Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EWw5Qr1PEu3DYqcWUJ9fzE_OENw.roa
File: EWw5Qr1PEu3DYqcWUJ9fzE_OENw.roa (raw, json)
Hash identifier: B/Thb/y5uAbSl/kPtsMLTH4ooSfnU7isN8p3ZpONduo=
Subject key identifier: 11:6C:39:42:BD:4F:12:ED:C3:62:A7:16:50:9F:5F:CC:4F:CE:10:DC
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018BA07FDC908331D8EBDD8C7CD45D79607C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EWw5Qr1PEu3DYqcWUJ9fzE_OENw.roa
Signing time: Sun 05 Nov 2023 17:20:15 +0000
ROA not before: Sun 05 Nov 2023 17:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
37.32.47.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a0:7f:dc:90:83:31:d8:eb:dd:8c:7c:d4:5d:79:60:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Nov 5 17:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116c3942bd4f12edc362a716509f5fcc4fce10dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:d3:c6:b6:2c:37:9f:b1:d3:01:40:be:b9:
15:ef:49:53:a1:e3:fc:fd:c4:6b:00:f9:86:91:19:
c5:84:df:5c:96:cf:5f:7e:d7:75:66:24:df:d3:11:
5b:3b:af:51:55:ec:2e:9a:5b:3a:63:42:ef:ce:44:
71:bb:dd:f4:de:f9:60:d8:90:7a:a2:81:52:0c:ea:
5c:9c:b9:32:70:86:d8:0e:5f:d0:7e:38:90:95:37:
e0:11:2b:c0:0b:af:e1:65:92:df:10:35:ac:f3:19:
0b:e5:c5:17:cf:f9:a6:18:90:7d:e9:98:a6:10:6e:
f1:28:a8:46:70:6c:a3:3e:20:10:b6:f1:6f:b9:b4:
d7:17:9f:39:76:fd:44:c1:36:4b:30:d8:0b:09:da:
6e:34:93:d3:61:e6:4e:ba:bd:f9:fa:a1:20:15:9e:
8a:2d:bc:a6:88:01:aa:95:e7:eb:0e:4e:9e:2d:0a:
cb:dc:ec:a5:30:ad:32:51:ee:73:b4:a5:b0:9a:53:
75:bf:6c:7c:ac:7b:49:7e:15:86:46:de:ea:8b:25:
ed:a9:9c:d1:c3:93:40:69:37:2d:a2:9f:69:4f:1a:
b1:66:a4:09:64:5c:e0:4c:2f:7f:14:97:c3:38:6e:
de:ca:93:bd:a7:99:2f:39:b5:e2:8f:5f:69:d7:83:
d4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6C:39:42:BD:4F:12:ED:C3:62:A7:16:50:9F:5F:CC:4F:CE:10:DC
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/EWw5Qr1PEu3DYqcWUJ9fzE_OENw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.32.47.0/24
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.243.49.0/24
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
c6:9a:ce:27:05:91:79:15:b1:00:88:49:00:40:91:c8:d8:53:
67:fa:9e:54:49:76:c9:63:56:54:98:1f:ea:ed:51:e5:6a:cf:
27:84:4e:c3:de:70:d8:16:70:44:2e:62:d6:26:98:88:86:47:
7c:66:00:4f:70:53:6d:1b:bf:6d:e5:b7:79:13:bc:6e:87:8c:
6d:ff:87:e6:44:d4:70:d8:f5:f7:e0:8c:25:ca:19:98:be:7d:
ef:59:07:5e:2d:4d:70:e0:ae:ab:c6:0b:e3:df:cd:18:5f:b6:
3d:9b:43:87:93:8f:87:c4:d4:08:2a:f4:73:37:ae:f1:b2:7f:
23:7a:92:50:50:9d:33:5a:e7:18:ee:59:5a:9d:1e:09:4c:f8:
db:64:e3:a1:b5:45:24:0e:53:b8:cc:b5:46:11:25:54:32:bf:
c5:2b:90:2d:2d:65:f6:79:3e:73:d8:5c:96:83:ac:b1:e6:c7:
e2:50:c7:d6:f5:ed:e8:eb:74:6e:ab:c3:72:3d:30:f2:1d:52:
80:88:1f:69:a4:79:0c:a2:42:3f:bb:5f:2e:5e:49:41:17:41:
47:9d:2e:63:47:17:53:3e:2a:df:73:23:5d:70:69:de:f1:ae:
49:a1:46:7d:d9:11:2b:0b:f3:fc:b8:82:e4:4d:e6:af:4d:6b:
a8:42:4a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 12 15:02:12 2023 by rpki-client on console-ams.rpki-client.org