Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/wigSxBWvqJzmVY2tyAk1Vy6qVvY.roa
File: wigSxBWvqJzmVY2tyAk1Vy6qVvY.roa (raw, json)
Hash identifier: fsIu+FSmZ4O4bnELRVR5QPd9YB8maYX/2AEEOnZ/SpI=
Subject key identifier: C2:28:12:C4:15:AF:A8:9C:E6:55:8D:AD:C8:09:35:57:2E:AA:56:F6
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 01857082CBD6BF4D525D7F17787B8704D8E5
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/wigSxBWvqJzmVY2tyAk1Vy6qVvY.roa
Signing time: Mon 02 Jan 2023 03:24:58 +0000
ROA not before: Mon 02 Jan 2023 03:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6789
IP address blocks: 91.247.96.0/19 maxlen: 19
185.99.168.0/22 maxlen: 22
185.92.136.0/22 maxlen: 22
185.92.144.0/22 maxlen: 22
80.245.112.0/24 maxlen: 24
85.91.192.0/19 maxlen: 19
185.186.232.0/22 maxlen: 22
80.245.112.0/20 maxlen: 20
109.200.128.0/19 maxlen: 19
185.100.103.0/24 maxlen: 24
2a00:1d80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:cb:d6:bf:4d:52:5d:7f:17:78:7b:87:04:d8:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 03:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c22812c415afa89ce6558dadc80935572eaa56f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:19:48:97:10:0e:6d:a0:a8:5f:ec:52:17:13:
4e:54:18:d9:a8:a3:61:05:97:3e:69:ff:c0:00:5d:
f9:76:7f:9e:43:d9:be:70:df:aa:fd:49:ad:2e:a5:
62:90:c2:85:96:e7:65:81:ce:21:09:1e:3e:11:19:
48:d7:87:1a:a6:ec:68:5d:d7:00:f9:56:92:92:cf:
b7:7b:39:77:98:df:80:36:f2:3d:a2:28:89:7a:a9:
9c:35:66:67:0b:5f:ac:c0:d2:8a:36:1e:62:78:6b:
f2:a1:a8:16:f2:07:68:8a:e2:ca:35:e0:77:ed:ae:
d9:41:49:bb:08:2d:47:16:4b:72:b6:ef:11:04:36:
6b:4e:58:45:42:30:ad:28:c8:f1:ca:5a:3d:12:f9:
47:e4:73:19:25:a7:72:fb:42:fa:b3:64:ab:f3:54:
cb:58:cd:d9:fc:32:33:a5:43:6e:f8:6c:27:41:47:
4e:aa:c1:88:b2:c2:7a:45:88:49:91:f3:55:57:24:
de:36:74:86:79:4e:df:60:9e:73:8e:5f:c5:2c:d4:
23:c8:d7:9b:af:e7:a0:72:0e:7b:6c:52:52:b2:8c:
5e:c4:5c:18:bc:5c:38:2a:cd:81:97:cb:1d:92:92:
8e:3b:d6:03:53:a6:d0:b9:42:49:11:02:fe:48:eb:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:28:12:C4:15:AF:A8:9C:E6:55:8D:AD:C8:09:35:57:2E:AA:56:F6
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/wigSxBWvqJzmVY2tyAk1Vy6qVvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.112.0/20
85.91.192.0/19
91.247.96.0/19
109.200.128.0/19
185.92.136.0/22
185.92.144.0/22
185.99.168.0/22
185.100.103.0/24
185.186.232.0/22
IPv6:
2a00:1d80::/32
Signature Algorithm: sha256WithRSAEncryption
9b:a5:c9:d2:cb:8d:57:65:81:91:07:94:59:fd:9a:ce:07:9e:
43:38:d4:86:cb:54:a3:2f:ef:05:a2:fe:e3:3e:00:ff:8b:97:
3b:0d:59:fa:ff:e4:b1:ab:c1:18:d1:0a:1d:27:bd:e5:26:d1:
db:69:8b:49:b1:5c:00:5f:af:d2:d8:d8:ba:b8:77:5a:53:90:
be:fb:32:40:98:37:c6:98:25:91:d8:00:3b:57:8f:ea:4b:11:
ea:f4:32:8d:51:f0:a5:84:b2:78:c1:c1:01:54:15:b7:d7:5a:
c8:bd:9c:47:90:16:14:6c:6e:8c:db:75:c7:46:87:98:09:2b:
eb:3b:24:bd:03:b0:03:b3:5f:52:e7:d8:ca:87:d0:09:8f:84:
9a:fb:3c:5e:89:66:76:af:2f:40:f1:e1:b8:0b:79:7d:2d:2f:
68:64:57:38:3e:a2:c7:28:8a:fb:e3:af:dd:79:80:cb:4e:06:
36:d0:97:dc:2e:f4:8a:b0:50:2a:98:23:64:09:38:e8:f5:28:
26:0f:bf:21:48:60:45:3c:50:a1:56:39:67:7c:5b:93:e9:f2:
cf:f7:33:55:bb:07:ae:07:a4:64:fd:bd:70:87:51:b3:91:78:
26:79:93:e6:2e:bf:69:95:74:54:49:95:7b:2a:fd:ea:d3:51:
e6:7f:95:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:27 2024 by rpki-client on console-ams.rpki-client.org