Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/WbuLJ7omFBqw28upW6QXcRzhHqI.roa
File: WbuLJ7omFBqw28upW6QXcRzhHqI.roa (raw, json)
Hash identifier: HhnMGCyYBNE90ZSIpcmyiuWc9jUzkqeFM93QB6jMzRA=
Subject key identifier: 59:BB:8B:27:BA:26:14:1A:B0:DB:CB:A9:5B:A4:17:71:1C:E1:1E:A2
Certificate issuer: /CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Certificate serial: 018902632099233FCD21BA6C0D8D32DF5BF1
Authority key identifier: D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/WbuLJ7omFBqw28upW6QXcRzhHqI.roa
Signing time: Wed 28 Jun 2023 14:23:18 +0000
ROA not before: Wed 28 Jun 2023 14:23:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201011
IP address blocks: 185.205.132.0/23 maxlen: 23
185.205.134.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:63:20:99:23:3f:cd:21:ba:6c:0d:8d:32:df:5b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8915609656f08f7a28d24b7c4ba9b639ca0b009
Validity
Not Before: Jun 28 14:23:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59bb8b27ba26141ab0dbcba95ba417711ce11ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:fd:84:ad:fe:43:ca:d4:a7:b8:b4:f8:ac:
ee:25:3a:5a:44:ce:64:2b:0f:3d:49:08:e9:2b:3d:
00:e5:7b:af:a6:a8:2c:fc:12:9e:60:5c:10:e6:46:
24:41:63:9e:6f:d8:a9:51:72:c1:98:b8:6b:d4:7b:
4d:b9:6c:58:4b:73:7d:c8:11:53:03:b4:f2:a9:d2:
30:36:da:71:0a:09:d4:cf:d8:ca:aa:bd:1c:7a:29:
e9:7e:8b:ce:ee:db:9e:f1:24:dc:3c:b2:fd:ef:60:
aa:de:2f:cd:7c:54:6c:df:05:70:7b:53:75:da:8c:
8f:0b:33:91:a4:18:1a:ba:1c:f8:b6:a6:e1:dc:af:
61:eb:12:c8:46:43:7e:df:38:15:d3:47:13:33:e2:
f1:42:33:48:aa:e6:42:f9:e3:fb:13:2d:38:d5:c3:
66:ee:bc:1c:91:d9:8a:fc:a2:ad:45:20:86:20:14:
a8:1b:79:01:fc:6f:67:61:31:8e:6c:09:2c:91:58:
14:79:9e:6d:92:5f:0a:a9:de:7f:e6:99:6d:e4:22:
90:5e:c1:d0:5d:0a:a5:1b:28:aa:ca:86:40:8b:5e:
b6:c5:42:d2:96:ce:04:0a:a0:2f:6e:b9:7c:68:cc:
94:8f:2f:d9:45:76:23:6b:85:82:fa:10:d8:65:2b:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:8B:27:BA:26:14:1A:B0:DB:CB:A9:5B:A4:17:71:1C:E1:1E:A2
X509v3 Authority Key Identifier:
keyid:D8:91:56:09:65:6F:08:F7:A2:8D:24:B7:C4:BA:9B:63:9C:A0:B0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JFWCWVvCPeijSS3xLqbY5ygsAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/WbuLJ7omFBqw28upW6QXcRzhHqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/20e8e0-68d3-489e-bcf3-fe4b5e346840/1/2JFWCWVvCPeijSS3xLqbY5ygsAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.132.0/22
Signature Algorithm: sha256WithRSAEncryption
02:47:55:12:b3:6c:de:88:48:93:ca:c4:85:da:60:eb:fe:f5:
fc:c0:fc:d7:5f:20:7a:11:86:47:0f:f4:81:0a:b5:19:cd:f7:
1f:79:b5:9f:f1:46:42:ee:e5:8c:ad:58:ef:f0:f6:8c:0d:c6:
31:1c:c6:32:8b:ea:3d:3a:7c:1e:d5:59:78:f0:be:f8:33:08:
80:d6:a5:c1:94:72:80:a4:9d:d1:bc:a9:8c:85:1f:6c:44:2f:
24:05:47:81:59:7b:9e:ba:95:92:08:c4:ca:da:ef:41:09:f7:
d2:52:28:3f:b3:d9:f8:f0:6c:a1:f1:d5:bf:06:db:8c:37:75:
ff:20:bc:8a:03:d3:f0:03:7e:06:6c:37:f8:f6:75:06:de:8f:
49:c6:9e:63:09:11:73:ea:83:b2:36:48:48:77:03:e5:a7:cf:
8f:b6:cd:69:fb:dc:a5:87:09:93:82:4e:76:04:42:e7:29:38:
b4:68:f2:e9:9c:e4:aa:9b:05:b7:fa:08:af:8c:20:65:31:8d:
0c:5c:7d:60:2f:c6:e5:1d:e0:a0:72:61:e7:16:56:c6:8d:48:
e9:7a:f3:85:b5:a7:e4:5b:32:f7:ba:52:db:8b:10:a8:2d:0d:
4c:68:d5:df:dd:c0:e7:c9:c9:cb:7f:f5:6a:6f:00:c4:45:e9:
4d:e0:bf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:34 2023 by rpki-client on console.sobornost.net