Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/WIEEXdu5n_BRiH0KjddAovodXXc.roa
File: WIEEXdu5n_BRiH0KjddAovodXXc.roa (raw, json)
Hash identifier: 7UONlERXyzei8O1Te41y0k0emWUl5B2Q0qGaEVnesl0=
Subject key identifier: 58:81:04:5D:DB:B9:9F:F0:51:88:7D:0A:8D:D7:40:A2:FA:1D:5D:77
Certificate issuer: /CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Certificate serial: 01856D5CF72503E1A177A6BF1CDC6C03E0B7
Authority key identifier: 8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/WIEEXdu5n_BRiH0KjddAovodXXc.roa
Signing time: Sun 01 Jan 2023 12:44:46 +0000
ROA not before: Sun 01 Jan 2023 12:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57356
IP address blocks: 194.140.215.0/24 maxlen: 24
194.140.216.0/22 maxlen: 22
194.140.214.0/24 maxlen: 24
194.140.222.0/23 maxlen: 23
194.140.222.0/24 maxlen: 24
194.140.223.0/24 maxlen: 24
194.140.220.0/23 maxlen: 23
87.117.84.0/23 maxlen: 23
87.117.80.0/22 maxlen: 22
87.117.80.0/20 maxlen: 20
87.117.88.0/22 maxlen: 22
87.117.86.0/23 maxlen: 23
87.117.92.0/22 maxlen: 22
194.140.212.0/22 maxlen: 22
194.140.212.0/24 maxlen: 24
194.140.210.0/23 maxlen: 23
194.140.208.0/22 maxlen: 22
194.140.208.0/23 maxlen: 23
194.140.208.0/20 maxlen: 20
194.140.213.0/24 maxlen: 24
91.185.176.0/22 maxlen: 22
31.216.0.0/20 maxlen: 20
91.185.176.0/21 maxlen: 21
185.20.164.0/23 maxlen: 23
185.20.164.0/22 maxlen: 22
31.216.0.0/21 maxlen: 21
91.185.180.0/22 maxlen: 22
185.20.166.0/23 maxlen: 23
31.216.8.0/21 maxlen: 21
86.111.160.0/21 maxlen: 21
86.111.160.0/20 maxlen: 20
86.111.172.0/23 maxlen: 23
86.111.168.0/22 maxlen: 22
86.111.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:f7:25:03:e1:a1:77:a6:bf:1c:dc:6c:03:e0:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d5f066af80d0e9f07ea87b24bdafa59d1f5f26f
Validity
Not Before: Jan 1 12:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5881045ddbb99ff051887d0a8dd740a2fa1d5d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:d7:f6:3e:cd:91:d4:b0:c3:12:55:b3:8e:
c4:7d:0e:bc:34:c4:e1:59:8e:64:21:31:8b:9a:c0:
11:33:77:f9:ee:18:ca:d8:46:8c:ce:db:7d:bb:5f:
72:cf:36:e7:56:91:a0:69:7a:f3:d7:ea:14:87:ae:
e8:09:70:68:f1:d5:d5:04:a2:77:c7:2c:a7:38:77:
36:0c:ab:9f:91:46:e1:64:01:0d:28:6f:27:8e:66:
a0:e2:e3:5e:80:69:96:70:50:1a:9d:94:35:ac:e9:
80:b8:f5:d3:cf:9a:1e:03:ac:f2:76:dd:53:9f:05:
61:86:d4:dc:97:ac:b4:53:22:1e:9a:2a:ed:dd:00:
0d:5a:ff:0c:35:d3:68:39:53:31:df:01:2f:b9:dd:
05:83:60:e2:59:5a:f7:22:82:ad:13:00:e0:48:15:
18:a2:ea:cf:b5:26:c5:f1:ad:c0:ea:a8:41:cc:a6:
09:63:a0:a7:f9:82:de:f3:72:db:bb:d7:d8:cf:7d:
5f:aa:1e:bb:bf:90:49:1c:c9:97:6b:a4:b1:78:79:
ad:7d:17:8c:a6:85:5d:dd:22:0d:90:12:47:a9:33:
e0:0b:03:3e:58:a5:d5:2c:1f:0a:79:b5:51:96:1e:
6e:c6:f1:fd:71:7a:28:48:c9:51:0c:62:20:9d:a7:
c8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:04:5D:DB:B9:9F:F0:51:88:7D:0A:8D:D7:40:A2:FA:1D:5D:77
X509v3 Authority Key Identifier:
keyid:8D:5F:06:6A:F8:0D:0E:9F:07:EA:87:B2:4B:DA:FA:59:D1:F5:F2:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV8GavgNDp8H6oeyS9r6WdH18m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/WIEEXdu5n_BRiH0KjddAovodXXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/330e4d-a9d9-4b7e-863c-6f3aa8943e68/1/jV8GavgNDp8H6oeyS9r6WdH18m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.216.0.0/20
86.111.160.0/20
87.117.80.0/20
91.185.176.0/21
185.20.164.0/22
194.140.208.0/20
Signature Algorithm: sha256WithRSAEncryption
84:76:8c:92:9b:4c:95:69:93:85:50:53:54:19:c0:54:fb:9e:
f7:95:43:e5:ee:9a:d8:71:30:36:61:91:a2:6f:72:e1:ce:b2:
d9:05:1a:08:f9:94:04:de:59:bc:24:de:bb:1e:80:f6:99:14:
7d:73:60:1d:6c:32:d3:ac:5f:a3:44:b1:75:7e:4c:e3:9c:64:
a5:ca:c3:ca:84:65:8a:1a:98:4e:cf:8d:20:20:5e:db:c3:da:
40:51:93:7c:1c:05:9f:83:c2:08:e3:88:ae:40:23:8f:4f:2e:
92:9a:70:25:03:2a:e3:17:a3:ec:d7:76:04:a7:a4:aa:b9:d1:
4e:90:a8:52:a5:81:6f:7c:dd:31:a6:61:7c:c7:d7:76:a4:db:
4f:50:08:04:1c:79:c2:13:1e:c7:56:69:80:dd:ad:e1:1d:68:
c3:df:5c:ee:34:b0:27:47:ff:9c:f9:a1:1f:59:00:6a:44:24:
d5:31:5a:11:0e:ce:cf:22:c2:07:b6:f1:0e:a1:6f:32:60:6e:
89:f0:3e:7c:18:d3:e6:f1:00:1e:38:a1:35:54:51:5e:b4:79:
e4:52:21:70:fb:89:b9:73:30:f0:ad:b7:84:42:62:04:ad:fc:
4d:7b:9b:4a:04:b7:e8:66:51:7c:dd:40:46:97:10:6e:a2:0b:
3a:b8:91:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:05 2024 by rpki-client on console-fra.rpki-client.org