Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wAVHhSKAo--VbF1ZQ0hE8RevL3c.roa
File: wAVHhSKAo--VbF1ZQ0hE8RevL3c.roa (raw, json)
Hash identifier: GpGwyV1h7uogd92uqvBc+FMcDp3HGQkERrhsdpgkchM=
Subject key identifier: C0:05:47:85:22:80:A3:EF:95:6C:5D:59:43:48:44:F1:17:AF:2F:77
Certificate issuer: /CN=d7cc56a1f20d5a603296619635786fde26458d12
Certificate serial: 01877F387FAFD951951DBF0C3C3ABF561EA3
Authority key identifier: D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wAVHhSKAo--VbF1ZQ0hE8RevL3c.roa
Signing time: Fri 14 Apr 2023 10:03:41 +0000
ROA not before: Fri 14 Apr 2023 10:03:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29037
IP address blocks: 217.17.16.0/20 maxlen: 24
77.236.112.0/21 maxlen: 24
79.171.176.0/21 maxlen: 24
192.54.68.0/22 maxlen: 24
192.54.67.0/24 maxlen: 24
178.248.216.0/21 maxlen: 24
185.5.168.0/22 maxlen: 24
77.236.104.0/21 maxlen: 24
2a01:5580::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:38:7f:af:d9:51:95:1d:bf:0c:3c:3a:bf:56:1e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cc56a1f20d5a603296619635786fde26458d12
Validity
Not Before: Apr 14 10:03:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00547852280a3ef956c5d59434844f117af2f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:1e:76:44:e3:05:71:52:ed:88:3a:83:2e:0b:
72:3c:42:bb:2a:37:65:30:51:53:21:de:21:5b:9a:
c4:3c:d2:d1:05:eb:a3:de:1d:3a:46:4d:63:8b:fc:
25:f5:57:ec:f9:a2:e5:06:47:64:99:3e:fa:69:3a:
73:03:8c:46:d4:26:1b:ec:98:6e:da:f1:fb:98:38:
11:e8:35:e1:09:d2:4a:bc:93:da:de:e0:64:1d:32:
20:84:3c:82:ee:7f:ae:1a:f1:34:00:fe:1e:84:a4:
77:cf:af:ea:36:5f:7d:fa:7f:9c:1d:59:50:e2:d7:
66:a0:9e:6f:ef:d9:43:f9:08:49:f4:66:19:74:7c:
fe:61:dc:3b:b2:18:5a:37:f8:c1:76:6f:1b:82:21:
ff:ce:5e:2c:a1:f4:da:85:73:62:00:60:34:98:f7:
13:e7:06:21:0f:d3:79:3d:6b:dc:38:29:cf:cf:d8:
ca:e2:9c:5e:24:eb:68:9e:01:42:ba:9f:e6:e0:cb:
af:5d:7a:54:46:b9:6f:fa:35:6a:5c:96:8c:09:8b:
25:ca:95:6e:c0:c6:c7:9c:47:0e:93:cd:cc:4c:6a:
62:f5:49:0f:2c:78:70:70:95:d1:bd:26:10:21:f7:
ea:fa:72:57:37:a4:ed:27:8a:d1:05:ea:45:e6:38:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:05:47:85:22:80:A3:EF:95:6C:5D:59:43:48:44:F1:17:AF:2F:77
X509v3 Authority Key Identifier:
keyid:D7:CC:56:A1:F2:0D:5A:60:32:96:61:96:35:78:6F:DE:26:45:8D:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18xWofINWmAylmGWNXhv3iZFjRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/wAVHhSKAo--VbF1ZQ0hE8RevL3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/991ad9-d953-43a8-8584-723b33cb0ef9/1/18xWofINWmAylmGWNXhv3iZFjRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.236.104.0-77.236.119.255
79.171.176.0/21
178.248.216.0/21
185.5.168.0/22
192.54.67.0-192.54.71.255
217.17.16.0/20
IPv6:
2a01:5580::/32
Signature Algorithm: sha256WithRSAEncryption
67:86:10:64:af:03:3a:e9:bd:29:33:45:e1:43:4d:91:f7:cc:
99:4e:95:d3:a4:d9:b5:d2:b3:57:8c:73:e2:50:42:18:05:12:
9d:c2:fa:2a:9d:76:ea:e4:95:80:80:48:ba:36:43:42:65:e4:
a1:93:7f:0c:91:8a:2a:9d:d2:cd:e9:c6:bc:f3:5b:30:b5:2b:
0b:f4:0f:87:9a:d9:8f:57:fc:bc:29:d4:77:04:5e:2d:4d:34:
98:09:d9:6d:35:65:20:15:29:7a:09:68:c9:59:85:87:40:7d:
89:97:5b:d7:58:94:fc:a2:55:0e:fd:45:07:e1:1a:b0:52:25:
af:0f:b8:95:b1:aa:14:dc:70:0a:b0:ad:80:c9:c1:1b:4c:fb:
73:54:db:ee:e4:31:89:6e:9b:12:a1:d7:64:f2:c1:45:a1:7c:
ba:bb:4e:bd:83:89:c2:5a:f6:59:b5:4b:f0:62:30:d6:fb:49:
32:9d:0a:8e:c5:03:9e:87:5f:4d:0f:12:e8:79:98:b7:1a:78:
ac:ff:fe:a0:1a:68:bf:03:40:f8:db:d6:35:2b:9c:47:31:30:
36:98:c8:67:2b:5f:f3:a4:4c:1d:05:dd:44:02:45:74:61:54:
6c:fb:37:5b:31:64:16:7e:e1:1b:df:46:85:38:e2:0f:37:e4:
a9:13:16:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:40 2023 by rpki-client on console-ams.rpki-client.org