Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/WHEU7t77OPBY-IDk9JKjSd4GNVA.roa
File: WHEU7t77OPBY-IDk9JKjSd4GNVA.roa (raw, json)
Hash identifier: CbwZferjvflGnqdKFtTQcu+w7s058eOhHTIob5vwqAg=
Subject key identifier: 58:71:14:EE:DE:FB:38:F0:58:F8:80:E4:F4:92:A3:49:DE:06:35:50
Certificate issuer: /CN=e50c44ae981e7492d3ba21e28472080180398d64
Certificate serial: 01856C53ECB09A3F8EB1DC62CDA083A84726
Authority key identifier: E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/WHEU7t77OPBY-IDk9JKjSd4GNVA.roa
Signing time: Sun 01 Jan 2023 07:55:17 +0000
ROA not before: Sun 01 Jan 2023 07:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20932
IP address blocks: 217.169.128.0/20 maxlen: 20
217.169.144.0/20 maxlen: 20
194.11.221.0/24 maxlen: 24
185.68.204.0/22 maxlen: 22
2001:41e0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ec:b0:9a:3f:8e:b1:dc:62:cd:a0:83:a8:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e50c44ae981e7492d3ba21e28472080180398d64
Validity
Not Before: Jan 1 07:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=587114eedefb38f058f880e4f492a349de063550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:ca:af:ac:e5:cc:81:9e:1d:f9:08:8e:4b:
ec:6d:4e:d4:23:73:46:a8:25:1e:5e:16:11:99:56:
fd:67:d9:be:a9:af:83:3a:99:ef:00:93:3a:7e:cb:
89:33:5d:a6:0c:64:97:2c:27:63:85:ee:33:41:3e:
13:2d:55:03:ce:91:b2:fa:9f:b4:d3:96:cb:1e:1a:
c9:21:43:67:96:37:e1:49:7a:de:ae:0a:28:4c:0e:
42:96:09:bd:d3:e2:a8:a7:bf:c8:72:b0:8b:da:eb:
da:51:10:7f:50:af:c5:84:75:13:60:26:27:27:aa:
6f:a0:75:56:24:2f:a8:d2:70:ca:a7:3d:74:59:ce:
55:2c:c9:9a:6d:75:8d:fc:a3:e7:4e:50:13:52:b8:
57:3c:db:73:cb:d4:67:4b:ad:14:a2:e0:61:3e:10:
c5:50:2b:1d:d5:0e:76:dc:35:8a:06:21:c2:69:06:
b4:a6:86:66:ba:69:00:65:54:30:23:c9:8c:f9:e1:
b9:f7:5f:e7:6f:00:96:39:6f:2b:84:5d:cf:5f:9d:
0d:45:42:8e:b5:ab:e8:85:7a:e8:61:2d:bf:ed:3e:
8f:14:d8:5e:f1:62:81:27:fd:28:14:f3:d1:7d:27:
3d:7d:53:2b:38:5e:23:d1:49:f4:96:ed:26:9c:c7:
7f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:71:14:EE:DE:FB:38:F0:58:F8:80:E4:F4:92:A3:49:DE:06:35:50
X509v3 Authority Key Identifier:
keyid:E5:0C:44:AE:98:1E:74:92:D3:BA:21:E2:84:72:08:01:80:39:8D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QxErpgedJLTuiHihHIIAYA5jWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/WHEU7t77OPBY-IDk9JKjSd4GNVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/226018-0e06-435e-abfd-f5ffee1720c1/1/5QxErpgedJLTuiHihHIIAYA5jWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.68.204.0/22
194.11.221.0/24
217.169.128.0/19
IPv6:
2001:41e0::/32
Signature Algorithm: sha256WithRSAEncryption
a0:36:95:44:ce:db:6b:02:dd:3d:3e:08:04:3d:a5:5f:b9:11:
dc:3e:b8:0b:3d:0c:4d:b3:33:c3:54:62:bd:a3:b5:44:a3:6c:
c0:46:c1:a1:db:ab:44:ee:06:70:a1:ab:80:85:55:24:ce:74:
8c:94:f5:ba:72:8c:9b:52:53:e0:84:56:04:33:5a:0d:89:a8:
7a:f8:bc:21:27:73:e3:fc:16:fd:bc:3a:99:19:40:85:70:9c:
ff:14:58:ff:a0:a6:a1:ad:07:32:20:73:f3:fd:de:30:23:cc:
99:4e:3d:53:9e:53:f0:d3:6d:7f:e9:96:b4:78:5f:46:ce:5a:
ee:4d:65:88:2c:71:8d:e9:91:33:d0:39:26:82:f1:d1:45:66:
01:06:a8:1b:6c:d1:31:69:91:2a:f8:8c:3f:07:74:15:c0:ab:
8e:95:7c:dc:cf:02:89:c4:dc:82:0e:c6:3e:cf:34:ba:e8:ad:
28:0b:19:96:4d:96:0f:05:f1:1c:4c:e0:c0:8a:cc:25:f7:77:
9e:ae:90:76:a6:a3:c0:93:73:c6:55:2f:0f:5e:f7:23:2b:64:
ae:f3:5d:85:4d:96:33:ae:2d:c2:ce:fe:4e:8d:9c:28:ca:24:
73:3a:9d:57:58:39:5f:78:b8:12:a7:17:be:a0:58:38:c6:be:
c7:99:44:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:06 2024 by rpki-client on console-ams.rpki-client.org