Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/W07D65tMkyvxrH1xQhtaPfshWwc.roa
File: W07D65tMkyvxrH1xQhtaPfshWwc.roa (raw, json)
Hash identifier: jVniNFucPND8/S7c1NMGLm+Q2+SgE2qjEsvBmYg7iGI=
Subject key identifier: 5B:4E:C3:EB:9B:4C:93:2B:F1:AC:7D:71:42:1B:5A:3D:FB:21:5B:07
Certificate issuer: /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial: 018775D1932A624221994F5735D5904BBBD4
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/W07D65tMkyvxrH1xQhtaPfshWwc.roa
Signing time: Wed 12 Apr 2023 14:14:41 +0000
ROA not before: Wed 12 Apr 2023 14:14:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204209
IP address blocks: 185.249.89.0/24 maxlen: 24
185.249.90.0/24 maxlen: 24
185.249.91.0/24 maxlen: 24
185.249.88.0/24 maxlen: 24
2a07:fb00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:d1:93:2a:62:42:21:99:4f:57:35:d5:90:4b:bb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
Validity
Not Before: Apr 12 14:14:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b4ec3eb9b4c932bf1ac7d71421b5a3dfb215b07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:7b:3f:6a:83:ad:4a:84:2e:40:b7:0e:de:
11:79:8b:9d:0b:79:df:e4:3f:57:d2:05:57:46:8e:
97:40:ef:68:5f:db:46:13:fc:c2:3a:2e:22:2b:d9:
a7:95:a6:41:d9:b1:87:a9:b2:09:05:46:5f:85:fd:
e4:4c:82:fc:f9:73:e7:b0:47:9d:2c:cc:f7:cc:23:
e9:16:8e:89:e7:ed:25:f5:94:19:6d:c0:41:a9:dc:
6f:b7:27:3e:43:47:33:de:a6:dd:47:cb:25:fa:ca:
5c:99:d8:0d:54:84:58:0b:b7:96:23:0b:f9:c9:fe:
94:c6:1e:f6:4f:d8:e5:d5:1b:fb:ac:24:68:a4:ce:
85:37:ef:d5:d7:44:06:1a:d2:f3:1f:a6:2b:b2:1a:
fd:b8:b5:d8:c7:0b:c3:9b:cd:62:ba:a3:d8:a3:53:
d8:9a:2a:f1:37:47:2f:69:18:68:64:98:60:93:07:
78:e8:e6:52:ab:d5:17:4e:30:c3:ff:9a:d1:55:57:
fd:36:18:53:1b:1a:79:b5:c6:ee:27:aa:eb:2c:54:
5c:d2:4b:b8:34:6d:50:7b:36:bb:42:37:cb:1a:e0:
2a:31:a2:99:76:ca:45:03:be:c9:21:ad:a0:a7:63:
ed:c9:7c:21:99:41:27:85:73:7a:0e:7e:e0:b7:f2:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:4E:C3:EB:9B:4C:93:2B:F1:AC:7D:71:42:1B:5A:3D:FB:21:5B:07
X509v3 Authority Key Identifier:
keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/W07D65tMkyvxrH1xQhtaPfshWwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.88.0/22
IPv6:
2a07:fb00::/32
Signature Algorithm: sha256WithRSAEncryption
95:c2:e4:5e:8a:a7:40:9f:4f:d7:8b:75:25:f7:6d:e4:ac:2f:
45:89:84:96:3d:1d:42:a6:f5:e9:10:83:eb:40:be:01:9a:2a:
9b:6f:8d:ef:11:dd:b4:bf:f4:9b:d6:b0:75:d8:b4:ad:11:d6:
d5:fa:51:53:e4:e4:fd:c1:69:50:34:f3:7d:6a:56:06:a5:dd:
74:fe:ca:af:19:5a:da:b5:03:91:0f:a6:7e:d2:d7:91:cf:ee:
82:94:bc:b2:d4:3a:6d:04:61:09:8b:7d:c7:31:76:4e:b6:30:
78:f2:e0:43:56:14:a2:71:1b:1e:21:28:31:c2:8c:48:d4:18:
de:96:5a:76:65:e1:61:2b:1e:78:13:e8:fb:b0:38:38:ee:27:
d0:2c:9d:8e:33:53:fd:67:9d:1f:0e:72:aa:54:f6:e3:c7:83:
07:b9:f0:dd:65:14:2d:d5:0c:af:eb:3c:76:8d:39:51:d5:16:
74:b0:fb:d0:1f:5d:18:65:2e:94:cb:a8:b1:b2:81:09:e1:c2:
a2:45:5e:16:50:bc:23:cd:2a:a2:eb:b3:76:21:37:a0:ba:b2:
71:6c:4e:7b:1b:a6:d5:45:61:9e:14:d7:ba:91:13:14:98:31:
76:19:f5:63:bd:f2:a2:c8:39:36:08:ff:e0:fe:40:ab:56:9d:
60:e7:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:29 2024 by rpki-client on console-ams.rpki-client.org