Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W6hc1WjjHHfYX8GxBZ5l-EPWpw8.roa
File: W6hc1WjjHHfYX8GxBZ5l-EPWpw8.roa (raw, json)
Hash identifier: qyntVi1DyKYjzP7ay6aaMW6VBavgvie2XlIGmUSfVNo=
Subject key identifier: 5B:A8:5C:D5:68:E3:1C:77:D8:5F:C1:B1:05:9E:65:F8:43:D6:A7:0F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018730E299155519D957C3BD5D6FCCB93ED8
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W6hc1WjjHHfYX8GxBZ5l-EPWpw8.roa
Signing time: Thu 30 Mar 2023 04:59:29 +0000
ROA not before: Thu 30 Mar 2023 04:59:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 188.212.132.0/24 maxlen: 24
188.212.133.0/24 maxlen: 24
87.247.148.0/24 maxlen: 24
188.240.232.0/24 maxlen: 24
185.241.209.0/24 maxlen: 24
185.241.210.0/23 maxlen: 24
91.188.204.0/24 maxlen: 24
89.37.63.0/24 maxlen: 24
93.115.254.0/23 maxlen: 24
45.140.135.0/24 maxlen: 24
94.176.110.0/24 maxlen: 24
185.255.169.0/24 maxlen: 24
185.255.170.0/24 maxlen: 24
185.103.72.0/24 maxlen: 24
185.238.10.0/24 maxlen: 24
2a0b:64c2::/32 maxlen: 32
2a0b:64c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:e2:99:15:55:19:d9:57:c3:bd:5d:6f:cc:b9:3e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 30 04:59:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ba85cd568e31c77d85fc1b1059e65f843d6a70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4f:85:f4:2b:d1:ed:2d:6d:d9:fa:d6:21:51:
ea:b5:6d:03:91:12:60:90:a1:9d:28:b7:4e:c4:da:
15:08:d7:4b:ea:f9:71:0c:0f:01:c5:f0:68:26:c7:
43:63:1b:8d:ca:6e:81:b9:36:a1:ad:94:19:ca:26:
bf:b1:cb:07:6b:67:6f:06:97:ea:0d:e0:ed:41:35:
2e:28:48:25:0d:1e:3d:b4:4a:c8:93:98:ef:8f:72:
32:a4:8c:be:3c:80:10:57:95:d0:31:13:16:c9:b1:
39:0d:b5:71:55:76:51:68:6c:0b:a5:29:54:e1:f8:
bd:54:d2:ad:7d:c2:b6:27:c7:f9:75:e1:86:80:05:
87:c0:77:81:6d:55:83:7e:e9:31:87:ae:e7:53:29:
34:76:31:36:49:f7:67:26:1e:6a:15:9c:b1:cc:f6:
9e:75:22:56:bb:64:c3:01:9e:2b:de:f7:2e:43:1e:
1c:99:f1:42:a8:84:ef:a3:04:ad:24:f0:3a:05:83:
cb:2b:d7:a8:b2:c8:f5:92:d4:96:d1:ed:81:36:08:
32:cf:50:24:c1:3d:fe:92:6b:8f:3f:3b:2b:dc:ce:
b2:a5:ec:bb:f9:fe:5f:68:66:0b:58:bc:0c:5e:48:
c1:48:f2:76:52:e3:3c:c2:bc:67:71:34:11:06:41:
5f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:5C:D5:68:E3:1C:77:D8:5F:C1:B1:05:9E:65:F8:43:D6:A7:0F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/W6hc1WjjHHfYX8GxBZ5l-EPWpw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.135.0/24
87.247.148.0/24
89.37.63.0/24
91.188.204.0/24
93.115.254.0/23
94.176.110.0/24
185.103.72.0/24
185.238.10.0/24
185.241.209.0-185.241.211.255
185.255.169.0-185.255.170.255
188.212.132.0/23
188.240.232.0/24
IPv6:
2a0b:64c0::/32
2a0b:64c2::/32
Signature Algorithm: sha256WithRSAEncryption
3c:01:8a:18:7f:69:7c:6f:1e:0c:4a:1a:6d:d0:ca:43:f8:4a:
06:36:fd:58:3a:96:29:ff:70:c9:c9:7f:b6:96:5c:8d:8b:6d:
7c:01:46:3e:ec:aa:24:04:94:ea:32:53:b9:33:df:9a:41:b4:
a2:0d:ea:1c:90:50:d1:62:ad:ed:bd:f1:70:20:f4:c4:a4:35:
e3:b8:c9:c1:d5:a6:d6:5f:56:85:65:ce:5b:bf:06:f3:9d:22:
a4:03:12:0a:eb:a1:db:b9:85:12:46:99:23:ed:dd:56:97:aa:
dc:fa:44:d0:0a:94:ae:fc:73:44:49:5e:7b:34:c8:9c:1a:8b:
2c:ad:f2:53:31:5a:ec:8b:6d:cb:3b:80:a9:f7:00:45:76:2e:
7c:25:30:f1:81:83:16:a4:d2:1c:ba:65:fd:87:52:da:78:53:
a9:1b:e1:dc:42:3b:a7:5e:ad:f2:1b:41:6c:c1:9e:dc:aa:b5:
ec:1a:b3:41:05:52:94:f4:67:7a:fd:8e:17:4b:ad:39:4a:bf:
6a:1b:57:20:a8:48:0b:97:43:c7:b8:79:ee:84:f6:a0:a4:96:
b3:13:42:65:06:a3:ec:7c:6b:3d:6f:a0:e2:d0:75:41:79:8e:
fc:06:84:4f:85:bf:11:98:c1:cd:fa:23:b2:68:62:31:bc:04:
dd:47:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org