Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/wdv5qqrxl9eJQ-xvDJGy4hntUFM.roa
File: wdv5qqrxl9eJQ-xvDJGy4hntUFM.roa (raw, json)
Hash identifier: c9Ou0//Cy0Uj/AQSJm+gWmCVqrXttwOmAF17zLu8LhA=
Subject key identifier: C1:DB:F9:AA:AA:F1:97:D7:89:43:EC:6F:0C:91:B2:E2:19:ED:50:53
Certificate issuer: /CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Certificate serial: 01856D9D0F434D44CA244B3DE53F996C9066
Authority key identifier: 7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/wdv5qqrxl9eJQ-xvDJGy4hntUFM.roa
Signing time: Sun 01 Jan 2023 13:54:47 +0000
ROA not before: Sun 01 Jan 2023 13:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 194.207.96.0/19 maxlen: 24
213.249.128.0/18 maxlen: 24
185.188.232.0/22 maxlen: 24
83.100.128.0/17 maxlen: 24
194.207.128.0/19 maxlen: 24
94.72.192.0/18 maxlen: 24
194.207.64.0/19 maxlen: 24
5.198.0.0/17 maxlen: 24
87.102.0.0/17 maxlen: 24
77.86.0.0/17 maxlen: 24
212.50.160.0/19 maxlen: 24
194.207.0.0/19 maxlen: 24
194.207.224.0/19 maxlen: 24
178.78.64.0/18 maxlen: 24
194.207.160.0/19 maxlen: 24
213.249.192.0/18 maxlen: 24
194.207.192.0/19 maxlen: 24
159.253.64.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:0f:43:4d:44:ca:24:4b:3d:e5:3f:99:6c:90:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d15cfedb9aeab42bf8ac5b24cb1aeec2a660943
Validity
Not Before: Jan 1 13:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1dbf9aaaaf197d78943ec6f0c91b2e219ed5053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:4b:f8:74:7c:04:f0:d4:b7:c8:15:58:a1:
65:68:5f:20:44:6d:d2:d9:18:c8:5b:ec:c2:90:b2:
25:e7:48:07:e6:db:d6:12:b8:85:c2:1a:b8:fd:47:
ad:ac:bb:23:bf:a2:11:59:90:6a:ce:a7:8a:ca:d3:
a3:e0:f3:28:ff:c1:9a:1e:59:df:aa:0c:97:91:9b:
99:d8:17:5c:64:0b:14:89:fe:31:31:ed:89:82:79:
53:ee:f2:b0:b3:18:66:1e:3d:29:c0:73:84:85:3a:
fe:da:cd:cd:dc:9c:3a:0e:f9:df:df:f8:3c:93:08:
01:61:62:c0:a2:b7:3e:3a:81:2c:1a:4e:ef:cb:39:
54:81:2b:2e:a6:3b:21:cc:eb:93:b6:77:70:bd:9a:
dd:c4:c0:de:77:95:67:13:40:11:da:25:0c:8f:69:
32:42:a1:cc:b0:69:97:1e:e1:14:1d:82:ba:e4:19:
fd:42:84:11:34:94:e7:af:43:3b:35:9d:2e:0f:15:
8e:d8:15:6e:21:d0:6a:e6:8c:6e:14:33:83:a5:34:
0e:25:b7:fa:57:fc:9a:9c:48:63:31:c7:d1:05:4a:
ad:b1:71:4d:bc:35:89:1b:23:3a:54:47:47:87:16:
28:09:33:82:18:5a:37:99:d5:26:76:ec:42:b5:2a:
f7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DB:F9:AA:AA:F1:97:D7:89:43:EC:6F:0C:91:B2:E2:19:ED:50:53
X509v3 Authority Key Identifier:
keyid:7D:15:CF:ED:B9:AE:AB:42:BF:8A:C5:B2:4C:B1:AE:EC:2A:66:09:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRXP7bmuq0K_isWyTLGu7CpmCUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/wdv5qqrxl9eJQ-xvDJGy4hntUFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ad6b73-0e8c-4a45-b6bb-42281f5518a9/1/fRXP7bmuq0K_isWyTLGu7CpmCUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.198.0.0/17
77.86.0.0/17
83.100.128.0/17
87.102.0.0/17
94.72.192.0/18
159.253.64.0/20
178.78.64.0/18
185.188.232.0/22
194.207.0.0/19
194.207.64.0-194.207.255.255
212.50.160.0/19
213.249.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5e:d5:ea:0e:98:f5:37:3e:3a:40:42:16:56:a5:1d:61:78:c4:
ce:31:32:1f:22:7f:cc:5b:54:43:38:60:74:a0:f2:16:bd:00:
ce:33:51:a7:af:6e:bd:1c:d6:b0:97:bb:72:3c:f5:83:df:a4:
8c:ff:bb:9e:38:67:ab:08:02:3a:17:6e:f7:31:a2:f0:b0:7f:
8d:50:f7:ea:0a:c2:ee:ba:87:1b:00:53:77:70:89:08:9a:06:
e7:db:96:88:43:bb:b2:b0:30:d0:9d:56:0a:90:db:47:ba:fc:
89:6e:52:37:8b:2a:5e:61:f4:04:fc:5c:88:f0:3d:ed:97:23:
f0:33:06:f8:08:f7:84:93:34:de:06:f3:f8:fb:1a:39:94:ea:
78:8b:22:38:3c:b2:fd:68:a9:96:14:9c:5c:d5:24:75:c6:4f:
c3:13:3e:1b:77:32:1c:33:36:36:5e:51:80:e6:11:38:0a:93:
45:02:4f:18:33:19:a6:09:5a:13:ce:aa:4f:25:dd:93:40:aa:
aa:d7:d1:99:ea:f2:07:1f:8a:74:5e:5e:fc:cb:14:e9:e7:c2:
36:6d:a3:f1:bf:a7:64:7b:fb:19:03:a8:97:ef:9c:2b:9f:9f:
39:d0:60:e0:5c:a1:49:4f:9a:13:a7:7f:2b:e1:15:9a:55:71:
50:0d:d8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:20 2024 by rpki-client on console-fra.rpki-client.org