Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/W1EpgVTYPFjSFm_WR5ec09SCP7g.roa
File: W1EpgVTYPFjSFm_WR5ec09SCP7g.roa (raw, json)
Hash identifier: AFANQvgTx90R9LdrAxpjLF0CclmQBYwPWPzoP3gWEUA=
Subject key identifier: 5B:51:29:81:54:D8:3C:58:D2:16:6F:D6:47:97:9C:D3:D4:82:3F:B8
Certificate issuer: /CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Certificate serial: 018A50AB179840A45B5B3FF43DFC0E92B797
Authority key identifier: 69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/W1EpgVTYPFjSFm_WR5ec09SCP7g.roa
Signing time: Fri 01 Sep 2023 12:15:04 +0000
ROA not before: Fri 01 Sep 2023 12:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3262
IP address blocks: 194.30.28.0/24 maxlen: 24
212.81.128.0/17 maxlen: 17
192.148.167.0/24 maxlen: 24
195.16.128.0/19 maxlen: 19
194.30.0.0/17 maxlen: 17
2a03:c600::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:50:ab:17:98:40:a4:5b:5b:3f:f4:3d:fc:0e:92:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69adb825f9fdbca0cd7c7901deb7a22ae1797c06
Validity
Not Before: Sep 1 12:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b51298154d83c58d2166fd647979cd3d4823fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:1b:a5:65:8b:b0:dc:d3:d3:09:5b:fd:44:
cd:d6:aa:b0:2c:34:d2:75:b0:6e:96:31:9b:fb:3a:
e6:04:8c:42:ab:b7:5d:18:10:f1:48:ae:f8:83:5d:
ac:a8:39:f8:4b:bd:b4:8e:e1:69:e2:0e:23:20:9e:
b4:68:8d:d8:6a:80:39:fd:b4:be:4a:9d:9d:9d:ff:
18:22:b1:64:38:e6:a1:87:75:f4:21:f2:d8:1d:a2:
2e:08:c8:3c:7f:64:1b:13:8f:bd:32:4a:81:34:d7:
f5:3c:cf:1e:ab:ab:2f:f6:f1:3c:ab:dc:80:d4:39:
a3:24:0f:f7:b9:4c:cd:16:4c:15:2b:3d:70:04:f7:
4a:3d:92:c4:9c:ad:f1:d6:1d:f1:1b:66:b0:2b:71:
f8:68:d7:00:61:d4:ac:c4:19:35:f7:9f:02:1c:73:
3c:01:9c:91:f8:db:a3:22:59:4c:96:12:9f:de:55:
ad:37:bc:0b:ce:5e:57:a4:2a:1f:d6:26:78:18:64:
26:3d:a1:b7:39:e0:14:26:e0:5b:53:9d:1d:36:70:
d0:60:72:c5:87:dc:de:5d:f0:64:73:56:c3:fa:b0:
11:33:97:ec:6a:b5:c6:a8:1d:56:a0:58:63:ff:93:
cc:89:ac:12:5b:40:f6:a4:42:9f:90:8f:d9:7a:6e:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:51:29:81:54:D8:3C:58:D2:16:6F:D6:47:97:9C:D3:D4:82:3F:B8
X509v3 Authority Key Identifier:
keyid:69:AD:B8:25:F9:FD:BC:A0:CD:7C:79:01:DE:B7:A2:2A:E1:79:7C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa24Jfn9vKDNfHkB3reiKuF5fAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/W1EpgVTYPFjSFm_WR5ec09SCP7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/af6b7a-9a70-494e-8a90-3236267c8799/1/aa24Jfn9vKDNfHkB3reiKuF5fAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.148.167.0/24
194.30.0.0/17
195.16.128.0/19
212.81.128.0/17
IPv6:
2a03:c600::/32
Signature Algorithm: sha256WithRSAEncryption
65:2a:50:b6:2d:0e:7e:4a:79:7c:e3:2c:bc:4e:dd:cd:25:4e:
c1:f1:83:22:53:20:54:0d:94:cb:59:a3:73:41:0f:63:74:b0:
0f:15:e9:fe:ef:dd:1e:bb:48:92:34:e4:53:2c:4a:75:91:a7:
a8:dd:bf:0c:4a:da:2b:be:ca:17:a5:bc:9c:05:e4:51:d9:b0:
2b:1c:48:bd:21:a7:78:c0:c6:0d:e2:2b:8e:04:1f:40:bd:71:
bf:4a:89:b7:3d:b5:93:69:62:d0:b5:db:e2:07:d3:74:88:66:
ca:f6:7a:b5:f3:bc:88:6f:8b:5e:d9:44:a1:f0:31:d3:0a:4c:
34:75:f4:2f:45:3a:e2:aa:eb:50:06:76:07:1d:d4:56:1f:0a:
19:12:2a:58:c4:fa:db:77:1c:31:ea:79:61:24:b4:4c:31:9f:
e2:08:94:bc:c5:0c:8e:02:fb:d9:f7:76:b9:3d:4f:64:29:93:
b3:a3:b4:3f:6c:dd:72:df:08:52:a7:f1:8b:04:28:09:28:f2:
5c:38:c4:24:45:c2:1c:c3:a6:fe:12:13:99:97:25:6f:33:8d:
cc:75:c6:0c:3e:94:cb:18:73:b3:d2:c7:08:8d:1d:d5:76:6c:
08:6c:0b:51:38:df:67:88:14:f8:67:93:70:3b:1c:01:d4:4b:
1e:72:1e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:27 2024 by rpki-client on console-fra.rpki-client.org