Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/hhWzJpzPzUqrZH-ix16o9NKX54g.roa
File: hhWzJpzPzUqrZH-ix16o9NKX54g.roa (raw, json)
Hash identifier: OnGgAsCW1QRaOVCuyb2Vg95PxQFYZTBpsMIw/UtOxtE=
Subject key identifier: 86:15:B3:26:9C:CF:CD:4A:AB:64:7F:A2:C7:5E:A8:F4:D2:97:E7:88
Certificate issuer: /CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Certificate serial: 0185724C6E92D5F887C10FC14F6AF8963AA8
Authority key identifier: 58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/hhWzJpzPzUqrZH-ix16o9NKX54g.roa
Signing time: Mon 02 Jan 2023 11:44:49 +0000
ROA not before: Mon 02 Jan 2023 11:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208041
IP address blocks: 193.160.10.0/23 maxlen: 23
193.160.14.0/23 maxlen: 23
109.197.32.0/23 maxlen: 23
2a0f:d181::/32 maxlen: 32
2a0f:d180::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:6e:92:d5:f8:87:c1:0f:c1:4f:6a:f8:96:3a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=581ecc1a74cf92ab619c5f710123937ce50d9c43
Validity
Not Before: Jan 2 11:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8615b3269ccfcd4aab647fa2c75ea8f4d297e788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:43:be:2a:b6:49:63:c6:85:8a:cb:99:ff:
65:14:1e:8e:a1:76:97:60:b5:fb:5a:88:4f:f9:6c:
3f:14:27:07:00:16:71:ec:2a:51:d7:24:6b:a0:08:
fa:8d:0c:a5:60:97:d2:e9:47:78:47:0a:ba:37:85:
8c:41:e0:63:75:13:b6:6e:48:2a:ba:86:c0:63:1e:
46:cd:04:b6:7d:16:46:e6:fa:a1:e4:45:2d:1a:bc:
8a:8f:5b:12:90:80:00:e5:0b:7d:ef:f0:db:b1:f5:
ec:b3:60:4d:32:ca:f4:68:7f:71:12:00:4d:85:90:
76:05:c8:f0:26:cc:d9:56:0f:f3:3b:41:be:5c:d3:
45:b2:c2:a3:8c:a8:72:11:0a:c6:bb:5a:c9:0b:43:
af:16:25:36:e7:0e:f7:8e:18:9e:34:b7:62:61:57:
da:19:16:08:3c:fd:9f:20:cc:4c:9b:5e:ec:45:f2:
bc:62:31:b4:4e:f5:7f:d4:1f:2d:b5:60:7d:7d:34:
ca:47:83:1b:98:61:35:db:7c:55:0b:47:c4:a6:a4:
c8:91:8d:f3:c2:1f:6d:da:f1:6e:f0:a3:72:a2:6a:
de:58:0a:46:5c:1b:a0:26:f7:2b:65:69:08:0d:c0:
06:2a:fc:27:4f:be:fd:1d:08:4a:24:80:e5:d0:c7:
1c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:15:B3:26:9C:CF:CD:4A:AB:64:7F:A2:C7:5E:A8:F4:D2:97:E7:88
X509v3 Authority Key Identifier:
keyid:58:1E:CC:1A:74:CF:92:AB:61:9C:5F:71:01:23:93:7C:E5:0D:9C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WB7MGnTPkqthnF9xASOTfOUNnEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/hhWzJpzPzUqrZH-ix16o9NKX54g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c71daf-dd66-41d8-b04f-da88b6bdb316/1/WB7MGnTPkqthnF9xASOTfOUNnEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.32.0/23
193.160.10.0/23
193.160.14.0/23
IPv6:
2a0f:d180::/31
Signature Algorithm: sha256WithRSAEncryption
73:10:f7:6e:51:f0:7f:1a:5d:08:76:a9:63:a1:d0:1b:d1:34:
8d:d4:0e:6f:c7:a4:e7:27:5b:6b:04:a9:17:eb:23:98:16:0b:
04:7e:45:d5:2c:72:e8:5c:ef:eb:8b:d0:e8:ee:6d:c6:5f:10:
ab:bf:4f:84:b1:7a:75:8b:a6:2c:03:09:22:d4:da:cf:6f:9a:
53:9c:45:6c:24:25:f1:6a:1c:73:f7:59:74:fc:fd:fd:c8:f0:
2d:a9:34:a0:99:b9:c4:34:78:af:2b:c9:29:a3:9c:9c:49:66:
91:3b:fd:a5:d8:23:53:a8:c2:76:28:7e:76:0e:4e:b9:ab:5b:
06:fc:be:ad:bd:f7:17:32:38:79:5f:95:78:9f:69:8a:53:72:
43:84:5b:fd:f2:31:fc:0d:6e:fb:7c:db:36:a2:4b:2f:a9:a0:
9e:1f:ba:5f:ea:7d:1f:cf:c5:a9:f6:35:bd:ea:e4:73:12:36:
ef:ad:cc:95:26:8f:f2:73:84:68:bd:8c:3f:09:18:08:e2:26:
f1:e2:79:05:5e:fc:27:2e:aa:da:83:a1:2c:7a:a5:61:b4:c6:
cc:0d:8c:da:34:4f:33:34:cc:2e:b3:23:a6:7f:ba:d8:fc:14:
0f:af:98:13:da:84:9b:44:15:30:05:33:9e:cd:9c:f7:96:50:
4a:25:2b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:08 2023 by rpki-client on console-fra.rpki-client.org