Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/wLRlMK2_su6eQQ039WVJHGjHx8s.roa
File: wLRlMK2_su6eQQ039WVJHGjHx8s.roa (raw, json)
Hash identifier: bmaLjYlMKDxuYtTZfosDgAeixvBzWoqjt/Wd2rS+wLA=
Subject key identifier: C0:B4:65:30:AD:BF:B2:EE:9E:41:0D:37:F5:65:49:1C:68:C7:C7:CB
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 018996159DF7DBE7280B5BAB8A41AA23E427
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/wLRlMK2_su6eQQ039WVJHGjHx8s.roa
Signing time: Thu 27 Jul 2023 06:42:26 +0000
ROA not before: Thu 27 Jul 2023 06:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15372
IP address blocks: 193.36.120.0/22 maxlen: 22
212.111.224.0/19 maxlen: 24
91.90.167.0/24 maxlen: 24
188.239.190.0/24 maxlen: 24
188.239.188.0/23 maxlen: 23
31.42.180.0/24 maxlen: 24
2a01:7700::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 01 Aug 2023 13:49:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:96:15:9d:f7:db:e7:28:0b:5b:ab:8a:41:aa:23:e4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jul 27 06:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b46530adbfb2ee9e410d37f565491c68c7c7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a8:7c:42:59:22:5e:23:cf:4e:1b:64:b4:47:
4c:8c:6c:45:96:8e:0c:d9:54:58:3f:35:95:a3:24:
a3:56:60:f4:d0:8c:3c:68:1f:3f:d5:b5:ec:fa:f3:
b5:e0:44:41:2e:03:6e:06:1f:e9:c7:d7:bb:d1:22:
de:1c:09:38:65:d3:49:bf:d8:6e:67:5d:06:2c:86:
77:d6:7e:09:83:bf:26:a1:df:8d:9f:c0:36:7f:26:
6a:3a:3c:96:62:56:35:ae:28:56:58:0c:f5:67:24:
7a:c0:68:dd:d4:26:61:19:d3:b9:d6:be:c1:08:c5:
ad:0e:d5:ef:c3:21:d2:bf:7e:d2:4d:6a:8f:e8:3c:
42:2d:3d:6e:ec:41:c5:95:ed:a1:c6:fa:ce:8b:23:
f6:fd:99:f7:04:af:9e:6b:49:13:05:8e:d1:dc:01:
2b:2b:cb:24:95:db:3d:9e:0d:13:17:68:fa:ab:62:
f7:82:73:b6:a5:6d:03:50:b3:07:6f:84:b8:5e:b6:
8f:ea:23:94:62:b2:38:65:dd:12:4b:3e:c3:42:9e:
c7:c6:df:d2:05:62:bb:8a:46:b9:45:65:5b:88:b2:
72:c1:00:f9:57:da:63:18:91:18:95:4e:ab:2e:b1:
00:e2:df:81:09:50:43:89:72:e8:7f:cd:fb:08:7d:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B4:65:30:AD:BF:B2:EE:9E:41:0D:37:F5:65:49:1C:68:C7:C7:CB
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/wLRlMK2_su6eQQ039WVJHGjHx8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.180.0/24
91.90.167.0/24
188.239.188.0-188.239.190.255
193.36.120.0/22
212.111.224.0/19
IPv6:
2a01:7700::/32
Signature Algorithm: sha256WithRSAEncryption
9b:08:57:98:b3:34:50:67:41:c4:62:bd:ff:c5:b4:a4:d3:6c:
19:b0:4c:e5:31:20:cc:fc:cc:43:65:ea:da:46:a9:f7:e7:45:
09:0e:9c:9d:75:cb:49:53:57:b7:99:39:aa:5e:10:c5:0e:de:
97:5c:63:1d:fb:12:c6:51:4a:99:39:dc:16:29:60:e8:27:67:
76:b7:b3:cb:ec:fb:ec:33:fb:14:c9:6b:25:36:a1:ca:da:5c:
51:a0:18:cd:f2:1e:40:39:9c:9c:ef:ac:d7:1f:26:aa:1b:44:
c3:23:b1:3c:57:df:3f:da:4c:a8:9c:71:47:2f:f4:07:5b:af:
52:92:ac:81:a0:3e:b5:b0:24:14:3b:3b:c6:89:bf:09:30:9e:
cf:74:9c:cd:47:4d:9e:4d:9e:ed:e6:bd:53:b2:7d:f7:cb:d0:
df:f7:01:5b:96:55:65:df:b8:db:74:fa:71:65:54:24:8f:0e:
c9:9e:07:0c:a7:06:cb:a5:38:4f:c0:04:b6:8e:59:00:ef:22:
b7:0c:07:ac:09:e9:bd:2a:10:fc:10:e8:71:68:b0:fe:fb:5a:
b7:2e:cb:97:9e:c8:c5:b9:97:bf:6c:bc:61:c7:62:b7:eb:dd:
1f:74:51:b8:08:ed:76:f9:73:27:1a:9b:06:a4:a3:1a:eb:84:
5c:ea:b8:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:17 2024 by rpki-client on console-ams.rpki-client.org