Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/WM65n37PbXFQCHM7eAlaG-nWfMI.roa
File: WM65n37PbXFQCHM7eAlaG-nWfMI.roa (raw, json)
Hash identifier: qoiAhXJYxIn8stsEZnQAys4wUIXheDqTM9vHaRn2oBQ=
Subject key identifier: 58:CE:B9:9F:7E:CF:6D:71:50:08:73:3B:78:09:5A:1B:E9:D6:7C:C2
Certificate issuer: /CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Certificate serial: 018E7C7DBE1AF970D900ABE93E0EF68DD1E6
Authority key identifier: B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/WM65n37PbXFQCHM7eAlaG-nWfMI.roa
Signing time: Tue 26 Mar 2024 20:39:59 +0000
ROA not before: Tue 26 Mar 2024 20:39:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 79.110.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 17:45:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:7d:be:1a:f9:70:d9:00:ab:e9:3e:0e:f6:8d:d1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3674e822f3876d27deaed5f66dbe9c1a422eb16
Validity
Not Before: Mar 26 20:39:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ceb99f7ecf6d715008733b78095a1be9d67cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:48:3b:63:a5:63:f4:4f:c1:ba:a7:1a:56:5d:
64:5e:ea:47:f3:03:03:f5:a1:29:f4:c3:65:a8:55:
aa:13:95:bc:36:0d:d3:1e:8a:4f:9b:ab:1d:c8:82:
55:bd:b4:a8:8f:a1:69:3d:70:d1:78:12:b9:2e:31:
25:6d:08:9d:74:fb:df:f7:71:54:2d:ce:03:52:83:
a8:9c:36:c2:15:0b:46:fd:c7:c2:e4:8f:b8:77:3f:
65:ed:e0:48:92:85:26:ce:a8:ee:17:0c:2c:c3:95:
b7:e9:d2:ed:8a:23:34:37:ac:2c:95:6e:d5:af:f6:
08:63:84:47:46:ce:dc:4a:d8:ab:cb:0a:9a:8a:3b:
82:84:00:7e:27:1c:0c:41:ba:5a:f4:64:e6:09:3c:
05:07:d4:cb:ab:66:77:af:3a:dc:b7:cc:41:a7:75:
44:a0:e3:ad:8c:ae:fd:28:9a:77:31:2e:43:a1:05:
ee:d5:ff:b2:a8:e0:44:8f:14:f6:65:dd:ba:a2:bb:
52:88:71:f3:0b:b8:01:68:bc:8e:d2:35:cc:02:3a:
08:2c:6f:3e:5c:12:7c:66:1a:84:84:fc:ff:e6:36:
55:c0:59:72:a1:3e:46:97:f8:7c:bc:b0:7b:4c:46:
dc:02:6d:a3:4e:61:db:a9:09:54:3d:cb:a1:fb:b7:
61:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:B9:9F:7E:CF:6D:71:50:08:73:3B:78:09:5A:1B:E9:D6:7C:C2
X509v3 Authority Key Identifier:
keyid:B3:67:4E:82:2F:38:76:D2:7D:EA:ED:5F:66:DB:E9:C1:A4:22:EB:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s2dOgi84dtJ96u1fZtvpwaQi6xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/WM65n37PbXFQCHM7eAlaG-nWfMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/393251-b488-40d3-be39-f8f08fe64838/1/s2dOgi84dtJ96u1fZtvpwaQi6xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e5:60:af:bf:f3:3e:3d:c0:81:e7:b2:8f:15:37:57:5f:b4:
20:c8:fd:79:d1:4c:e5:b2:28:14:fc:23:d9:2e:c4:e2:aa:a6:
dd:0f:a6:e6:0a:1f:9f:f7:4d:52:e0:b2:49:e6:e5:73:13:ec:
17:78:14:4d:cd:5e:b1:14:68:e4:df:f7:30:db:e8:e3:9c:fc:
54:f7:8b:74:6a:df:41:c3:b3:d9:ee:5d:26:ee:e5:60:7f:48:
d9:f1:ba:58:fe:0b:a0:80:62:7d:e8:02:2d:45:37:a6:cd:48:
69:a2:44:fe:c3:b5:c0:33:da:d3:c6:30:fa:7d:18:a1:f7:89:
0a:67:24:75:1f:86:ea:a7:f2:3f:5d:4b:6f:76:f8:21:55:40:
8e:4d:24:3c:87:14:f0:56:d5:0c:1b:24:5b:54:a6:71:3d:95:
9b:19:33:fe:b7:3c:62:f9:30:1c:81:67:56:f6:6b:e7:9b:c0:
99:2e:11:59:61:9e:01:47:36:8d:c2:0a:06:50:0c:fa:05:3b:
88:a3:9b:a1:8a:46:09:c9:5b:52:98:2a:51:0f:d7:b5:5d:83:
71:63:88:90:9b:d9:73:77:44:54:10:dc:f2:87:be:af:93:b6:
c7:7f:3f:82:43:30:59:ad:12:22:3e:b7:b6:5a:71:3f:4b:e3:
27:2b:c0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:09 2024 by rpki-client on console-ams.rpki-client.org