Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/wzXFz6H4hfHtMXAbgEWuSMEeCpE.roa
File: wzXFz6H4hfHtMXAbgEWuSMEeCpE.roa (raw, json)
Hash identifier: HxOR6PYSjvWM8qxGdRvHMDdwNZCZMdn2ffa2WjG/0Ro=
Subject key identifier: C3:35:C5:CF:A1:F8:85:F1:ED:31:70:1B:80:45:AE:48:C1:1E:0A:91
Certificate issuer: /CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Certificate serial: 018570028671A40C01862E5B8FBECD5347F0
Authority key identifier: 7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/wzXFz6H4hfHtMXAbgEWuSMEeCpE.roa
Signing time: Mon 02 Jan 2023 01:04:51 +0000
ROA not before: Mon 02 Jan 2023 01:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207146
IP address blocks: 81.161.232.0/22 maxlen: 24
162.33.208.0/21 maxlen: 21
2a0d:2c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:86:71:a4:0c:01:86:2e:5b:8f:be:cd:53:47:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b221dacc6c3e371f5f0bb276c9fe588c5ee5fdc
Validity
Not Before: Jan 2 01:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c335c5cfa1f885f1ed31701b8045ae48c11e0a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:71:98:53:4e:ad:56:0a:21:3b:56:86:a1:8d:
10:4c:dd:82:31:89:64:88:26:8b:72:bc:33:ff:0f:
26:37:b9:36:c1:8b:6d:f6:88:7c:15:f6:27:be:03:
4c:7e:b8:0d:85:8c:24:96:5e:26:84:53:fc:a4:e0:
41:62:ac:f0:12:e6:26:ea:96:df:0d:47:98:24:00:
10:4b:5f:97:57:12:3d:76:4a:d3:92:77:5d:0e:e0:
b7:6a:6d:42:f1:e4:89:ac:9a:54:bd:1c:a8:0b:cf:
a8:6e:c3:74:af:49:d5:10:c7:31:4b:ae:0a:8b:e5:
71:9f:0f:fe:bf:66:f3:f1:e5:ea:98:46:79:9a:29:
0f:4e:7c:39:5b:91:dc:bf:d5:47:f4:d9:60:8e:04:
43:1f:f7:af:b6:5c:86:d1:9a:13:df:57:c3:8c:b4:
c2:2c:15:78:f2:73:0c:08:03:27:c3:48:c7:52:af:
d4:9e:6a:9c:c7:9a:fd:1e:76:a8:a5:c9:fb:b7:62:
da:62:99:64:24:c9:90:ff:41:1c:a0:ea:25:40:6e:
49:66:ba:96:c6:0d:b1:49:26:5e:70:92:84:f8:5d:
a8:78:f4:2c:a3:d0:2c:30:f1:e7:c9:22:00:9b:9e:
96:63:e1:65:f0:8e:ec:b1:db:06:4c:79:ee:04:3e:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:35:C5:CF:A1:F8:85:F1:ED:31:70:1B:80:45:AE:48:C1:1E:0A:91
X509v3 Authority Key Identifier:
keyid:7B:22:1D:AC:C6:C3:E3:71:F5:F0:BB:27:6C:9F:E5:88:C5:EE:5F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyIdrMbD43H18LsnbJ_liMXuX9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/wzXFz6H4hfHtMXAbgEWuSMEeCpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b1e6b0-f3a0-4f5f-bf25-812d45265186/1/eyIdrMbD43H18LsnbJ_liMXuX9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.232.0/22
162.33.208.0/21
IPv6:
2a0d:2c40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:d6:3e:05:2c:7c:6d:ef:0c:d7:9d:e8:c3:3d:d5:5e:ce:0f:
e8:7c:e3:c6:84:25:88:af:88:14:a6:5b:de:7e:0a:a3:29:5e:
94:4b:c9:8a:69:06:0a:c3:98:eb:99:a3:49:af:84:d8:06:56:
2b:83:f1:67:22:35:74:86:a3:36:07:40:92:b8:43:3a:cd:a1:
f7:6b:c2:60:96:0d:10:33:57:c6:06:85:30:b5:53:46:8b:2b:
3f:fc:da:af:b1:a6:30:07:b2:d2:31:25:61:ca:b4:3d:5e:f1:
8a:6f:16:dd:86:ed:71:a0:47:ff:4a:d6:1a:3f:31:31:14:ac:
5d:44:93:d2:fd:cd:86:4b:fc:b5:60:8c:c2:3a:8c:e7:f3:57:
13:d2:ed:21:62:7b:f3:99:69:3a:68:ae:07:e4:9c:a3:f8:88:
2f:90:32:23:fe:fa:66:5e:6d:96:74:e0:de:48:a4:b8:24:e3:
8e:31:48:0e:86:3e:b6:b5:d9:6c:fc:d6:13:fd:5d:fb:7a:0e:
60:6a:0e:c6:42:95:9b:de:4a:99:62:21:7f:72:91:6e:18:d7:
ee:6a:43:e3:43:0a:0c:6c:a8:e8:36:df:3b:f1:d2:d7:06:0d:
7a:76:36:b2:f8:db:e8:54:20:fc:07:3c:d8:ca:ad:10:c4:e8:
bf:9c:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:01 2024 by rpki-client on console-fra.rpki-client.org