Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/wWxW0EgX-hHazhEhHDwznJc-IUA.roa
File: wWxW0EgX-hHazhEhHDwznJc-IUA.roa (raw, json)
Hash identifier: LQgTqEIjyi8OvBX5mo8pn4gGrTkX7lHeHSntNbM+ggc=
Subject key identifier: C1:6C:56:D0:48:17:FA:11:DA:CE:11:21:1C:3C:33:9C:97:3E:21:40
Certificate issuer: /CN=b0d62d1666c5c4d192183531584afd72bed08485
Certificate serial: 01857270FD83D0F0EEAACFFC05471ED29B60
Authority key identifier: B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/wWxW0EgX-hHazhEhHDwznJc-IUA.roa
Signing time: Mon 02 Jan 2023 12:24:45 +0000
ROA not before: Mon 02 Jan 2023 12:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8248
IP address blocks: 81.186.192.0/19 maxlen: 19
194.63.224.0/20 maxlen: 24
81.186.0.0/17 maxlen: 24
81.186.128.0/18 maxlen: 18
194.63.160.0/19 maxlen: 19
194.63.192.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:fd:83:d0:f0:ee:aa:cf:fc:05:47:1e:d2:9b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0d62d1666c5c4d192183531584afd72bed08485
Validity
Not Before: Jan 2 12:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16c56d04817fa11dace11211c3c339c973e2140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:38:3c:b3:be:a5:94:e2:2e:54:60:06:8d:
dd:4b:f3:56:ea:dc:01:7b:ef:92:5c:be:08:86:9d:
63:03:73:57:bd:79:c4:66:eb:2c:42:f8:a6:7a:46:
4a:0e:5b:4e:f0:73:c3:c5:e8:e9:48:80:71:46:c4:
56:6e:45:de:aa:af:42:e0:28:7b:88:26:18:57:e2:
a8:93:0c:ae:90:87:da:8a:10:9a:cf:c4:ae:c8:78:
10:3d:e4:77:77:fe:be:f3:3c:09:12:e7:22:e2:9b:
a8:19:ef:5e:0b:14:7c:b0:b3:0d:e8:de:f0:7f:53:
72:d8:40:35:1c:19:f3:10:7a:f9:1e:ea:88:fa:35:
fb:e0:06:d8:b4:9b:03:c7:23:b6:8e:57:3b:ab:99:
94:65:de:5c:95:9c:b9:14:5b:61:33:29:92:4a:bf:
34:ce:4b:a4:a8:94:9f:24:ef:92:f9:20:bc:57:da:
96:a4:93:ae:49:6e:65:a9:ab:ae:e7:1d:6c:5d:11:
46:25:0b:50:f2:a4:42:e7:04:a2:6a:6c:c8:59:01:
49:3c:b6:f3:df:8a:5d:09:45:16:2d:b6:dc:4d:c3:
c0:79:91:c5:36:9a:85:70:33:02:52:01:9d:0b:87:
a1:30:d6:ca:0f:f5:13:ff:b1:1f:99:75:08:9a:db:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6C:56:D0:48:17:FA:11:DA:CE:11:21:1C:3C:33:9C:97:3E:21:40
X509v3 Authority Key Identifier:
keyid:B0:D6:2D:16:66:C5:C4:D1:92:18:35:31:58:4A:FD:72:BE:D0:84:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sNYtFmbFxNGSGDUxWEr9cr7QhIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/wWxW0EgX-hHazhEhHDwznJc-IUA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b4aa63-4259-44e6-ac29-4fa53bf0e155/1/sNYtFmbFxNGSGDUxWEr9cr7QhIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.186.0.0-81.186.223.255
194.63.160.0-194.63.239.255
Signature Algorithm: sha256WithRSAEncryption
42:35:5d:d0:f0:74:a2:ba:90:3c:4b:9c:16:3e:13:17:3e:05:
de:f1:f5:aa:19:15:af:3e:15:b0:47:45:d6:b9:79:19:ba:09:
5a:85:99:32:9f:b1:45:2b:74:fe:82:86:30:0e:c2:c4:54:2b:
42:20:50:32:93:62:fe:62:9f:78:6a:c8:eb:d5:02:8b:c4:5a:
43:1a:cf:b4:0f:58:f5:ad:da:74:1f:5b:04:b3:78:2c:23:e8:
ed:6b:4f:8a:c1:07:6e:5c:ec:3d:3c:a3:b5:4c:8a:35:93:e1:
45:aa:44:49:1a:84:1b:d6:5b:e9:17:74:65:6d:9c:ce:5e:86:
76:fe:46:8d:09:5d:0a:11:ca:9d:30:37:37:56:af:84:49:b1:
e6:03:6d:71:49:d5:bc:e1:3f:36:94:23:ea:b9:17:05:5c:a5:
90:ae:97:07:d0:fc:09:98:e7:a8:e5:75:ff:bd:84:09:f5:b3:
d8:b2:47:1f:20:5b:61:78:5b:25:60:c3:74:00:61:38:ec:a0:
a0:f8:8b:20:d0:8b:de:74:a1:8c:36:10:ad:d2:01:eb:37:8f:
57:79:d2:f0:24:68:92:cf:35:e1:5c:9b:65:cd:67:b6:25:86:
23:ad:be:15:0a:c1:d6:78:0f:66:1c:c4:20:14:19:ed:3d:64:
ba:6e:f6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:07 2024 by rpki-client on console-ams.rpki-client.org