Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WgExQmk1zVeX3I5XFAqqLa-ItuY.roa
File: WgExQmk1zVeX3I5XFAqqLa-ItuY.roa (raw, json)
Hash identifier: GgvVDhs/O6DHx1yJFoN0B3C9vhV2nKaDTrTPfCcQKPE=
Subject key identifier: 5A:01:31:42:69:35:CD:57:97:DC:8E:57:14:0A:AA:2D:AF:88:B6:E6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01892179B3B73B91772C19DCBEE546B25CBF
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WgExQmk1zVeX3I5XFAqqLa-ItuY.roa
Signing time: Tue 04 Jul 2023 15:16:11 +0000
ROA not before: Tue 04 Jul 2023 15:16:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 140155
IP address blocks: 185.223.81.0/24 maxlen: 24
185.227.145.0/24 maxlen: 24
185.227.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 10:39:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:21:79:b3:b7:3b:91:77:2c:19:dc:be:e5:46:b2:5c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 4 15:16:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a0131426935cd5797dc8e57140aaa2daf88b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bb:19:20:fb:f3:85:17:98:0a:d4:6d:44:78:
ad:c6:63:57:45:a0:dd:c8:da:7c:f4:a2:60:cb:87:
af:67:7f:a2:96:3b:d1:0e:d7:b0:04:a0:54:cb:c8:
6b:a2:58:0d:b4:ff:c6:ce:70:f5:01:c6:7d:7d:77:
b7:dd:02:49:ff:d3:58:d8:49:bd:1e:87:fd:8a:ad:
a0:d7:99:5e:70:bf:21:f4:dc:89:c9:77:4e:53:06:
b4:c8:51:6f:5a:14:c0:5a:88:c8:c7:7a:38:36:7a:
bd:aa:e9:81:dc:9a:da:aa:cd:67:90:eb:9a:d1:3d:
b4:2b:0c:48:57:62:56:56:59:43:a1:c1:59:e3:c2:
d3:d2:7a:e8:a7:bd:5b:23:30:6b:ca:1b:84:05:5d:
ad:f8:2b:37:f3:ea:f4:12:90:54:23:fc:f9:4b:4e:
20:00:5e:fa:79:cb:8e:8e:54:c9:e0:eb:22:b9:d2:
5f:7a:f9:c2:85:70:ad:6f:d7:c1:ed:5b:d8:55:b9:
19:01:b8:0b:c9:f4:b8:9d:33:2d:c1:e5:25:2c:57:
e1:41:e3:07:f4:63:3d:e0:dc:0a:64:bd:72:9d:50:
9c:7e:30:ed:e5:40:bf:2c:d4:a9:c9:dc:d4:07:75:
1f:97:48:92:ab:97:ea:2e:f6:32:fa:4f:0c:af:af:
2d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:31:42:69:35:CD:57:97:DC:8E:57:14:0A:AA:2D:AF:88:B6:E6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/WgExQmk1zVeX3I5XFAqqLa-ItuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.81.0/24
185.227.144.0/23
Signature Algorithm: sha256WithRSAEncryption
25:70:c4:be:1e:a7:5b:70:48:b1:3f:ef:c8:f3:ad:2b:19:e9:
56:9b:11:8d:f2:27:67:a0:04:23:c0:ad:13:da:9a:3e:66:c0:
44:cd:e3:96:a7:e9:c8:db:c8:16:33:25:38:9b:4a:71:28:bc:
c7:d3:dc:1b:6a:9d:2f:98:08:4f:39:ae:16:e1:e0:64:6c:4c:
7c:02:66:d6:21:db:25:52:0a:7d:80:23:29:ed:e1:d5:ab:d8:
61:46:57:d0:ec:1c:1d:eb:93:4c:d9:68:77:05:db:0b:97:2f:
ab:f2:8d:8d:19:3e:5e:64:b9:6f:c4:b0:38:af:ee:aa:5f:de:
40:6f:30:d3:02:28:d5:55:3d:ed:59:32:1d:c1:1b:ea:d5:b0:
30:1f:40:e2:d8:23:b9:23:cd:38:5a:44:b7:f6:c0:08:63:4a:
f9:27:18:eb:3c:5d:be:d2:23:d6:5c:5c:57:05:6c:13:d7:95:
55:ad:1b:d1:f1:c0:10:4a:f9:61:43:da:e8:25:2f:d8:85:41:
bf:6e:d5:3a:a9:cb:ba:04:78:1b:95:e5:2e:9b:5e:30:b0:e7:
ba:e1:24:fc:82:8f:1f:fd:f4:a8:60:18:ab:df:70:08:23:1b:
0c:1f:1a:49:ce:41:a3:0c:f0:25:33:e1:fd:a9:1d:3d:5d:03:
ff:46:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org