Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/wFXtnFsgAKGcr8f5UNAOLmdx9Gg.roa
File: wFXtnFsgAKGcr8f5UNAOLmdx9Gg.roa (raw, json)
Hash identifier: 8gL9VeQ4h0b93uop5Yu9XVWNevi1FtzepKRDdhFcXjw=
Subject key identifier: C0:55:ED:9C:5B:20:00:A1:9C:AF:C7:F9:50:D0:0E:2E:67:71:F4:68
Certificate issuer: /CN=0eae204b66eb4ecfeac2d2e180f2ee686b9aa7d7
Certificate serial: 018A0CA0962EC04CB06C72FA5D12F34C8BD4
Authority key identifier: 0E:AE:20:4B:66:EB:4E:CF:EA:C2:D2:E1:80:F2:EE:68:6B:9A:A7:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dq4gS2brTs_qwtLhgPLuaGuap9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/wFXtnFsgAKGcr8f5UNAOLmdx9Gg.roa
Signing time: Sat 19 Aug 2023 07:09:25 +0000
ROA not before: Sat 19 Aug 2023 07:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205460
IP address blocks: 185.218.10.0/24 maxlen: 24
185.218.11.0/24 maxlen: 24
185.218.8.0/22 maxlen: 22
185.218.8.0/24 maxlen: 24
185.218.9.0/24 maxlen: 24
194.55.142.0/24 maxlen: 24
194.55.140.0/24 maxlen: 24
194.55.140.0/22 maxlen: 22
194.55.143.0/24 maxlen: 24
194.55.141.0/24 maxlen: 24
2a09:c380::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0c:a0:96:2e:c0:4c:b0:6c:72:fa:5d:12:f3:4c:8b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0eae204b66eb4ecfeac2d2e180f2ee686b9aa7d7
Validity
Not Before: Aug 19 07:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c055ed9c5b2000a19cafc7f950d00e2e6771f468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e3:63:50:f3:2c:1a:87:d7:70:ba:b6:8e:88:
b5:11:4a:66:a9:c4:d9:c7:9c:61:f6:95:96:9e:09:
fd:27:dc:9f:60:2f:97:4a:9e:ed:32:c2:71:3c:75:
b7:81:8d:01:06:42:2e:d5:a4:1f:de:e1:d9:39:a5:
ad:59:5f:da:17:b2:7d:5e:51:f9:2d:98:cb:e1:7f:
d1:cc:7b:23:19:85:b5:7b:db:e8:05:b2:cb:3b:45:
af:09:10:2d:a9:c7:30:bf:25:73:80:33:ac:6f:2e:
f3:2c:de:3d:23:50:5e:bb:16:31:29:0e:54:69:e1:
e8:ac:e6:74:bd:89:31:4e:17:49:ef:95:19:59:11:
e9:15:ef:e3:4f:ec:06:05:0a:2f:ea:2f:0f:3b:3e:
bf:c9:37:49:e3:af:e9:24:c9:1c:64:84:0a:db:a6:
6b:25:a7:15:5b:68:35:c1:a3:81:87:05:ad:ca:bf:
d7:65:f4:e5:42:41:17:40:8e:bd:8f:0b:42:3f:34:
96:18:bd:9d:a4:71:c2:43:d8:b8:d8:17:02:78:33:
e5:21:fc:c7:b2:c0:f9:ad:55:f6:46:87:b3:a5:a2:
86:8b:56:8e:59:0b:5b:d9:2b:22:20:e3:38:bc:5c:
ae:53:c2:3c:83:ee:3e:46:0f:13:76:b9:83:3d:58:
34:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:55:ED:9C:5B:20:00:A1:9C:AF:C7:F9:50:D0:0E:2E:67:71:F4:68
X509v3 Authority Key Identifier:
keyid:0E:AE:20:4B:66:EB:4E:CF:EA:C2:D2:E1:80:F2:EE:68:6B:9A:A7:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dq4gS2brTs_qwtLhgPLuaGuap9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/wFXtnFsgAKGcr8f5UNAOLmdx9Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/adcd18-eb22-4031-be5d-4287346c7f18/1/Dq4gS2brTs_qwtLhgPLuaGuap9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.8.0/22
194.55.140.0/22
IPv6:
2a09:c380::/32
Signature Algorithm: sha256WithRSAEncryption
c9:57:84:19:06:82:c1:73:99:dd:66:9b:b3:30:16:34:ec:11:
82:b6:5c:e4:b0:c6:02:5c:1f:06:16:86:fc:71:ef:7e:9c:b4:
5f:4c:3d:9d:cc:50:44:3a:83:f4:44:6d:c2:29:b4:0b:ad:72:
0c:46:4c:19:b3:0c:72:60:4d:65:50:62:18:9f:0a:13:e5:a1:
ab:77:1e:fb:13:b6:09:a3:c2:b3:19:5f:5a:e6:62:58:7e:ef:
cd:26:92:61:5d:72:19:89:4d:41:97:48:e8:36:35:a7:35:c2:
e6:b2:77:30:aa:4e:d9:43:56:b5:ec:43:37:cf:c7:2b:35:b0:
ee:1a:bb:39:28:9e:40:7f:9e:9d:6d:6c:3f:46:87:c0:b1:6a:
10:59:5a:95:cd:14:a1:38:59:bb:be:5d:86:fa:e5:03:b9:27:
24:5d:c2:85:0d:d7:e2:03:9d:33:5c:50:39:70:ef:23:70:f6:
08:e7:fe:97:98:ad:b8:da:86:13:33:c3:a1:6e:18:1a:73:b0:
3a:53:4a:45:b3:a7:2b:93:c7:46:a1:b0:60:df:d4:1e:29:ff:
c5:de:0c:34:b3:9e:b7:df:48:04:27:d5:fc:c6:d0:97:30:2f:
29:3c:cc:1b:ba:04:6f:b1:6b:96:8f:e0:ab:7d:8b:8a:04:2f:
bb:6b:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 21 07:52:50 2023 by rpki-client on console-ams.rpki-client.org