Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/wtj5t0LhGzgKOQr2vCETdqaChuM.roa
File: wtj5t0LhGzgKOQr2vCETdqaChuM.roa (raw, json)
Hash identifier: xX8zELmqqeaeWiW1+Lskry8AJIycflbaMMVutxmvAEg=
Subject key identifier: C2:D8:F9:B7:42:E1:1B:38:0A:39:0A:F6:BC:21:13:76:A6:82:86:E3
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 018BAFAD136F4AA8302187F6BFF1CDC9A0F3
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/wtj5t0LhGzgKOQr2vCETdqaChuM.roa
Signing time: Wed 08 Nov 2023 16:03:57 +0000
ROA not before: Wed 08 Nov 2023 16:03:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61047
IP address blocks: 185.43.44.0/22 maxlen: 24
185.189.188.0/22 maxlen: 24
185.71.224.0/22 maxlen: 24
185.83.96.0/22 maxlen: 24
91.220.197.0/24 maxlen: 24
185.124.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:ad:13:6f:4a:a8:30:21:87:f6:bf:f1:cd:c9:a0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Nov 8 16:03:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2d8f9b742e11b380a390af6bc211376a68286e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:fe:8c:8b:e4:0a:ba:b5:27:13:b6:9f:ed:
3c:65:65:21:74:19:ac:b9:f2:4b:b6:19:99:82:c6:
23:89:e1:90:ce:3a:17:a7:f1:87:56:cf:75:0e:ba:
3b:8a:cb:f5:6e:44:e2:67:a5:e6:b7:2f:33:39:ad:
61:69:99:41:01:e6:a0:10:40:d6:3b:52:c2:54:d0:
72:26:ee:44:4c:b6:67:40:9e:74:fe:bb:15:c8:cb:
17:fa:be:05:ad:9b:57:4a:2b:15:e0:fa:75:56:e2:
1f:e8:55:c2:b3:66:fe:7e:22:bd:77:52:f4:ce:15:
d3:fe:b9:5d:a2:73:fe:b7:33:56:05:6a:0b:30:9f:
76:66:93:ec:02:64:ac:70:99:1f:01:42:d4:9f:b9:
ff:e5:b2:0b:24:4d:56:66:4b:46:de:5a:ba:15:d1:
cc:ba:57:a6:cd:6d:d8:57:46:7f:c8:bf:f8:a8:4a:
11:7d:85:d5:03:5c:d5:e7:41:31:9a:d8:c5:bd:42:
16:83:f3:d1:69:fa:6e:02:76:4c:d9:2d:47:d4:49:
d3:26:a8:a3:d9:16:f9:23:ba:76:4e:14:71:be:b3:
d3:05:3c:9b:3e:cf:08:fd:c5:59:cc:4f:29:c8:92:
0e:2e:8c:8e:55:60:0c:f9:02:7d:0f:28:dd:3f:51:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D8:F9:B7:42:E1:1B:38:0A:39:0A:F6:BC:21:13:76:A6:82:86:E3
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/wtj5t0LhGzgKOQr2vCETdqaChuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.197.0/24
185.43.44.0/22
185.71.224.0/22
185.83.96.0/22
185.124.200.0/22
185.189.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:3d:b1:5c:aa:58:9b:2e:3a:c4:48:a5:23:f2:4b:df:b0:38:
35:0d:6f:43:0d:55:3d:b8:c0:2e:f9:a5:ed:69:b9:3c:c0:f8:
c1:5b:29:41:ce:18:79:2b:b6:f2:7f:24:70:f7:99:4f:1d:fb:
1f:16:ca:39:3f:e6:c2:a6:20:15:19:de:85:bc:8d:58:f2:a3:
7b:dc:48:3f:d7:7f:d9:02:0c:88:f6:62:7e:9e:0c:e9:ef:96:
99:40:ff:36:02:8a:18:ef:fe:1d:46:4b:5c:57:0d:3f:4b:23:
31:bb:8e:67:6b:07:a0:96:8b:1c:57:f2:0d:a1:ca:8d:9c:02:
06:dc:4e:69:14:53:d4:3b:5d:9c:20:9b:0a:3a:1e:da:13:17:
f0:e9:38:09:e9:61:99:c2:0a:64:ff:a9:4d:2e:40:6f:09:61:
31:b3:e3:a7:b6:1e:f5:6c:fc:31:f5:87:cf:59:04:2d:7e:38:
62:c0:69:b6:01:5a:df:06:5e:01:62:ed:c0:8b:50:f6:c2:1b:
b7:54:d7:83:14:ff:3b:ea:eb:f7:1d:0f:e2:b6:d4:75:26:43:
a8:6d:d4:39:6d:37:14:b2:10:64:35:39:65:01:25:ce:85:fc:
5f:32:ba:9f:08:d0:cb:3f:2e:25:be:e1:dd:24:86:8f:17:61:
3b:e6:81:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:00:48 2024 by rpki-client on console.sobornost.net