Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/wR6HYnBV0PpNPNbOOeeFrPlh7EI.roa
File: wR6HYnBV0PpNPNbOOeeFrPlh7EI.roa (raw, json)
Hash identifier: uKW5s2+lqy8uwwjwkRMsW4s+fQo8ju4LEFM0MJbsvpI=
Subject key identifier: C1:1E:87:62:70:55:D0:FA:4D:3C:D6:CE:39:E7:85:AC:F9:61:EC:42
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 01888F7AE4D9C5ABD248A438617766AA3F6E
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/wR6HYnBV0PpNPNbOOeeFrPlh7EI.roa
Signing time: Tue 06 Jun 2023 06:52:55 +0000
ROA not before: Tue 06 Jun 2023 06:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198426
IP address blocks: 185.149.208.0/22 maxlen: 24
192.175.40.0/22 maxlen: 22
2a0d:a0c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 23 Jun 2023 12:11:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8f:7a:e4:d9:c5:ab:d2:48:a4:38:61:77:66:aa:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jun 6 06:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c11e87627055d0fa4d3cd6ce39e785acf961ec42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e3:05:d8:97:a5:57:49:01:59:2d:69:47:cd:
9d:6a:09:24:ab:81:51:c0:ed:f9:65:ee:e6:d6:45:
2c:fe:05:6d:d6:7b:f3:3e:9d:54:6a:1c:73:5c:09:
ea:11:8f:ed:78:42:ff:79:2d:4a:c2:d2:6f:07:9b:
9c:8c:15:c2:f9:08:4f:91:a5:13:a4:e3:ec:57:e2:
4b:ff:1d:ce:0e:09:d4:37:37:67:64:c7:6f:1d:af:
45:70:66:c2:ee:85:8c:ea:19:6c:29:cb:ca:ee:20:
7c:7e:f2:83:e6:b3:87:10:72:62:e8:0c:47:5d:9a:
2d:57:d6:ff:05:65:43:ad:c6:7d:d2:d5:64:13:be:
0e:06:6f:aa:29:d7:cf:05:3f:89:38:0a:14:b7:58:
c6:3d:20:06:a7:9b:d3:ca:9a:62:be:1e:59:d8:61:
20:b7:91:55:17:c5:ac:2d:64:75:bb:da:37:fc:a3:
62:6c:b0:a0:84:ea:c9:35:3a:43:6c:38:92:39:25:
39:e4:ea:11:4a:de:dc:8d:fe:9c:f5:c2:e0:f1:34:
f0:0c:80:5a:ce:2b:e7:04:26:be:03:6e:64:7c:50:
4a:da:28:27:c9:1c:24:4f:eb:ff:bb:de:fe:33:fc:
c5:7e:fa:18:83:77:c8:0e:3e:e2:75:96:a8:ec:e7:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1E:87:62:70:55:D0:FA:4D:3C:D6:CE:39:E7:85:AC:F9:61:EC:42
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/wR6HYnBV0PpNPNbOOeeFrPlh7EI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.208.0/22
192.175.40.0/22
IPv6:
2a0d:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
08:00:b1:13:3a:40:ee:02:f4:21:9d:3b:a6:c1:a0:8c:cc:9f:
d4:38:31:95:57:1e:90:4a:9a:c9:53:cc:87:76:c1:8e:cb:9e:
32:4c:e7:76:17:cb:bb:da:0b:00:7c:ea:ea:d7:96:21:9c:67:
42:68:6f:98:c5:17:e7:60:5a:c0:1d:b1:16:33:de:74:03:d8:
01:8a:fe:80:65:37:b0:0f:a3:84:38:63:d0:1b:11:60:2d:05:
76:7f:fb:cc:e4:f4:df:0d:6d:e4:b9:0d:50:5e:af:a0:7d:5e:
a7:6e:42:94:05:30:85:4f:be:b2:96:69:1f:c8:ad:49:1a:cb:
17:eb:dd:0a:95:76:ef:00:1a:0b:57:a8:4a:46:cf:ed:15:67:
c6:5e:6b:00:14:e2:b9:b4:ba:08:05:e7:05:0c:87:90:5a:80:
e5:4f:89:89:3f:2f:ab:15:51:38:bd:b3:ad:d7:95:6c:e3:f0:
44:30:de:c2:72:77:c5:38:a7:18:a7:4e:62:c4:a7:b3:29:e2:
3c:be:eb:5a:5b:11:4a:1f:b3:36:98:fd:51:b5:04:cc:43:76:
41:b9:55:b4:a8:a7:30:1e:56:fc:8a:28:d7:91:31:95:06:4d:
3d:88:eb:7a:0b:c4:27:22:82:9c:93:33:5c:aa:f8:10:f6:79:
63:91:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:15 2024 by rpki-client on console-fra.rpki-client.org