Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/WT9Yo6sGLXM_qXJmXfPrXfv9B14.roa
File: WT9Yo6sGLXM_qXJmXfPrXfv9B14.roa (raw, json)
Hash identifier: vYsdwPrgcxa3yepTiXhHMlsAcxqD40au+CgngO/BDcU=
Subject key identifier: 59:3F:58:A3:AB:06:2D:73:3F:A9:72:66:5D:F3:EB:5D:FB:FD:07:5E
Certificate issuer: /CN=1c6c48cccce321ec18702957b396381a1f1a0410
Certificate serial: 01859A451DC83008673E1D63CA2F0323A80B
Authority key identifier: 1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/WT9Yo6sGLXM_qXJmXfPrXfv9B14.roa
Signing time: Tue 10 Jan 2023 06:01:38 +0000
ROA not before: Tue 10 Jan 2023 06:01:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206756
IP address blocks: 185.175.116.0/24 maxlen: 24
185.175.116.0/22 maxlen: 22
185.175.117.0/24 maxlen: 24
185.175.118.0/24 maxlen: 24
185.175.119.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9a:45:1d:c8:30:08:67:3e:1d:63:ca:2f:03:23:a8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6c48cccce321ec18702957b396381a1f1a0410
Validity
Not Before: Jan 10 06:01:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593f58a3ab062d733fa972665df3eb5dfbfd075e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:d7:fd:8c:e2:92:b8:d0:2a:34:66:0c:a3:
83:60:43:88:d0:cc:06:1a:2e:49:f9:85:30:e4:24:
8a:ae:f3:ba:88:03:95:fa:1c:ab:72:a4:cf:52:0d:
fc:98:3a:13:7f:35:c3:5e:a8:a2:05:30:85:f8:26:
3e:75:36:6b:54:d9:7d:e2:53:22:fc:96:d8:ac:ba:
e3:88:d9:6e:f2:c5:d1:9b:6a:b6:63:ec:29:cb:38:
fc:a7:03:e7:60:19:69:dc:90:78:c5:27:56:36:3d:
d9:6a:a6:e8:ca:99:d1:65:43:4e:02:e1:65:8d:e3:
12:f5:ba:d4:42:80:b3:17:6c:08:9f:98:bf:fc:02:
35:c6:5e:6f:dc:af:5c:ee:b8:39:bf:e9:c0:19:77:
21:44:13:f9:71:2e:e7:e7:de:37:61:2b:b0:b7:16:
a7:2f:4a:eb:ff:71:11:35:61:aa:0f:2e:d6:2a:79:
04:cf:a9:f0:82:c2:eb:30:06:c3:ce:46:75:f2:58:
e0:3c:c9:26:c0:ab:f8:87:d4:0d:6f:e8:72:94:c1:
6e:95:17:e5:35:0b:d9:ee:5b:84:5e:e2:81:cd:f4:
24:2e:3e:38:25:1b:73:92:75:24:37:36:4e:29:db:
3e:3e:37:40:1c:08:53:a7:1b:e0:18:a4:d8:18:3d:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3F:58:A3:AB:06:2D:73:3F:A9:72:66:5D:F3:EB:5D:FB:FD:07:5E
X509v3 Authority Key Identifier:
keyid:1C:6C:48:CC:CC:E3:21:EC:18:70:29:57:B3:96:38:1A:1F:1A:04:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HGxIzMzjIewYcClXs5Y4Gh8aBBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/WT9Yo6sGLXM_qXJmXfPrXfv9B14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8e4e68-bd2a-4dc2-aae6-a0560ac82ba7/1/HGxIzMzjIewYcClXs5Y4Gh8aBBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.116.0/22
Signature Algorithm: sha256WithRSAEncryption
eb:1d:63:66:28:01:22:7e:95:5c:7b:7d:69:41:2d:5b:b3:58:
48:21:08:b3:e7:00:09:66:ee:33:37:78:60:92:34:18:8c:3c:
63:d5:78:58:06:bf:f4:06:bf:e1:b5:8f:53:f2:a7:cc:29:96:
64:e3:81:95:24:83:a4:2e:86:97:37:66:71:a6:ec:40:8f:73:
61:41:3e:26:df:9f:ee:47:69:52:b2:be:80:c3:d5:0e:fb:1c:
f9:12:3a:1e:c0:3d:3f:30:91:c8:65:a4:a3:a3:5c:cd:be:35:
a2:f1:14:4f:8d:a8:93:3a:84:cb:c4:67:87:6c:83:2b:2c:85:
5b:71:66:02:5e:e6:c5:6d:f3:ea:2e:4b:9c:40:07:29:13:6c:
b2:7e:62:3d:5f:82:92:a6:86:30:48:fa:4d:0a:75:10:be:52:
4e:5a:24:e7:fb:f7:60:4b:51:ba:ca:36:b1:55:c9:74:e7:07:
70:3c:69:eb:7f:19:46:17:69:4b:2d:82:47:93:70:c0:f2:59:
65:99:a6:f4:c7:cf:37:fa:94:d7:bf:4b:d6:e1:69:19:b6:2d:
c2:f9:ec:85:47:cd:70:c3:9b:08:1c:05:7d:e5:3e:ae:74:43:
18:e2:74:9d:ae:50:af:66:0c:0c:41:fa:c3:c2:c3:07:f2:31:
8e:f6:5a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:56 2024 by rpki-client on console-fra.rpki-client.org