Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/1wvvLSv2DHcRfkTt6MEZYmPJPfI.roa
File: 1wvvLSv2DHcRfkTt6MEZYmPJPfI.roa (raw, json)
Hash identifier: 4NfzaPzuwT/ecfyzVDQ2DTiWSRiyn8HP742fmuH9pa4=
Subject key identifier: D7:0B:EF:2D:2B:F6:0C:77:11:7E:44:ED:E8:C1:19:62:63:C9:3D:F2
Certificate issuer: /CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Certificate serial: 01856CE5EB4823C4EDD902C054F69F3809B7
Authority key identifier: 8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/1wvvLSv2DHcRfkTt6MEZYmPJPfI.roa
Signing time: Sun 01 Jan 2023 10:34:45 +0000
ROA not before: Sun 01 Jan 2023 10:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25598
IP address blocks: 193.135.4.0/22 maxlen: 22
193.135.4.0/23 maxlen: 24
193.5.126.0/23 maxlen: 23
195.245.237.0/24 maxlen: 24
193.200.144.0/24 maxlen: 24
2a03:8780::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e5:eb:48:23:c4:ed:d9:02:c0:54:f6:9f:38:09:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cbd74c6d11d63ca5de3cc637ce967ee97604c67
Validity
Not Before: Jan 1 10:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d70bef2d2bf60c77117e44ede8c1196263c93df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:09:db:a0:0a:7c:a2:47:96:d1:5e:3c:dc:47:
2b:56:7b:df:98:35:f9:7e:a8:99:85:63:61:9a:70:
d8:b9:cf:25:8f:3e:dd:94:f6:5a:ed:06:06:55:25:
b4:2e:54:8c:eb:51:4b:a8:fc:41:0e:34:02:eb:d7:
0a:0c:81:4c:00:26:28:aa:c5:6a:73:c7:d8:39:34:
d1:d8:ad:c4:5a:bb:7c:e6:3b:69:50:9f:ee:1c:6e:
d9:0f:6c:3f:a4:a0:c6:9b:b2:ce:bd:d7:30:da:14:
3d:d7:78:c1:41:bf:6b:c1:70:7e:a2:53:fd:b7:94:
55:3e:48:ef:34:f7:79:b8:97:1c:29:7d:ce:57:4c:
01:82:1c:46:bf:ff:86:e4:af:8e:54:64:8f:1e:28:
c2:8e:88:54:88:96:a9:3f:7e:eb:1c:16:f2:db:dc:
4c:66:e2:c7:bf:d3:9a:c5:60:7c:8a:b9:3f:3d:92:
d8:40:7a:63:a2:25:53:da:50:ee:77:d4:28:53:6e:
89:27:cc:08:70:73:eb:d9:07:b2:a1:d6:62:10:1b:
5f:4c:05:af:41:6c:c5:2b:d5:8b:c9:05:7c:08:20:
6a:34:b9:a9:91:e8:fa:c9:d4:81:53:d4:a6:f6:d5:
be:e0:9e:cc:94:78:d8:a4:97:15:a2:f5:1c:18:18:
92:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:EF:2D:2B:F6:0C:77:11:7E:44:ED:E8:C1:19:62:63:C9:3D:F2
X509v3 Authority Key Identifier:
keyid:8C:BD:74:C6:D1:1D:63:CA:5D:E3:CC:63:7C:E9:67:EE:97:60:4C:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jL10xtEdY8pd48xjfOln7pdgTGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/1wvvLSv2DHcRfkTt6MEZYmPJPfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cd3ffb-09da-4fab-b38e-6c8e5d19377e/1/jL10xtEdY8pd48xjfOln7pdgTGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.126.0/23
193.135.4.0/22
193.200.144.0/24
195.245.237.0/24
IPv6:
2a03:8780::/32
Signature Algorithm: sha256WithRSAEncryption
8c:0a:01:d1:cf:61:ca:9a:41:c9:13:cc:81:95:91:d4:cd:88:
92:eb:35:bb:e8:6e:5d:d7:b7:95:1b:84:0e:d9:dd:43:eb:21:
9c:b7:83:2c:b4:d8:8c:c9:9a:aa:a5:f2:86:47:96:7a:1f:5f:
6d:47:28:b2:2a:08:11:f5:b4:ea:f1:c5:b4:e1:c8:f1:9b:4e:
be:0f:2c:d7:50:4a:3f:06:68:3e:9c:ee:2d:4e:e0:36:5e:dc:
83:56:d1:db:26:23:12:aa:3e:5d:d0:b2:ce:ad:89:ba:bf:b2:
12:b3:f7:88:31:75:cb:7b:5b:82:42:de:68:4a:e5:41:a9:0d:
15:65:17:22:6a:48:26:41:d4:0c:8a:ae:8f:6a:42:d3:11:0b:
96:ed:02:77:02:c4:9f:27:ce:04:bf:55:6e:fb:57:eb:b0:12:
de:ef:5c:8a:11:a1:c9:2e:73:77:89:1a:ab:e3:5d:54:63:4e:
78:d6:c1:37:b7:d5:85:7c:de:fa:88:09:61:22:ac:8a:0f:b1:
e4:7c:27:ce:2d:5e:93:c3:4d:c3:64:b3:8d:4a:77:9b:fd:dc:
0d:bd:ae:33:c5:56:be:1e:8a:59:b7:e9:77:f8:8a:4c:13:f9:
be:eb:66:e5:10:f3:81:9d:17:d9:b5:16:86:f9:42:79:a1:19:
be:30:16:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:15 2024 by rpki-client on console-fra.rpki-client.org