Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/W_2zPqktAqp4x95LniiMCsL2hQs.roa
File: W_2zPqktAqp4x95LniiMCsL2hQs.roa (raw, json)
Hash identifier: lth5gqWNyBqvFzaniHxfpNlS9tQ9b9L3QejlRJFaAEc=
Subject key identifier: 5B:FD:B3:3E:A9:2D:02:AA:78:C7:DE:4B:9E:28:8C:0A:C2:F6:85:0B
Certificate issuer: /CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Certificate serial: 01856BD35381D85EC3727568510895A23AFB
Authority key identifier: 7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/W_2zPqktAqp4x95LniiMCsL2hQs.roa
Signing time: Sun 01 Jan 2023 05:34:49 +0000
ROA not before: Sun 01 Jan 2023 05:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206771
IP address blocks: 185.171.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:53:81:d8:5e:c3:72:75:68:51:08:95:a2:3a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da49a9aef2184ec0bb6ef0fde901c5b2841ba64
Validity
Not Before: Jan 1 05:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bfdb33ea92d02aa78c7de4b9e288c0ac2f6850b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:e0:f5:c0:63:1c:f7:c1:21:e4:23:10:65:
a7:b8:cb:84:f2:df:e8:c7:09:45:a6:cf:1a:9a:bb:
88:e8:9e:89:cf:e9:be:31:b2:29:71:16:50:b8:c2:
fe:44:94:4a:f4:51:db:f7:5c:d0:9c:d5:98:b4:f3:
f7:8f:44:13:94:61:ae:dc:74:cc:f8:7d:da:62:1a:
7b:aa:86:16:8c:1f:cc:ae:a2:37:47:f1:35:5e:e3:
e0:17:f7:eb:60:85:25:05:ed:e4:04:02:16:86:56:
1e:96:e8:9d:24:0f:9f:50:b4:e9:be:3e:a1:e7:24:
5a:e9:b3:b4:f4:13:c2:3c:f9:85:7a:46:c8:36:2a:
ce:2b:c2:23:0f:52:b8:1e:a7:3f:2e:ef:df:3e:25:
a5:11:30:76:3d:bb:21:f9:18:b9:26:07:ab:a5:19:
d3:fb:a2:fa:b7:bd:70:77:57:f4:cf:70:96:c5:91:
7e:03:8e:4e:75:ad:71:d2:28:09:02:e9:d2:46:2d:
29:16:43:0d:2d:43:b0:5c:f9:9e:b4:30:5c:5c:f8:
ec:47:91:5a:e5:d0:b5:49:03:f8:ff:cf:5d:c9:47:
b0:f3:0b:f2:b4:a4:80:97:ef:ea:aa:dc:07:f0:86:
c5:76:b3:b6:a9:29:14:f8:d8:39:62:df:ec:35:59:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FD:B3:3E:A9:2D:02:AA:78:C7:DE:4B:9E:28:8C:0A:C2:F6:85:0B
X509v3 Authority Key Identifier:
keyid:7D:A4:9A:9A:EF:21:84:EC:0B:B6:EF:0F:DE:90:1C:5B:28:41:BA:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faSamu8hhOwLtu8P3pAcWyhBumQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/W_2zPqktAqp4x95LniiMCsL2hQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ff0742-7313-4e94-9618-63a1ce33307f/1/faSamu8hhOwLtu8P3pAcWyhBumQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.171.116.0/22
Signature Algorithm: sha256WithRSAEncryption
31:6e:d3:4c:de:ba:be:4d:c2:af:1c:da:f6:fd:bb:35:c6:b9:
e6:83:de:4e:7f:11:ae:71:6c:84:f4:b1:f5:c1:72:64:43:14:
14:7c:98:0c:d5:58:9c:d9:e1:db:df:c7:ba:6d:e5:0d:81:7b:
54:54:2e:b7:0e:7e:66:54:6e:68:19:a9:8c:2c:e6:c8:aa:3e:
d0:43:11:33:3b:a6:3b:54:e4:88:ef:40:5c:39:66:07:1a:d8:
21:d4:16:54:88:f9:85:ad:28:7b:c2:bd:8b:09:85:77:d6:18:
8e:b1:1e:72:f0:99:8d:11:f5:ad:8b:23:2a:70:d8:b1:c0:9a:
7b:02:27:56:fd:50:6a:66:8b:a1:a8:9a:c8:d6:b5:3e:bc:f8:
c4:fa:58:4c:8f:5b:55:03:65:1f:1f:05:07:15:f7:2a:8d:48:
02:2f:3d:ef:6d:ef:56:24:7b:8f:21:d3:bf:a2:e4:a7:ca:d8:
c1:5e:b0:cb:20:83:b7:75:4b:84:6a:bb:74:83:b0:a5:61:92:
4c:ab:a7:6a:89:20:64:d9:00:d6:07:ce:b1:8b:97:0a:5c:69:
a8:28:e9:d0:1f:e6:60:ec:16:ba:7a:4c:73:1d:08:da:61:cc:
c5:d6:ac:c3:85:f9:86:63:15:34:b0:11:5e:5b:e8:22:56:a9:
46:74:9a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:01 2024 by rpki-client on console-ams.rpki-client.org