Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/1-wu-CV5L61x-cKUDE9otvs2V34g.roa
File: 1-wu-CV5L61x-cKUDE9otvs2V34g.roa (raw, json)
Hash identifier: NdgAPryFzxnzWrmrcMPQVjDOiWqbPVlZBi1wYZF8PWo=
Subject key identifier: FB:0B:BE:09:5E:4B:EB:5C:7E:70:A5:03:13:DA:2D:BE:CD:95:DF:88
Certificate issuer: /CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Certificate serial: 018592A62AE209EEEFD9D0CFD698BA128CED
Authority key identifier: DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/1-wu-CV5L61x-cKUDE9otvs2V34g.roa
Signing time: Sun 08 Jan 2023 18:30:41 +0000
ROA not before: Sun 08 Jan 2023 18:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205192
IP address blocks: 185.106.22.0/24 maxlen: 24
185.106.21.0/24 maxlen: 24
185.106.23.0/24 maxlen: 24
185.106.20.0/24 maxlen: 24
185.28.60.0/24 maxlen: 24
185.103.198.0/24 maxlen: 24
185.103.197.0/24 maxlen: 24
185.103.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:92:a6:2a:e2:09:ee:ef:d9:d0:cf:d6:98:ba:12:8c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd524a05d477b82fbca93e7a504aa31a3ad6863
Validity
Not Before: Jan 8 18:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb0bbe095e4beb5c7e70a50313da2dbecd95df88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b9:25:c4:9a:6e:eb:9f:8e:5a:64:6d:15:f0:
e5:98:6e:d9:ce:d7:23:b1:69:8e:e1:ed:bc:52:57:
73:3e:d6:27:df:a9:6e:50:c3:e2:8d:3e:4e:af:f4:
dc:d7:6c:af:87:72:83:89:b7:56:4c:89:4e:09:c2:
12:f9:17:2f:9d:b2:e8:45:b5:56:92:ef:84:b5:fe:
a8:b7:99:14:df:a4:c2:8a:82:07:e8:ce:09:2b:54:
53:f8:27:92:66:7d:17:7c:ed:56:54:59:33:a6:fe:
d4:7b:1a:34:45:1a:39:aa:65:4e:13:0b:b5:27:05:
d4:d5:21:17:14:e9:c1:4f:06:51:a4:4c:b4:76:d3:
53:a2:f3:e7:1c:c4:b0:c0:6d:d8:fb:9f:e5:e7:71:
29:d1:0a:8e:54:76:2e:8b:41:0e:98:12:cb:d7:78:
4c:1b:3f:55:9e:37:5e:6d:ef:90:c0:ea:c3:f4:4f:
51:d3:d8:ef:1f:75:50:5a:87:86:cb:ef:90:54:e1:
15:4c:bd:43:53:83:61:40:9a:9d:44:a9:82:f9:d5:
d5:44:d6:22:42:67:1b:21:8f:95:59:df:aa:88:d3:
18:7e:4a:a4:47:c3:72:8a:3b:f9:09:28:6d:c7:71:
84:84:a0:ed:b4:50:30:bc:d1:73:1b:be:f0:53:af:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0B:BE:09:5E:4B:EB:5C:7E:70:A5:03:13:DA:2D:BE:CD:95:DF:88
X509v3 Authority Key Identifier:
keyid:DF:D5:24:A0:5D:47:7B:82:FB:CA:93:E7:A5:04:AA:31:A3:AD:68:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39UkoF1He4L7ypPnpQSqMaOtaGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/1-wu-CV5L61x-cKUDE9otvs2V34g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/20c187-00fd-459e-aae4-467f4f7f5ded/1/39UkoF1He4L7ypPnpQSqMaOtaGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.60.0/24
185.103.196.0-185.103.198.255
185.106.20.0/22
Signature Algorithm: sha256WithRSAEncryption
69:bd:bb:d2:78:7e:cb:7d:6b:cd:40:1f:cc:3f:01:25:80:54:
ef:a3:46:da:f7:84:86:a6:62:d0:39:ed:d4:43:7d:57:c5:5b:
dc:f5:57:5d:44:ee:32:28:06:72:08:26:ff:93:60:cf:0a:0b:
92:4b:69:47:c5:30:90:ce:b3:71:aa:de:73:a3:39:b7:8d:15:
3b:9e:35:67:e9:a9:da:77:92:82:b2:09:cf:e7:f4:ff:3d:39:
78:e9:5f:bf:ab:ce:1c:72:32:88:4c:e3:92:d6:3e:90:41:5d:
33:8e:a1:8a:1f:8c:25:f8:0d:45:cd:27:01:f4:db:22:ff:b3:
86:60:3e:4c:a4:d1:e2:4d:7d:a9:f5:8f:b0:3e:02:f6:6e:e3:
6c:95:c2:5f:2b:3b:1d:4b:19:24:f3:b7:9a:9f:fc:f1:6c:c2:
24:f7:6b:91:f0:72:2a:5c:02:32:1c:e8:6d:2f:3d:b9:0a:de:
8c:d5:19:c3:a1:f1:3c:30:85:66:b5:f9:55:b1:02:fd:f5:af:
48:f6:4c:cd:56:5c:5c:bc:5d:c6:7c:e5:34:75:b0:fd:0d:f8:
74:28:3d:84:83:05:fa:bb:51:16:90:1b:6a:a6:5b:29:6a:ca:
4b:fa:37:58:64:26:76:b3:81:0f:79:b8:fb:b7:67:7d:53:61:
81:b9:88:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:43 2023 by rpki-client on console-fra.rpki-client.org