Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/Wn40wj6XURQnTd0vPlJPu0wQul0.roa
File: Wn40wj6XURQnTd0vPlJPu0wQul0.roa (raw, json)
Hash identifier: hF5Wv0HMyGyfOP+Q+jWaOjFOx46ds/2Y7o2tCvjv+Zs=
Subject key identifier: 5A:7E:34:C2:3E:97:51:14:27:4D:DD:2F:3E:52:4F:BB:4C:10:BA:5D
Certificate issuer: /CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Certificate serial: 018570E75AD2BA2D2A0C03129DDF48D9ABCF
Authority key identifier: 0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/Wn40wj6XURQnTd0vPlJPu0wQul0.roa
Signing time: Mon 02 Jan 2023 05:14:48 +0000
ROA not before: Mon 02 Jan 2023 05:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49435
IP address blocks: 31.47.224.0/21 maxlen: 24
151.237.248.0/21 maxlen: 24
185.108.184.0/22 maxlen: 24
188.94.112.0/21 maxlen: 24
2a02:2260::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:5a:d2:ba:2d:2a:0c:03:12:9d:df:48:d9:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eb03f60c2c487b56b3eef3d3ed679101e487db7
Validity
Not Before: Jan 2 05:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a7e34c23e975114274ddd2f3e524fbb4c10ba5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7f:a1:e5:9f:65:44:50:e7:2e:d9:de:f3:a9:
16:91:73:e8:f7:19:f2:68:be:a8:c9:0e:10:c0:9b:
e6:6f:41:81:cb:ae:5f:44:5f:c7:43:44:47:06:35:
43:1b:f8:5d:a0:6f:cc:f0:78:38:4c:80:45:eb:70:
66:e8:49:de:cc:50:a5:a4:4d:63:12:47:f2:1a:dd:
42:c7:ec:31:d4:ce:06:15:1e:8b:91:aa:af:7d:24:
3f:21:10:38:15:94:71:47:07:07:c6:68:a6:d5:27:
b1:73:cc:18:42:09:a9:12:3f:e8:8c:9f:bc:4a:3d:
ba:ce:91:2f:78:91:7a:9e:5d:78:62:5d:5e:8d:bf:
db:35:f4:5a:a2:f0:97:f9:52:ec:f0:fc:42:0e:58:
75:a6:bc:5c:bd:68:58:7c:34:6e:df:57:a1:86:4d:
47:c6:b3:8f:30:51:f1:ff:bf:2a:3e:81:fe:0d:72:
e7:1b:2d:15:1b:77:8a:53:b5:82:a6:1b:52:f0:a8:
8c:3b:ef:81:b5:55:ab:7e:a7:90:94:6c:35:f5:d3:
cf:00:61:87:46:5b:8b:9a:61:c5:74:de:bc:cc:dd:
a5:3d:e3:b0:d8:a4:71:a0:f6:02:b2:3b:79:eb:ff:
d1:f8:8b:c4:ad:c3:25:8b:6a:2b:72:e7:f6:cb:55:
c1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7E:34:C2:3E:97:51:14:27:4D:DD:2F:3E:52:4F:BB:4C:10:BA:5D
X509v3 Authority Key Identifier:
keyid:0E:B0:3F:60:C2:C4:87:B5:6B:3E:EF:3D:3E:D6:79:10:1E:48:7D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/Wn40wj6XURQnTd0vPlJPu0wQul0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab0b97-4307-4ecf-a987-368712776f4c/1/DrA_YMLEh7VrPu89PtZ5EB5Ifbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.224.0/21
151.237.248.0/21
185.108.184.0/22
188.94.112.0/21
IPv6:
2a02:2260::/32
Signature Algorithm: sha256WithRSAEncryption
73:7b:f8:03:2d:57:e3:69:69:5f:6d:8a:4d:36:30:1c:10:01:
ef:6f:f7:c4:f8:0e:fb:b5:f2:a0:16:3c:57:e0:26:6e:c5:80:
3e:fb:6b:e5:2d:8f:a8:a1:57:66:47:43:4c:9a:f5:30:68:6e:
ed:b5:90:2f:7d:5e:e7:4f:a7:45:aa:34:a6:1e:ac:9e:bf:09:
03:1e:8b:ec:e3:4c:6d:af:db:7c:d3:80:eb:65:66:b3:20:6b:
12:fb:0c:27:f0:84:ff:8b:b2:2f:3c:65:97:55:4e:3f:13:c8:
af:34:ee:55:06:e5:b0:22:83:63:ff:d1:b0:87:4b:c6:a0:df:
94:61:09:91:bd:98:6e:4c:ee:f5:17:25:4c:b9:43:75:9b:86:
e2:e5:be:26:d6:27:0a:55:e6:8b:03:11:31:e5:fa:a4:be:f9:
2a:0c:aa:cb:e1:6f:0b:07:86:22:f4:00:eb:20:8a:b8:29:b4:
33:76:15:18:b6:a7:9d:d6:73:10:57:82:a0:ce:7d:32:16:92:
7d:17:99:2e:c0:17:22:60:cd:99:4a:12:69:19:9d:d0:ca:5e:
2f:11:1d:3e:48:52:1d:f8:d8:7e:61:09:ef:3f:b7:8d:2f:53:
b0:f6:c6:ac:cb:27:d2:9a:66:82:cb:fc:b6:88:2d:23:05:77:
fd:a6:12:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:57 2024 by rpki-client on console-fra.rpki-client.org