Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/Wrg2drGPVuKoj7Oxu4OI4GWGoAw.roa
File: Wrg2drGPVuKoj7Oxu4OI4GWGoAw.roa (raw, json)
Hash identifier: GTaNTxiAWzDuXC0n8jnVNdbTdTjatjNTdLJkXMvBTrU=
Subject key identifier: 5A:B8:36:76:B1:8F:56:E2:A8:8F:B3:B1:BB:83:88:E0:65:86:A0:0C
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 01865672DA372B886DA026AC9CA94FFE0476
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/Wrg2drGPVuKoj7Oxu4OI4GWGoAw.roa
Signing time: Wed 15 Feb 2023 19:00:12 +0000
ROA not before: Wed 15 Feb 2023 19:00:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209723
IP address blocks: 2.59.200.0/23 maxlen: 23
88.218.148.0/23 maxlen: 23
5.183.60.0/23 maxlen: 23
5.183.62.0/23 maxlen: 23
147.78.226.0/23 maxlen: 23
147.78.224.0/23 maxlen: 23
85.209.4.0/23 maxlen: 23
2a09:ac80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:72:da:37:2b:88:6d:a0:26:ac:9c:a9:4f:fe:04:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Feb 15 19:00:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab83676b18f56e2a88fb3b1bb8388e06586a00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6c:cc:09:7d:64:78:32:04:9a:0d:6c:ef:ad:
33:93:f8:e4:49:e1:07:3c:41:21:0e:18:8b:78:5c:
3f:15:33:ee:ae:7f:84:22:88:a0:b6:aa:2f:d1:25:
eb:b2:93:ef:4b:5c:4c:97:8a:e6:8a:46:18:d1:25:
5a:3e:0a:2a:f9:0b:f3:b1:1a:e6:e1:4a:e6:d1:4b:
ab:c5:a4:d0:66:fc:68:c3:58:02:6f:db:8f:8a:ab:
ce:16:81:74:eb:0b:3d:05:81:12:95:b5:ec:c4:a2:
f4:5e:05:c8:1f:5e:60:d6:28:76:d1:1e:61:89:17:
1d:28:e6:48:10:dc:fd:e4:7c:64:a6:15:40:7d:5c:
98:73:ad:dd:7a:2b:40:da:4d:b7:ca:a0:8e:1a:e6:
72:b8:9a:1b:ff:87:79:58:29:0f:15:37:26:08:b9:
35:83:bf:c6:ad:49:41:1a:3c:01:92:5a:43:7a:b7:
3e:41:a6:6b:e1:12:36:e5:05:9b:95:14:a1:29:4d:
fb:71:7f:e3:c7:f7:46:0e:26:71:bc:11:68:37:47:
04:f5:b8:8e:2b:9a:a7:d8:74:b2:1e:9c:ed:5f:f3:
0b:41:ef:b8:ca:af:70:89:4a:c5:ef:d5:78:0e:04:
3e:de:93:76:10:7f:f6:05:47:7f:49:2b:5b:66:38:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B8:36:76:B1:8F:56:E2:A8:8F:B3:B1:BB:83:88:E0:65:86:A0:0C
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/Wrg2drGPVuKoj7Oxu4OI4GWGoAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.200.0/23
5.183.60.0/22
85.209.4.0/23
88.218.148.0/23
147.78.224.0/22
IPv6:
2a09:ac80::/29
Signature Algorithm: sha256WithRSAEncryption
2b:5b:c3:24:b8:e2:d3:fb:ad:4e:25:a1:11:fb:c6:99:13:95:
eb:9d:66:05:cf:5a:00:fe:c6:1d:be:b5:57:e7:ca:2f:b6:14:
e3:ed:a6:99:ee:33:e0:42:a9:ea:57:58:bc:bd:df:61:ec:b2:
ce:d6:3a:3d:30:f4:77:ff:de:e9:71:45:db:28:98:1e:cc:48:
39:2d:29:00:0a:7a:3b:09:86:ba:7a:e4:47:f4:53:1a:d4:3d:
a2:97:2e:d0:86:29:46:9e:54:92:84:66:ea:5a:26:53:f9:e3:
76:ff:d3:f8:24:8d:b1:c4:9c:74:eb:bf:30:51:f5:e1:02:a8:
fb:51:5e:7f:f6:79:70:06:39:db:ce:e2:19:d7:c8:0d:fe:c1:
87:5f:03:89:0b:e4:0e:34:95:01:58:b6:9d:65:72:a5:5f:eb:
05:b4:43:79:f7:66:bf:ac:fc:c2:ed:71:d1:88:c9:10:87:61:
fd:aa:1b:90:7b:2b:d4:60:6b:f4:75:f5:2d:c8:fa:df:a9:ec:
95:a5:03:09:7e:3d:d2:25:94:dc:bc:1c:ad:5b:3a:57:e4:7e:
7d:27:d2:8f:cd:7d:f5:6d:08:ec:d4:81:64:f5:33:24:62:7b:
c1:de:26:ec:96:e5:06:ec:87:87:26:76:4f:1e:ef:40:63:4e:
3d:0e:b2:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:04 2024 by rpki-client on console-fra.rpki-client.org