Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/WWb25pKInaXjahTqoizDkFTkRig.roa
File: WWb25pKInaXjahTqoizDkFTkRig.roa (raw, json)
Hash identifier: vADo1bxOsttBlR/LTp78J0Bwe3Fh5hXjCzjgcgfh4ck=
Subject key identifier: 59:66:F6:E6:92:88:9D:A5:E3:6A:14:EA:A2:2C:C3:90:54:E4:46:28
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 0186BAC0759B9C77C0794AF92450DD14B446
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/WWb25pKInaXjahTqoizDkFTkRig.roa
Signing time: Tue 07 Mar 2023 06:27:00 +0000
ROA not before: Tue 07 Mar 2023 06:27:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7155
IP address blocks: 185.71.116.0/24 maxlen: 24
185.71.117.0/24 maxlen: 24
185.71.118.0/24 maxlen: 24
185.71.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 10 Mar 2023 05:52:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ba:c0:75:9b:9c:77:c0:79:4a:f9:24:50:dd:14:b4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Mar 7 06:27:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5966f6e692889da5e36a14eaa22cc39054e44628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c0:c2:ac:8a:df:6e:5f:8e:8d:0e:6f:64:33:
b4:6d:22:97:c1:03:64:bc:c0:17:52:26:61:cf:fc:
0a:2e:ad:5d:93:9f:27:32:f0:01:1e:59:66:37:d6:
cb:35:48:72:68:66:ed:75:12:e8:0b:e8:52:27:24:
65:51:4c:2c:8e:51:55:79:1a:c2:9b:46:25:96:f5:
2a:8d:c9:6b:e6:92:0b:f9:a4:6e:f0:9e:a5:59:b0:
ac:99:20:87:65:c0:0b:75:ba:44:1c:dd:80:3a:31:
ac:37:f4:e3:50:21:fb:07:18:6f:65:ca:0d:9d:8b:
8e:36:68:19:cc:5f:39:b3:a2:7d:54:d6:14:25:92:
23:00:e7:6d:72:a8:18:f9:7b:e9:97:70:9f:98:ef:
31:e5:2e:6a:e6:cc:97:39:f9:a7:70:ce:d8:eb:29:
e5:f9:a0:1f:b0:88:3d:31:9f:77:b8:70:2d:ad:14:
b7:99:a7:18:c3:52:2f:86:1d:45:41:10:8c:72:89:
06:93:27:d6:38:2b:82:6e:c1:44:6e:01:92:1c:32:
77:58:81:8f:14:3e:88:c1:2e:28:71:94:79:96:18:
92:f9:a4:0b:9d:43:70:6c:1a:8f:46:d0:9c:d0:8b:
43:f4:5a:97:d4:08:2d:b4:0c:13:b3:54:09:c0:50:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:F6:E6:92:88:9D:A5:E3:6A:14:EA:A2:2C:C3:90:54:E4:46:28
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/WWb25pKInaXjahTqoizDkFTkRig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.116.0/22
Signature Algorithm: sha256WithRSAEncryption
36:1d:61:21:d9:88:79:b3:d7:81:c5:d0:d1:29:06:dd:55:3c:
7e:2e:32:d0:95:39:cf:d6:ca:6d:35:af:f1:cc:48:39:3c:0e:
f3:ae:79:45:69:14:5c:23:25:57:b9:bc:15:7f:5b:79:81:75:
cc:7f:31:ae:31:27:ad:e3:dc:d0:13:36:fa:34:82:ef:f8:8b:
4e:51:60:06:27:bc:ec:cf:00:88:13:8b:7c:a3:e7:48:ec:26:
66:8b:a5:e2:de:6e:c2:3d:82:37:49:25:f3:95:8f:31:52:b1:
45:2b:bf:a8:8e:a3:88:e8:5d:ab:40:34:12:e4:cf:8b:c1:22:
a4:d8:54:96:5f:13:04:e7:1f:cf:1b:b5:9d:7f:cd:4b:58:fb:
1e:00:54:60:3f:4a:35:62:9f:05:59:1a:a1:42:95:e5:5b:82:
dc:c4:8c:e5:c4:ad:76:26:fc:1e:66:7a:8c:02:36:84:2c:e9:
2f:20:c4:77:fa:7a:7f:44:1a:d0:fd:c0:f2:0f:a6:64:d6:c8:
fd:56:88:c5:3d:38:93:e9:61:ff:4b:bd:b7:aa:fd:ba:f9:04:
5c:3a:8f:3f:41:70:aa:ec:fa:6b:86:0d:1d:67:38:ca:49:06:
48:c6:b8:07:dc:42:82:c4:40:97:a0:bb:59:db:af:a4:3a:24:
95:d6:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:11 2024 by rpki-client on console-ams.rpki-client.org