Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/wWoM_aG-icMC5QFn27YBWre5vJc.roa
File: wWoM_aG-icMC5QFn27YBWre5vJc.roa (raw, json)
Hash identifier: FLCmd9P0Pxvc1Uohn3Ll0oFUozTJ8vZ6w/vh8Hxqd2I=
Subject key identifier: C1:6A:0C:FD:A1:BE:89:C3:02:E5:01:67:DB:B6:01:5A:B7:B9:BC:97
Certificate issuer: /CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Certificate serial: 01857227E3A81E65608D5245E0C43933B306
Authority key identifier: 0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/wWoM_aG-icMC5QFn27YBWre5vJc.roa
Signing time: Mon 02 Jan 2023 11:04:54 +0000
ROA not before: Mon 02 Jan 2023 11:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8352
IP address blocks: 185.65.141.0/24 maxlen: 24
91.213.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e3:a8:1e:65:60:8d:52:45:e0:c4:39:33:b3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eca6e06c6824bd1b811183e0e17fa19496d261c
Validity
Not Before: Jan 2 11:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16a0cfda1be89c302e50167dbb6015ab7b9bc97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a0:c9:e3:f6:cc:ba:55:e4:51:23:c5:29:bb:
27:a5:64:a4:5a:e3:67:49:2c:7e:60:da:92:27:ea:
56:7e:42:a6:29:2f:99:e8:b7:60:6a:0a:24:64:ce:
e4:4d:f0:1c:0a:cc:b8:e7:b6:5f:bb:41:83:1e:ac:
73:6e:1d:ac:af:fb:00:67:c3:7d:12:33:09:43:02:
bd:96:7f:1a:94:91:d9:32:df:a0:19:f8:87:fa:c4:
61:ee:e8:f2:33:ee:f1:8d:71:a1:40:01:79:3f:d0:
16:57:b5:e3:23:3d:fc:9f:ab:d8:18:da:3c:0d:67:
48:2b:e5:5c:96:93:13:e8:99:e7:d0:11:63:37:01:
25:ca:58:9c:36:15:36:92:d6:3a:8a:3f:4b:1a:ef:
aa:4e:8f:0c:e3:61:13:71:74:ca:df:d2:18:2f:8c:
70:aa:a1:52:3e:1f:57:0c:90:01:26:08:da:13:c9:
31:e5:87:37:bb:27:e2:ce:9d:8f:fb:34:54:4f:ac:
03:0f:52:7d:4b:fa:2e:f3:b6:96:4d:07:89:c3:bf:
91:34:15:c3:27:bf:f5:5a:90:ee:bd:1f:2c:22:d7:
10:6b:96:3b:52:30:82:51:52:7e:5d:eb:7f:38:88:
36:20:b4:0d:25:f2:87:e3:2e:fc:73:4b:3b:d8:33:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6A:0C:FD:A1:BE:89:C3:02:E5:01:67:DB:B6:01:5A:B7:B9:BC:97
X509v3 Authority Key Identifier:
keyid:0E:CA:6E:06:C6:82:4B:D1:B8:11:18:3E:0E:17:FA:19:49:6D:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DspuBsaCS9G4ERg-Dhf6GUltJhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/wWoM_aG-icMC5QFn27YBWre5vJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9137ff-2063-4675-8de7-cfd3ff9fdf7b/1/DspuBsaCS9G4ERg-Dhf6GUltJhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.148.0/24
185.65.141.0/24
Signature Algorithm: sha256WithRSAEncryption
56:6b:20:57:da:6e:bf:ac:37:d8:d4:76:0a:d6:84:30:d3:30:
21:34:3c:1a:3c:0f:81:67:bb:1b:e7:d7:72:10:16:a9:d5:dc:
d4:0f:15:f8:21:be:d0:93:cc:4c:f1:e4:7c:f2:45:c7:6e:72:
8a:89:68:02:9f:d5:0a:1a:a8:66:b8:71:84:cd:75:50:0c:3e:
eb:28:40:76:27:72:42:be:48:47:58:f3:b0:67:19:29:c0:5b:
33:39:ec:18:a5:b8:c5:71:1b:71:50:e4:cf:2c:d1:3a:b1:4d:
40:db:9b:32:3e:84:75:26:26:dc:2d:d0:af:c4:c9:2a:74:95:
0b:74:81:ca:92:f0:04:d2:73:37:a6:ff:eb:9b:3f:50:6f:77:
10:1d:c6:02:7b:53:f7:29:98:87:d0:b3:a8:2f:e9:d3:f8:5c:
63:2d:36:3c:dc:13:9e:07:ed:df:d6:cf:34:7a:c0:b3:aa:ca:
46:8b:69:29:be:c6:a8:40:c7:a4:aa:88:4b:0b:e0:c3:2f:da:
38:b2:9c:b4:45:7f:36:06:ee:ed:63:db:f3:d0:a1:65:b6:25:
9a:55:ab:13:58:57:32:4f:67:fd:d5:b9:4e:61:92:0b:5b:85:
e9:5e:c3:e2:cc:81:b6:14:ca:04:2b:d2:48:9a:dc:fb:a4:17:
40:ad:81:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:14 2024 by rpki-client on console-ams.rpki-client.org