Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/W986Wtg3ncNBb_Co3ogXsyiUWxA.roa
File: W986Wtg3ncNBb_Co3ogXsyiUWxA.roa (raw, json)
Hash identifier: h6LCB/8u4KpLjZwJzLXeGxaeCAfWn80EFldfK76nTac=
Subject key identifier: 5B:DF:3A:5A:D8:37:9D:C3:41:6F:F0:A8:DE:88:17:B3:28:94:5B:10
Certificate issuer: /CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Certificate serial: 0186271C4E8DCB8C9147AFA025C2A108A70E
Authority key identifier: 79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/W986Wtg3ncNBb_Co3ogXsyiUWxA.roa
Signing time: Mon 06 Feb 2023 14:23:31 +0000
ROA not before: Mon 06 Feb 2023 14:23:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 178.22.213.0/24 maxlen: 24
178.22.214.0/24 maxlen: 24
178.22.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:1c:4e:8d:cb:8c:91:47:af:a0:25:c2:a1:08:a7:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7961ad731c4c7525f885c5d3764d4ce0f0e8c98f
Validity
Not Before: Feb 6 14:23:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bdf3a5ad8379dc3416ff0a8de8817b328945b10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:69:f3:dd:e3:60:c4:9f:8a:ef:9f:64:ae:
54:6a:4a:48:95:66:df:91:5e:4f:31:d3:aa:1d:e9:
a9:29:b5:3b:2f:9f:35:0c:e7:3f:1c:cf:e0:aa:0c:
14:d6:80:d2:4a:b6:c2:c6:09:84:6d:e5:83:44:80:
81:39:25:ec:65:bf:f6:48:a8:12:12:a0:06:00:10:
66:3a:d0:35:92:69:38:09:d2:95:54:41:c7:26:6a:
42:f6:25:32:94:a2:4c:a3:78:24:93:8d:e4:9e:21:
ec:a2:51:36:c1:d1:98:cc:5e:55:42:86:57:e5:8e:
2d:52:b4:ad:e8:0e:60:2e:2c:eb:d1:5a:9e:97:df:
e2:42:2c:d4:18:de:01:e4:eb:eb:5b:9e:e8:1d:ab:
3d:33:78:15:d1:86:a5:d3:8c:85:99:ec:7b:6f:c9:
32:8d:a5:51:ee:d0:17:18:12:66:56:b0:3a:7a:7e:
0d:d8:cf:d5:8b:80:19:92:60:ae:ab:11:a3:b3:ee:
bc:66:0f:90:c3:dd:68:e5:eb:c2:9c:44:19:21:12:
f5:4e:04:37:4c:f9:18:9f:9b:08:25:7f:ed:14:8f:
e8:d6:82:56:c4:36:8f:a2:21:36:b9:a8:70:57:4c:
3e:94:3b:f6:cc:1c:d3:bb:a8:54:bb:6d:75:30:ec:
bf:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DF:3A:5A:D8:37:9D:C3:41:6F:F0:A8:DE:88:17:B3:28:94:5B:10
X509v3 Authority Key Identifier:
keyid:79:61:AD:73:1C:4C:75:25:F8:85:C5:D3:76:4D:4C:E0:F0:E8:C9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWGtcxxMdSX4hcXTdk1M4PDoyY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/W986Wtg3ncNBb_Co3ogXsyiUWxA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/cb17ca-d02f-4022-ad06-8aacc1f48108/1/eWGtcxxMdSX4hcXTdk1M4PDoyY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.213.0-178.22.215.255
Signature Algorithm: sha256WithRSAEncryption
2f:97:0e:53:f4:46:14:f1:02:9f:b0:09:68:3d:a4:9d:7b:05:
5e:61:8b:ce:e5:c8:96:74:77:f6:02:3e:b8:0c:7d:93:84:26:
7c:4c:31:52:22:7d:b6:9c:49:1e:69:6d:15:21:74:aa:af:cd:
eb:5c:60:40:a3:6e:3b:94:46:04:44:c0:24:15:2a:fc:23:c9:
c0:1d:e7:6b:21:43:c6:3e:01:56:da:6b:04:69:6f:77:a0:2b:
d2:cf:9b:7b:80:10:75:36:71:70:48:6c:eb:d8:00:8d:e0:69:
cd:29:c3:ca:58:0d:21:c3:1b:08:00:90:6e:5e:0d:a6:39:74:
e5:96:79:40:8e:83:57:ec:f1:f7:1b:cd:0f:ce:52:0f:3d:15:
84:70:8a:fe:ae:57:37:e7:1b:42:fd:1f:c0:c5:ad:ea:91:30:
5b:a4:d1:37:42:17:07:17:d4:8a:92:63:34:a2:19:2d:65:48:
8a:0f:f5:13:35:cd:14:3b:fa:99:56:ce:49:3c:b5:99:9b:fe:
2b:c8:92:4b:3d:08:ac:1a:84:33:d3:5d:b2:0f:fd:7f:0c:82:
cf:96:ee:4d:f8:9f:97:4f:55:4b:01:e7:88:4d:fa:4c:b2:1d:
37:1e:a9:12:06:55:56:50:1d:2f:41:7f:9d:92:dd:85:7d:42:
78:77:33:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 16:34:53 2024 by rpki-client on console.sobornost.net