Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kw-GWK_NaQDw00_B7UJtDUG-ZWU.roa
File: kw-GWK_NaQDw00_B7UJtDUG-ZWU.roa (raw, json)
Hash identifier: 6dQ7RjNGLN1SDoPeLBw5Pu4GXlfLUl8TAbx/iya/iw8=
Subject key identifier: 93:0F:86:58:AF:CD:69:00:F0:D3:4F:C1:ED:42:6D:0D:41:BE:65:65
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A9308519DC9BACCC5B97E01CE9B24DDDD
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kw-GWK_NaQDw00_B7UJtDUG-ZWU.roa
Signing time: Thu 14 Sep 2023 09:31:50 +0000
ROA not before: Thu 14 Sep 2023 09:31:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 185.206.250.0/24 maxlen: 24
185.126.80.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Nov 2023 16:59:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:93:08:51:9d:c9:ba:cc:c5:b9:7e:01:ce:9b:24:dd:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 14 09:31:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=930f8658afcd6900f0d34fc1ed426d0d41be6565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c5:79:19:c1:9e:a0:7a:c1:c6:3c:e1:d1:46:
8b:d9:42:16:84:61:4c:3f:9a:28:9d:d6:41:c1:fb:
e7:c6:32:10:59:71:2e:a6:dc:2e:bc:e9:e4:38:86:
7d:7c:40:73:c9:00:46:eb:ef:94:ba:17:72:97:d8:
90:b0:25:7b:68:ec:65:ce:38:08:15:f7:89:4b:22:
81:50:08:4a:b8:2a:46:2a:cc:ae:4a:b1:d1:f0:e9:
e9:25:8a:53:60:24:aa:b3:cb:f3:00:90:d3:d2:66:
d3:b6:49:96:f5:44:d1:c5:6f:09:37:52:c5:d7:34:
d8:31:53:5d:f2:49:a5:62:0b:de:d4:99:6b:40:1b:
7c:60:b8:e8:70:d4:35:df:05:d5:c1:5c:4d:94:62:
e9:8c:96:d8:db:73:d1:57:fe:7c:b8:34:9b:f0:fd:
1d:7d:28:c8:f5:07:26:ed:2a:c1:bb:23:d3:3e:d4:
3a:6b:4f:da:13:2e:88:bd:54:71:99:2e:d1:99:09:
b9:2e:a0:d1:ef:b2:63:94:ec:4a:bd:f9:10:18:23:
6c:3b:45:d3:1b:6a:0d:75:67:f8:03:8f:c0:bb:d8:
8d:7b:95:06:ee:2e:76:73:8d:af:8e:53:5c:d9:a8:
83:c0:12:0f:70:64:39:5e:25:ba:7f:bf:ae:bc:92:
cf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:0F:86:58:AF:CD:69:00:F0:D3:4F:C1:ED:42:6D:0D:41:BE:65:65
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/kw-GWK_NaQDw00_B7UJtDUG-ZWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.126.80.0/24
185.206.250.0/24
185.251.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:85:87:92:d6:4b:c7:45:76:f1:c3:0b:45:c6:14:95:62:e5:
3a:1f:60:35:c0:4a:7e:92:1c:36:18:07:68:b1:65:60:dc:79:
9a:1b:68:3d:44:c8:be:0d:16:92:aa:59:c2:f5:24:b8:65:fe:
fc:62:32:9d:1e:3e:26:b8:7b:bf:4e:26:24:e0:53:db:d3:74:
e7:46:07:ef:ea:c0:50:55:5e:0f:9b:8f:d0:c6:b8:c0:53:03:
f9:6c:dc:e7:53:a4:97:cc:00:7f:47:a3:c9:b7:2b:df:26:a4:
ee:8d:63:86:dc:f4:eb:1b:81:be:9f:e9:ba:4c:1b:fb:81:da:
7a:84:0b:45:7b:e8:01:5c:95:7a:c1:5b:73:66:38:4a:61:98:
78:d3:cf:1b:fb:54:a4:af:8e:88:26:0d:ba:0e:95:e6:dd:92:
6d:36:e2:d2:40:76:b0:d0:dc:8c:00:0b:86:b4:cd:13:bc:ba:
b5:29:d9:f1:32:a5:5b:7a:d8:de:c5:0f:fb:13:09:f8:30:8e:
aa:3c:04:96:9a:7f:67:59:05:43:f5:b5:3c:15:77:8c:a9:aa:
b2:50:3d:26:57:49:6d:f9:08:0d:89:ff:85:02:24:a0:5a:03:
38:c1:c8:fc:15:22:ab:65:ab:44:b5:df:fe:bd:e1:f7:4f:df:
4a:07:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org