Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wTWvMvqGw84tmYbQ3gD-JonuoaA.roa
File: wTWvMvqGw84tmYbQ3gD-JonuoaA.roa (raw, json)
Hash identifier: QNMfJ0LryLrDLO1iuMHAnGKdqndhXV6Ungrc1xQlcmw=
Subject key identifier: C1:35:AF:32:FA:86:C3:CE:2D:99:86:D0:DE:00:FE:26:89:EE:A1:A0
Certificate issuer: /CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Certificate serial: 018571BA2F2173FFBFAEAD5A1AFF85BE99B5
Authority key identifier: EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wTWvMvqGw84tmYbQ3gD-JonuoaA.roa
Signing time: Mon 02 Jan 2023 09:05:05 +0000
ROA not before: Mon 02 Jan 2023 09:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 185.22.56.0/24 maxlen: 24
185.22.58.0/24 maxlen: 24
185.22.57.0/24 maxlen: 24
147.185.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:ba:2f:21:73:ff:bf:ae:ad:5a:1a:ff:85:be:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eac2c1afd4bdec980506fa07df7c8662d554fa46
Validity
Not Before: Jan 2 09:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c135af32fa86c3ce2d9986d0de00fe2689eea1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:92:c3:ed:d2:99:8c:95:2a:15:c7:79:a1:
a8:e7:12:f6:66:52:5a:d2:c2:00:90:6b:0f:a1:6c:
a8:b1:6b:1e:04:80:c0:f7:cb:96:38:a0:cf:13:ae:
27:8f:61:f3:88:e5:c6:4f:33:77:47:84:d0:91:30:
c9:a2:12:d1:31:c3:81:b0:28:ef:b7:01:57:54:d4:
7c:b3:85:11:f1:95:5e:4c:9b:50:83:da:7a:35:b8:
69:bf:2f:10:7f:ac:81:b9:24:04:80:34:cf:77:c4:
cd:62:2a:fe:34:b7:86:d7:8d:2a:e4:86:a0:17:5e:
72:a5:3a:0c:6a:aa:95:52:30:e5:4c:c1:97:6e:dd:
83:b3:8d:f8:1c:5d:96:69:5b:5b:f6:6c:3d:d6:13:
e9:6a:c9:a2:15:56:c7:27:90:d2:06:ad:ac:e6:55:
24:bc:2d:59:6b:c9:9b:c6:be:26:b2:4c:72:bc:f5:
25:c3:51:c7:51:08:c2:f5:d4:aa:c1:37:59:d0:58:
76:3d:9c:02:22:bb:97:cf:48:90:5b:05:e8:27:14:
1f:58:9e:b5:1f:b0:d0:ed:e8:12:1f:39:0a:cd:d0:
18:ca:a9:e5:17:85:4f:9b:d5:a7:61:99:b5:b1:18:
f1:c8:ae:a4:df:39:e2:46:1c:9d:ba:1c:92:80:ab:
ba:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:35:AF:32:FA:86:C3:CE:2D:99:86:D0:DE:00:FE:26:89:EE:A1:A0
X509v3 Authority Key Identifier:
keyid:EA:C2:C1:AF:D4:BD:EC:98:05:06:FA:07:DF:7C:86:62:D5:54:FA:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6sLBr9S97JgFBvoH33yGYtVU-kY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/wTWvMvqGw84tmYbQ3gD-JonuoaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/589a6b-4d7e-4012-a0fc-c0ceb037ad42/1/6sLBr9S97JgFBvoH33yGYtVU-kY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.163.0/24
185.22.56.0-185.22.58.255
Signature Algorithm: sha256WithRSAEncryption
1c:60:a5:8e:5a:99:79:23:25:3b:ba:6d:ce:ff:ba:a0:f2:6a:
a8:b3:f7:7d:88:67:a6:5b:42:31:41:2c:99:fe:cc:7f:9a:cb:
bc:3c:47:d1:dc:47:dc:40:7c:bc:06:83:99:ff:9e:bc:2e:ba:
96:ac:4e:f0:d0:c4:8c:86:25:0e:d3:31:98:09:8d:35:7b:9e:
61:d0:69:45:71:80:2d:b7:49:f1:da:3c:27:a2:77:28:52:76:
52:d4:cf:52:67:49:65:89:67:00:a0:d2:73:8a:20:95:68:23:
0e:d9:83:43:c9:8a:85:b0:95:6d:59:0e:29:17:ba:ed:26:df:
38:ba:50:c7:03:1a:9e:9c:1e:72:e5:ba:07:ea:c5:15:83:c7:
6b:d2:ec:1c:6a:5c:1d:91:79:2c:3e:8e:ce:b6:ad:af:ee:f6:
58:1d:9e:8d:8f:c1:3e:d6:26:b4:53:70:4b:ab:50:c7:b8:0d:
ee:48:81:ac:ad:49:67:f2:38:6f:d7:e1:b2:ae:b5:05:1b:03:
9a:91:78:b7:0e:cb:e8:64:75:71:e4:97:b1:bb:3f:ef:97:6c:
f0:25:b9:26:9f:b1:db:12:d8:cc:0e:0a:15:05:4b:98:65:eb:
df:7d:07:78:6d:a8:aa:fa:de:6c:0f:6d:4b:e3:39:a5:e7:87:
2e:b7:0f:9b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-fra.rpki-client.org