Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WwLu7OXl-JNZ8eDSiPtqP4wdo0c.roa
File: WwLu7OXl-JNZ8eDSiPtqP4wdo0c.roa (raw, json)
Hash identifier: dD5N4u2mJJnX1dL+yn4INI624Ukyp4E+jcczgU79nAQ=
Subject key identifier: 5B:02:EE:EC:E5:E5:F8:93:59:F1:E0:D2:88:FB:6A:3F:8C:1D:A3:47
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018611C6D90EAC703CAF13A86ADDCDEC36BA
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WwLu7OXl-JNZ8eDSiPtqP4wdo0c.roa
Signing time: Thu 02 Feb 2023 10:58:09 +0000
ROA not before: Thu 02 Feb 2023 10:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
109.205.212.0/24 maxlen: 24
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.219.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:c6:d9:0e:ac:70:3c:af:13:a8:6a:dd:cd:ec:36:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 2 10:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b02eeece5e5f89359f1e0d288fb6a3f8c1da347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5e:b3:ba:73:46:d7:ec:d6:cb:a8:3f:49:23:
74:21:bf:d9:d1:d1:5e:c7:8e:a5:d6:46:67:a4:6c:
70:38:2f:37:8b:0a:ef:04:57:83:81:15:8e:a6:8d:
f0:5b:94:eb:2d:80:b9:ea:4b:7c:55:7c:7b:92:5d:
da:ac:49:84:e8:c6:8a:7e:a4:a4:43:52:fb:fe:c0:
87:29:b9:45:a0:3f:0f:25:a5:3f:03:40:74:cd:d8:
97:37:78:14:12:59:ac:58:ff:33:c6:5e:9e:89:7c:
a3:63:6c:94:41:82:42:fa:82:f9:34:11:76:49:41:
79:4f:99:ba:a3:4a:3e:98:53:ea:c9:eb:62:f7:73:
41:13:13:93:e9:29:ec:8a:95:7a:36:bf:7d:a3:34:
98:e7:cb:ed:78:09:46:23:8c:6a:6c:28:0b:7a:33:
20:26:6d:e7:4e:b0:bc:14:28:69:81:60:68:db:5b:
5c:6d:d4:99:ad:34:c4:bf:c2:34:7e:43:a5:23:9e:
89:f6:9c:26:13:44:7c:e5:45:1a:78:85:e2:ae:48:
ad:a0:29:a9:1a:5d:60:29:3c:74:88:ba:55:c2:2c:
86:02:87:e7:9a:7b:b1:63:ef:20:09:53:28:ab:b7:
09:ea:a7:38:9b:57:2e:e0:4b:7a:25:3f:3e:8b:ea:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:EE:EC:E5:E5:F8:93:59:F1:E0:D2:88:FB:6A:3F:8C:1D:A3:47
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WwLu7OXl-JNZ8eDSiPtqP4wdo0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.96.0/24
46.23.98.0-46.23.103.255
109.205.212.0/24
185.81.216.0/23
185.81.219.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:6c:44:7a:0c:23:0e:dd:e8:2c:f9:c4:2b:87:df:a1:09:34:
05:be:1f:ac:88:51:42:de:f4:8e:8d:ab:86:bb:34:36:93:e0:
e7:6a:d9:22:be:af:74:a6:f9:80:fc:e3:41:fc:09:00:8f:96:
c6:92:08:ff:04:6a:c0:df:32:a1:a0:43:04:40:1d:69:50:89:
40:10:ab:61:cd:b4:65:37:75:c1:81:e5:96:e2:b7:1b:d4:9e:
44:ec:1d:0a:53:ec:ff:a8:d7:73:30:b7:7f:f3:8c:e5:14:11:
05:a2:bd:8c:cd:f8:1e:02:b0:40:33:60:96:51:a6:d4:d1:7e:
ab:de:c3:ae:00:df:10:fe:25:fa:8e:7b:94:46:24:4b:42:1f:
f8:92:4d:46:48:2d:ea:03:ea:29:1e:82:8f:8f:88:2b:cd:6b:
5f:bd:1d:24:5d:64:9a:a7:b4:ef:b4:37:e4:6c:59:24:5d:26:
bb:40:b0:3b:55:3b:87:32:9a:65:6c:b8:10:ef:69:51:94:01:
08:94:ba:33:85:74:e7:4f:63:2c:33:72:aa:a4:01:2e:12:d7:
b2:c7:80:a5:9e:28:fb:77:0d:2c:cf:b5:61:a3:bc:d2:e2:be:
89:8f:60:1b:df:4e:3e:d7:0c:ac:84:e1:31:7c:a3:17:8a:48:
30:a7:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org