Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/W88zW9a47DTVBV3VlTDtQscYHWA.roa
File: W88zW9a47DTVBV3VlTDtQscYHWA.roa (raw, json)
Hash identifier: xeupUcrCYeJgdMjd0AaT6+s9fxwMjZUqUac1AfMh9Mg=
Subject key identifier: 5B:CF:33:5B:D6:B8:EC:34:D5:05:5D:D5:95:30:ED:42:C7:18:1D:60
Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial: 018CC94DAD641406288B3767AA0243E567D8
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/W88zW9a47DTVBV3VlTDtQscYHWA.roa
Signing time: Tue 02 Jan 2024 08:32:40 +0000
ROA not before: Tue 02 Jan 2024 08:32:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208660
IP address blocks: 185.213.72.0/22 maxlen: 22
185.226.12.0/22 maxlen: 22
185.226.252.0/22 maxlen: 22
185.226.254.0/24 maxlen: 24
185.226.255.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 14:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ad:64:14:06:28:8b:37:67:aa:02:43:e5:67:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Validity
Not Before: Jan 2 08:32:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bcf335bd6b8ec34d5055dd59530ed42c7181d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:d4:a3:a6:c0:10:d3:4d:be:40:85:06:ea:
b0:4f:57:9a:08:47:3b:f1:b4:92:f4:5c:2c:86:ad:
5d:51:de:3d:83:a6:b1:b4:46:d3:47:d7:32:a0:12:
86:78:e7:3a:09:85:13:f8:03:e0:a4:d9:b9:f2:b4:
ad:dd:fc:f8:1e:1a:01:55:76:71:45:21:43:c4:5d:
2a:f3:3b:3f:1f:37:e5:14:5c:a7:83:fd:a6:7f:1e:
98:98:45:50:7d:ad:06:88:ed:a6:0b:f0:b7:45:20:
5d:e3:a2:bf:61:4d:22:80:58:b9:98:18:bf:09:af:
68:82:38:c9:dd:25:de:4c:9a:0a:13:d2:e6:dc:60:
29:cf:17:36:75:03:1d:1e:2a:b4:1c:75:b6:ca:2d:
21:c8:07:14:b9:d2:c6:92:01:69:4f:b5:eb:e7:57:
c4:4a:b7:7a:a6:3b:ec:40:ed:e1:05:c2:5a:d4:98:
23:d1:e9:71:18:8b:13:47:7a:c1:b5:66:f6:f0:6c:
39:47:9e:a1:24:1a:58:27:ed:fb:a7:3d:44:37:7e:
74:14:3c:39:ce:45:d8:d9:94:c3:45:cb:2b:f7:d9:
d8:dc:43:de:53:32:80:9d:50:de:e9:69:82:00:bc:
7b:bd:91:df:c6:5f:8f:22:50:43:f7:43:8d:82:32:
ba:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CF:33:5B:D6:B8:EC:34:D5:05:5D:D5:95:30:ED:42:C7:18:1D:60
X509v3 Authority Key Identifier:
keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/W88zW9a47DTVBV3VlTDtQscYHWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.72.0/22
185.226.12.0/22
185.226.252.0/22
Signature Algorithm: sha256WithRSAEncryption
45:ec:3d:f4:a8:34:43:93:ea:03:8c:b6:ef:c0:54:35:31:5b:
0d:2e:97:78:72:9a:b5:2b:7d:5f:c0:ab:ab:01:15:08:4f:8b:
c8:bd:d1:c6:42:2f:7d:8c:08:c3:64:73:f8:dd:77:15:70:d6:
ba:f2:5a:f7:a4:48:65:a0:7b:cb:45:7d:c4:ae:25:44:47:62:
67:54:c2:ae:5e:4a:23:1b:3a:e7:74:e5:58:c5:4a:b7:62:a8:
c2:3e:4b:9d:35:e3:90:d0:4e:ca:46:f7:49:3c:65:1f:8b:16:
35:aa:b6:9c:db:c8:27:6b:b5:ec:a9:13:84:00:6f:70:f1:15:
07:83:84:eb:76:60:8f:bb:dc:03:a4:3a:50:c8:91:e9:96:1d:
c9:4b:1a:c2:0b:4c:eb:e5:d4:48:15:48:67:9b:42:d4:89:e0:
69:d4:b3:57:92:8f:ea:b0:62:89:ad:35:71:e4:bc:8c:ac:cd:
23:83:ac:18:e8:53:50:93:c7:0b:c8:ab:93:57:18:60:35:5f:
c7:d9:3e:c1:7f:37:28:df:21:7c:99:30:f0:34:45:a6:1a:ad:
6c:68:a8:50:22:c8:8d:ab:3b:fc:1b:6f:b9:05:64:1c:30:1d:
24:77:a2:8c:03:39:6f:b9:92:eb:13:11:c6:70:1e:e2:83:0b:
e5:55:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:33 2024 by rpki-client on console-fra.rpki-client.org