Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/WXuoh-r6axsonGeQbaCkiaAJvcI.roa
File: WXuoh-r6axsonGeQbaCkiaAJvcI.roa (raw, json)
Hash identifier: 2xE6H7yY9x0Z8zouNFpP0vf+8+qaPEamIwaclzeMP+I=
Subject key identifier: 59:7B:A8:87:EA:FA:6B:1B:28:9C:67:90:6D:A0:A4:89:A0:09:BD:C2
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0188D84C11D85DB5354280AC4691A500DA83
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/WXuoh-r6axsonGeQbaCkiaAJvcI.roa
Signing time: Tue 20 Jun 2023 10:14:03 +0000
ROA not before: Tue 20 Jun 2023 10:14:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.186.194.0/23 maxlen: 24
91.186.216.0/22 maxlen: 24
94.241.168.0/21 maxlen: 24
83.147.223.0/24 maxlen: 24
178.253.40.0/22 maxlen: 24
83.147.240.0/22 maxlen: 24
83.147.244.0/22 maxlen: 24
83.147.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d8:4c:11:d8:5d:b5:35:42:80:ac:46:91:a5:00:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jun 20 10:14:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597ba887eafa6b1b289c67906da0a489a009bdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:68:d3:28:62:54:01:5a:47:f1:8e:bd:df:
fd:23:83:a5:d3:5e:84:00:23:6c:35:86:01:6f:b7:
e4:70:87:16:76:82:0b:7c:83:72:fd:ff:5a:ea:7e:
fe:52:79:6a:ec:0d:74:1c:fa:72:f6:35:dc:d0:67:
37:4b:58:72:d4:2b:20:5a:6b:88:ce:30:ad:61:92:
17:da:cc:c4:78:5f:0d:3b:7f:54:ac:b4:a5:7e:0b:
ea:10:c3:58:6a:8b:44:de:9f:59:a7:a0:10:19:15:
d6:92:69:17:4e:f6:19:6f:23:83:5b:82:e4:9c:b9:
9c:61:2f:89:01:d6:57:be:10:90:9c:79:a4:fa:0d:
bd:09:06:50:cd:2c:2f:e6:b2:6a:a5:f5:88:33:37:
38:90:ab:c7:ae:31:68:03:a8:f2:ae:39:49:86:61:
48:6b:e5:0c:8b:a8:19:9b:2e:6d:2e:aa:05:b7:0a:
d2:ae:40:19:a9:3b:16:10:93:c4:84:2c:b5:86:62:
d3:f3:43:de:04:e8:08:4c:ce:51:28:80:4e:d1:e9:
d1:14:fc:4f:b7:d7:9f:43:d8:1f:d3:53:0c:55:11:
fb:d6:50:ea:71:39:8e:4f:75:4c:e0:4b:bf:ee:5e:
55:d4:9a:e8:c2:5f:6b:42:4b:a5:44:f9:d9:07:a4:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7B:A8:87:EA:FA:6B:1B:28:9C:67:90:6D:A0:A4:89:A0:09:BD:C2
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/WXuoh-r6axsonGeQbaCkiaAJvcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.223.0/24
83.147.240.0/21
83.147.252.0/22
91.186.194.0/23
91.186.216.0/22
94.241.168.0/21
178.253.40.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:29:e0:be:ad:6d:a6:bb:aa:d7:78:92:43:79:f8:a7:de:70:
99:c4:d5:d4:19:94:5c:19:2b:6d:79:c1:96:61:bc:b6:d5:23:
af:6c:fe:0f:b1:cb:54:02:c6:e6:39:dd:81:cb:90:a7:76:15:
f0:80:0a:fa:ed:c4:d6:a4:05:b7:83:2e:08:0c:26:e6:03:0b:
66:dc:b4:b8:5b:f1:b9:be:da:0e:da:ee:c4:3c:2e:23:c7:d1:
37:b6:0c:4f:80:17:f3:e7:59:9c:20:7f:51:b1:ae:c4:3b:46:
ae:ae:74:b8:1c:ed:5e:eb:5f:60:9b:bf:d6:d7:4a:cb:60:62:
c8:b2:53:25:6f:92:2a:61:95:9c:a4:d5:77:30:42:2e:46:dc:
f0:5e:10:38:15:57:11:43:64:77:4e:64:46:e1:55:2f:88:16:
fa:1f:58:e6:82:c7:ae:c7:f0:38:ee:a4:5e:d9:fb:ab:98:c2:
06:81:ce:3c:ef:55:cc:39:d7:84:24:d6:f4:c2:ce:09:e2:8a:
8d:87:9c:85:f3:21:04:8e:25:63:d1:95:ea:eb:d4:b3:c9:cc:
82:2a:eb:4c:1c:ad:72:aa:83:9e:db:ae:90:ea:ea:8a:88:94:
d2:03:2e:9d:87:20:fe:cf:75:63:c1:cb:41:c2:d0:7c:c8:f3:
a2:1e:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org