Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/WM1VXxRd3xK0aDNOznZOaGLPOzU.roa
File: WM1VXxRd3xK0aDNOznZOaGLPOzU.roa (raw, json)
Hash identifier: XtMBBTRLff+Om/KDUotp0+rX03KBHX1/PkE6lRP9JB8=
Subject key identifier: 58:CD:55:5F:14:5D:DF:12:B4:68:33:4E:CE:76:4E:68:62:CF:3B:35
Certificate issuer: /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial: 01857315E0E3C472832516C57330F9A24733
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/WM1VXxRd3xK0aDNOznZOaGLPOzU.roa
Signing time: Mon 02 Jan 2023 15:24:51 +0000
ROA not before: Mon 02 Jan 2023 15:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204818
IP address blocks: 193.218.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:15:e0:e3:c4:72:83:25:16:c5:73:30:f9:a2:47:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Validity
Not Before: Jan 2 15:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58cd555f145ddf12b468334ece764e6862cf3b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:89:fa:b8:91:62:93:b8:70:c3:c9:ac:e2:
d2:e4:9a:9b:d8:7a:6c:67:a0:da:52:85:9a:4d:1f:
b2:9c:68:f3:3a:89:b4:60:8c:1a:69:4a:b2:81:f8:
56:be:59:b4:88:25:8b:d8:81:9d:18:0e:07:ee:4e:
23:24:19:85:9b:f4:52:14:f2:84:87:fa:74:16:25:
5c:75:11:ca:90:bd:19:b2:ea:c6:a4:a3:e5:ef:b1:
b8:6e:43:65:3b:00:2d:e1:92:32:99:26:e8:e0:cc:
4b:98:79:8d:31:1a:92:6e:f6:b4:2f:1a:34:86:91:
14:4f:a5:a8:c0:8c:6d:48:4a:a3:81:d2:f0:db:52:
6a:69:46:7e:40:bd:63:19:4c:dd:bd:0d:df:2c:61:
87:fd:bd:51:e8:19:b2:82:cf:0d:99:8d:e2:c0:76:
89:85:b9:63:e3:65:f8:d2:a9:bd:03:d0:e0:0b:2b:
53:28:f1:38:bd:e5:00:1c:01:b0:90:37:ad:68:1e:
76:45:3e:12:ae:9f:bc:fd:d9:b2:c7:b9:a7:93:0e:
7b:45:72:2a:48:90:5a:a4:61:86:08:85:aa:2c:c8:
56:2a:3c:f8:7d:6e:15:1b:68:ed:4a:28:f0:0b:89:
c2:b4:77:40:f0:34:75:6f:38:53:54:8c:be:a5:35:
f2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CD:55:5F:14:5D:DF:12:B4:68:33:4E:CE:76:4E:68:62:CF:3B:35
X509v3 Authority Key Identifier:
keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/WM1VXxRd3xK0aDNOznZOaGLPOzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.120.0/24
Signature Algorithm: sha256WithRSAEncryption
86:dc:20:7c:b9:87:60:bb:73:3d:a5:0c:c7:3c:75:c9:f6:12:
09:16:2f:27:71:93:6b:21:e8:1a:3d:63:be:b9:f8:71:80:97:
01:d6:0f:91:da:fa:d3:23:6b:3e:84:9a:90:fc:5c:a2:9a:49:
aa:51:68:9b:4d:44:0b:f9:b6:ac:3b:1d:ba:ab:fd:da:25:3b:
f7:77:5f:b7:dc:75:98:79:5d:25:ec:4b:97:0f:49:bc:5c:36:
12:ec:af:e5:a8:39:3d:20:c2:e0:41:9c:09:3f:41:9c:1f:22:
70:1b:a2:25:b8:f0:1b:0b:c6:30:d8:73:77:57:d8:69:84:28:
cf:2a:e1:33:03:a9:ec:ad:fb:a7:99:37:f9:d7:e7:46:eb:83:
9b:b7:5b:3a:55:ae:3d:af:b9:18:36:13:cb:68:60:50:35:f8:
10:67:15:19:a7:a5:75:bc:1d:9d:dd:74:51:c7:72:12:c7:7f:
69:94:01:57:24:17:a3:a7:73:a4:af:4c:f5:78:f1:f4:0d:9e:
f6:c8:e7:a4:0f:70:60:f9:ec:e8:a0:a5:da:11:36:83:34:f8:
3f:94:2b:c5:71:fd:0f:d1:ec:0d:f8:e1:12:0f:8a:3c:5f:51:
d7:4b:86:74:d6:91:8f:98:17:ca:b8:1c:ef:4e:be:09:26:78:
b5:fe:13:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:17 2024 by rpki-client on console-ams.rpki-client.org