:1f:82:69:67:0c:5d:a6:c2:f4:
f5:44:49:b5:db:93:0f:24:53:4f:1b:0d:19:d4:f5:
a3:64:c3:4e:2b:14:05:09:34:f8:68:75:11:f4:4d:
39:66:33:19:d7:42:f7:c4:7b:a7:5f:0a:66:b5:81:
0c:60:f7:7b:9e:23:53:d8:17:48:17:06:cb:67:91:
63:61:3f:5c:a0:71:35:d5:57:c2:a5:10:32:31:d9:
cb:ad:2a:11:6f:2b:28:86:41:b9:72:70:72:fc:04:
a8:9c:62:1d:95:78:73:81:35:79:49:f0:af:88:ad:
c3:8f:89:5f:f3:88:90:76:c8:36:a6:63:76:d3:8a:
3e:41:06:20:96:8c:65:e3:af:d8:2f:c4:c5:1b:74:
d5:a3:46:79:1a:67:22:7a:36:61:da:1e:90:f0:a3:
78:f5:e1:fd:a7:c0:78:c6:ef:6a:09:45:1c:f3:11:
ab:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DD:C2:3F:B4:AA:32:09:39:66:BA:3E:47:3F:FD:FF:43:EF:93:24
X509v3 Authority Key Identifier:
keyid:0B:40:3E:71:EF:8C:3D:97:3C:E7:6D:42:04:2F:7D:FA:18:91:68:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0A-ce-MPZc8521CBC99-hiRaIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/wN3CP7SqMgk5Zro-Rz_9_0PvkyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/eff592-1a47-40bc-84d4-0c68777a4019/1/C0A-ce-MPZc8521CBC99-hiRaIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.38.0/23
185.58.52.0/22
185.221.76.0/22
IPv6:
2a02:61e0::/32
Signature Algorithm: sha256WithRSAEncryption
a6:fc:23:f4:2c:8c:0d:37:36:4e:70:50:8a:0b:b8:5c:ec:50:
c7:29:ad:c3:b3:35:5e:1c:a6:8e:14:10:a7:b0:b9:b6:4f:68:
b6:44:c7:7c:93:cf:ee:ce:48:cf:17:03:2a:25:c9:6d:5d:73:
9a:d9:85:4a:63:45:31:da:cf:0a:49:e3:98:35:93:3d:a6:b9:
b5:44:4b:97:25:44:00:35:6e:6f:b2:91:2a:f9:16:f5:19:80:
a5:71:84:9e:ac:68:3f:c9:43:18:b2:1b:9d:2c:b0:63:d4:56:
cf:c9:c5:61:be:ba:29:38:86:43:fd:ac:1c:7d:8c:3a:7f:3f:
85:6b:68:8e:e1:e3:90:15:4d:da:ed:f5:e8:1d:c8:89:34:fc:
50:3c:b2:57:ee:8c:89:93:04:59:74:af:33:fc:46:ef:42:50:
5e:1c:e5:c0:dc:82:22:b4:69:fd:22:57:ef:46:4d:78:dc:2e:
6c:4a:7c:8a:09:35:5c:e4:e5:2e:ae:d4:31:6f:03:36:5b:79:
b5:15:1a:c7:84:1b:5d:0c:0c:71:45:33:23:67:be:16:69:e7:
e0:36:44:54:94:f4:a8:f5:f3:81:df:2c:c1:1a:d5:b4:44:6f:
9e:af:6f:4c:6e:3f:25:27:06:d4:ed:da:e6:7c:03:39:66:f6:
83:8b:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 17:27:43 2024 by rpki-client on console-fra.rpki-client.org