Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/WfwZfAE1WSkk6Ns-SeWkIaTFb04.roa
File: WfwZfAE1WSkk6Ns-SeWkIaTFb04.roa (raw, json)
Hash identifier: kBhmvv5eBtvl2opFeUlxdzu4fVOmHmJTtZvMK+cCw4U=
Subject key identifier: 59:FC:19:7C:01:35:59:29:24:E8:DB:3E:49:E5:A4:21:A4:C5:6F:4E
Certificate issuer: /CN=cc40d96242b082efe5b4f2258820b3059396198d
Certificate serial: 018570152093F36312DFA87C31C6F68A1095
Authority key identifier: CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/WfwZfAE1WSkk6Ns-SeWkIaTFb04.roa
Signing time: Mon 02 Jan 2023 01:25:10 +0000
ROA not before: Mon 02 Jan 2023 01:25:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39210
IP address blocks: 185.235.148.0/22 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:20:93:f3:63:12:df:a8:7c:31:c6:f6:8a:10:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc40d96242b082efe5b4f2258820b3059396198d
Validity
Not Before: Jan 2 01:25:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59fc197c0135592924e8db3e49e5a421a4c56f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:b2:5e:f4:2a:2f:a6:b1:71:0b:83:4a:01:
6d:b3:ad:f4:b6:7e:ae:62:3a:59:bd:2d:bb:7c:9b:
db:7c:78:c3:a7:a9:4d:01:b9:63:47:c4:89:cb:2c:
06:f7:bd:a0:c6:e9:15:38:18:ef:97:08:8d:24:b4:
bf:46:02:c6:3c:a7:32:93:8d:c8:5d:16:0b:2c:c7:
d6:1a:2c:d4:3c:8b:16:a5:be:69:30:fc:5d:f7:7f:
a2:7e:4d:ec:30:2e:f8:1f:bd:e6:b7:39:00:a8:12:
61:c4:b4:f2:f1:c1:c4:fa:f2:3c:fa:f1:58:ea:3f:
e2:fa:88:7a:92:5c:3a:ca:fb:bc:d1:e6:5d:b0:ba:
5d:da:37:aa:49:97:5b:0d:71:44:52:ce:75:77:8e:
72:5e:58:f5:45:de:71:67:74:61:b0:04:7e:f0:c4:
9a:ce:3d:aa:f8:10:02:05:a7:90:b8:ac:8f:e0:7e:
03:e5:5e:d7:66:af:ed:f2:4f:0f:63:4e:72:2f:f1:
32:2b:da:8b:d4:b2:4c:3d:67:28:df:80:a5:a0:92:
97:d9:c1:81:ee:e5:f9:29:1b:ab:99:36:86:e4:d2:
61:1f:2c:6b:0b:bc:7a:60:52:32:ac:65:c2:0f:27:
5c:f2:fe:36:2b:27:73:a1:d1:79:01:c9:60:d2:51:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FC:19:7C:01:35:59:29:24:E8:DB:3E:49:E5:A4:21:A4:C5:6F:4E
X509v3 Authority Key Identifier:
keyid:CC:40:D9:62:42:B0:82:EF:E5:B4:F2:25:88:20:B3:05:93:96:19:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEDZYkKwgu_ltPIliCCzBZOWGY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/WfwZfAE1WSkk6Ns-SeWkIaTFb04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1aa69f-db55-4fba-bce9-c1ebe61549cc/1/zEDZYkKwgu_ltPIliCCzBZOWGY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.148.0/22
Signature Algorithm: sha256WithRSAEncryption
07:c2:90:2b:44:ed:67:b7:ff:97:f2:cc:cc:88:39:e5:89:62:
1b:f4:0b:2d:5d:25:67:d5:9f:41:0f:a2:53:97:ef:f1:d7:ee:
e6:50:b8:f4:5d:a2:bf:7b:a2:aa:17:d2:b1:32:2f:f7:e5:21:
05:ce:ef:1b:d7:44:f3:0e:72:a0:96:6f:89:c0:59:44:5d:8f:
8c:7e:9f:9b:39:53:02:74:a6:b3:c2:c3:9b:2a:62:84:60:82:
25:dc:06:3e:9a:89:41:b7:c6:2d:15:fd:bf:bd:73:d1:79:98:
08:a7:0f:50:b3:fa:32:1f:0f:eb:f1:06:67:ee:57:28:54:53:
f1:87:83:f2:d5:ae:e8:09:33:25:80:3c:5a:f1:93:be:99:5e:
4d:b7:d8:be:0e:21:8f:49:12:43:6e:d1:9b:0e:73:15:52:35:
ff:93:83:43:43:4d:0f:3a:de:0c:fa:d8:bd:14:8d:fa:3d:83:
f3:4b:e7:70:9d:36:ab:65:dd:14:5b:a1:79:40:5c:18:04:5f:
9b:ce:7b:5c:7a:23:59:c5:4d:2a:9b:b1:b5:e4:5c:9a:29:86:
8a:8d:bc:f2:1c:29:ce:64:85:d3:2f:09:f8:d2:78:d4:82:9f:
6f:0c:6d:bc:c0:0f:86:0e:7f:28:93:76:73:0a:c7:a2:f0:19:
d4:50:ed:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:03 2024 by rpki-client on console-ams.rpki-client.org