Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/WcXzwJ1CWE-Wqn_Up0ixbA0-n_A.roa
File: WcXzwJ1CWE-Wqn_Up0ixbA0-n_A.roa (raw, json)
Hash identifier: dUxN+nAkr28cW7PTDZceaj3VOF0pCeW/6Vq7kSqofMc=
Subject key identifier: 59:C5:F3:C0:9D:42:58:4F:96:AA:7F:D4:A7:48:B1:6C:0D:3E:9F:F0
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 018D2116B14E8D5AB9A8A266FEC0C7FE329F
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/WcXzwJ1CWE-Wqn_Up0ixbA0-n_A.roa
Signing time: Fri 19 Jan 2024 09:39:11 +0000
ROA not before: Fri 19 Jan 2024 09:39:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50767
IP address blocks: 91.224.128.0/23 maxlen: 23
91.227.0.0/22 maxlen: 22
193.106.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sun 21 Jan 2024 07:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:16:b1:4e:8d:5a:b9:a8:a2:66:fe:c0:c7:fe:32:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jan 19 09:39:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59c5f3c09d42584f96aa7fd4a748b16c0d3e9ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:19:27:58:38:4a:98:5f:07:c0:d9:54:24:
63:ae:27:7d:e2:cb:17:bc:d3:89:ba:25:fd:5a:dc:
63:29:da:d9:c1:72:7f:bd:8f:de:28:61:98:73:3e:
fa:52:0b:ca:45:b5:b7:39:e5:d1:8b:93:af:a9:78:
d9:0e:cd:f4:ca:44:bf:aa:ea:0d:df:51:74:f5:13:
e3:e8:cf:fb:2d:10:f5:ca:30:b5:0a:15:1f:4b:82:
68:36:2b:2a:6f:b7:6b:11:bc:9a:a3:21:10:84:95:
67:5e:b0:8c:15:b9:f6:a0:36:b4:dc:b4:b3:54:05:
ee:88:f3:37:5f:ae:68:05:5f:13:a5:ea:21:4c:a4:
a5:76:bc:6a:11:7f:1f:68:0a:ca:be:0a:73:dc:7b:
44:09:d2:74:73:c0:12:d4:60:19:59:bf:d4:47:96:
77:a8:55:73:23:e6:8b:ff:4a:0c:bc:b6:c9:13:5d:
1c:1d:ec:1a:33:27:fe:3f:3d:57:99:9f:a8:cb:20:
cf:c4:a4:17:70:03:eb:2c:89:00:7e:f4:2f:f9:a4:
87:78:45:5d:d7:54:fd:74:f8:de:2d:00:62:ee:1c:
98:4f:0f:5b:e7:6b:24:2a:92:65:8c:e0:cf:d3:fc:
19:1f:b1:5f:ca:1b:a7:3d:9e:85:da:47:80:a0:07:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C5:F3:C0:9D:42:58:4F:96:AA:7F:D4:A7:48:B1:6C:0D:3E:9F:F0
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/WcXzwJ1CWE-Wqn_Up0ixbA0-n_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.128.0/23
91.227.0.0/22
193.106.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:be:f6:a9:bc:eb:73:00:ec:7e:fc:03:c9:4f:18:b6:bd:ce:
3b:96:1b:ce:8c:20:25:e1:0f:57:70:3d:03:2c:4a:13:43:61:
37:e7:4b:4a:59:df:58:4c:7b:7b:2d:e5:7c:f4:21:6f:89:c8:
1f:94:fe:23:1a:99:6b:87:8a:53:c2:e1:ee:88:0e:08:b4:5e:
70:54:ab:3a:81:36:0b:5b:8b:b5:96:12:db:a4:32:fc:cd:6a:
ba:b0:7c:d3:b2:4b:0c:b2:ec:f7:98:b2:48:3e:d5:31:4b:ca:
ab:08:88:91:30:ad:7d:58:b6:f6:e7:47:90:e8:93:1f:f1:81:
ce:36:16:5e:77:c0:28:7c:66:18:b5:36:a1:ec:23:8d:be:08:
ad:8a:6c:51:e3:7a:8b:0c:d6:9a:ec:82:15:aa:e6:d0:3f:47:
df:fe:8c:3d:be:48:2a:4f:8a:23:bf:d6:17:45:a1:39:44:5b:
e6:75:c8:0e:84:6a:71:e5:63:97:8b:55:a3:8f:1b:fc:35:ee:
2c:98:57:8c:8f:46:75:f4:07:33:5e:55:39:4a:f2:4a:08:2d:
4d:92:91:9c:cb:74:57:ab:93:b4:a2:17:15:35:fe:b1:16:63:
dd:c2:57:20:5a:1c:ce:e4:3d:f4:39:fc:05:16:2f:a0:23:9f:
6d:48:5f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:39 2024 by rpki-client on console-ams.rpki-client.org