Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/wGYNGTnMMBpuovE5QyPb4dLU-kU.roa
File: wGYNGTnMMBpuovE5QyPb4dLU-kU.roa (raw, json)
Hash identifier: WZVIN7rcnkqdW1npwKKrASpFctaACA3J6+zzqv2Z9+E=
Subject key identifier: C0:66:0D:19:39:CC:30:1A:6E:A2:F1:39:43:23:DB:E1:D2:D4:FA:45
Certificate issuer: /CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Certificate serial: 0189DF01B31F398E5703AB06493DC2AD02FF
Authority key identifier: 24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/wGYNGTnMMBpuovE5QyPb4dLU-kU.roa
Signing time: Thu 10 Aug 2023 10:32:57 +0000
ROA not before: Thu 10 Aug 2023 10:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205958
IP address blocks: 185.194.102.0/23 maxlen: 23
185.30.170.0/23 maxlen: 23
185.215.132.0/23 maxlen: 23
185.30.168.0/23 maxlen: 23
185.215.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 10 Aug 2023 11:53:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:01:b3:1f:39:8e:57:03:ab:06:49:3d:c2:ad:02:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=247405e9cee39d71944d5e3149eb01b61f9adb1e
Validity
Not Before: Aug 10 10:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0660d1939cc301a6ea2f1394323dbe1d2d4fa45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:52:58:f1:00:cd:23:a5:dd:94:89:5c:2e:
c4:e4:0b:ae:43:18:03:b0:82:aa:a6:d0:b0:2c:bf:
99:ab:e9:86:05:f7:1f:a6:92:35:6e:28:16:f5:bb:
ba:07:6d:31:0b:f3:da:75:80:07:6c:1e:66:89:5e:
fe:1d:9f:6d:5c:c2:c0:22:94:47:76:33:d2:e4:f0:
aa:15:f8:59:37:79:2e:93:23:09:3c:d2:0e:37:51:
ac:53:31:d6:9f:59:1f:df:50:6d:81:0c:da:d8:4f:
2c:52:d9:4c:13:cf:ae:00:a8:d6:38:77:50:ca:36:
bc:47:be:56:52:5a:e5:ff:60:3b:2d:b1:a3:35:73:
d1:c0:91:c8:b8:58:62:91:ec:e2:08:4d:eb:1f:f0:
b5:94:2d:dc:a6:42:92:de:99:92:d3:7b:1b:94:a3:
db:a0:73:ba:7d:f8:d3:87:88:7b:7f:ea:bb:fb:05:
9f:7d:76:9f:b1:a1:9b:47:71:da:4b:53:3f:a9:80:
e5:06:4b:f1:96:4b:9d:a3:67:6d:18:78:0f:98:09:
95:33:71:74:25:b7:bc:b7:8a:ef:16:8c:40:00:50:
61:8b:0f:85:23:e3:5b:cb:b4:36:ff:8b:43:42:46:
cc:2f:16:56:b0:d5:aa:3b:d7:25:ec:d6:12:db:07:
86:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:66:0D:19:39:CC:30:1A:6E:A2:F1:39:43:23:DB:E1:D2:D4:FA:45
X509v3 Authority Key Identifier:
keyid:24:74:05:E9:CE:E3:9D:71:94:4D:5E:31:49:EB:01:B6:1F:9A:DB:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JHQF6c7jnXGUTV4xSesBth-a2x4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/wGYNGTnMMBpuovE5QyPb4dLU-kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9a3a98-d670-4343-9206-47bbaca078ff/1/JHQF6c7jnXGUTV4xSesBth-a2x4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.168.0/22
185.194.102.0/23
185.215.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:a4:c3:2f:ee:72:13:06:23:9c:eb:07:1b:ab:05:a0:19:a8:
b3:ba:e3:ef:7a:d5:e0:46:41:e7:41:92:23:01:18:74:d1:2a:
5d:9f:0a:da:4d:5c:b5:e8:7a:23:7c:ed:c3:db:8c:e5:26:62:
f3:89:6d:db:72:b7:62:c0:e6:ce:cb:75:77:ea:78:dc:3d:b9:
17:e7:4a:d8:0e:60:9d:da:87:a8:30:b3:45:70:dd:3b:7e:88:
0c:98:57:5c:45:eb:25:52:5a:0f:6b:b4:a9:a3:12:6e:c0:ba:
33:5c:97:5a:e2:39:d1:3f:68:ee:4f:b8:66:c6:a7:6d:61:76:
ab:91:bf:5e:ec:6e:6f:d1:78:b2:5c:6b:60:52:21:50:ad:71:
1d:ed:4b:2d:a1:90:3d:b6:83:41:08:1e:84:c9:49:ba:88:97:
f4:c4:25:4c:08:0e:81:3e:53:cf:33:06:e2:9e:6d:7e:a7:08:
e0:0c:54:95:e7:82:88:fa:40:10:24:f3:bb:bc:9b:a5:4b:4b:
f3:c6:61:5b:6a:88:4e:d5:b5:fe:3e:f7:76:18:4a:ae:5a:79:
e5:9d:77:9d:04:9d:55:0f:63:bb:a2:69:78:b0:3c:42:e5:13:
51:55:16:e2:a8:49:ae:50:52:fe:94:7b:0f:f0:91:2a:c9:4a:
ff:04:2d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:16 2024 by rpki-client on console-ams.rpki-client.org