Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WEew45Rt3Pu5ohqlTmkCS4lJBDo.roa
File: WEew45Rt3Pu5ohqlTmkCS4lJBDo.roa (raw, json)
Hash identifier: CiuZsRPpRUjbUlx4I6+b6Ll1e7L1Mb1CWxLEBf03/bE=
Subject key identifier: 58:47:B0:E3:94:6D:DC:FB:B9:A2:1A:A5:4E:69:02:4B:89:49:04:3A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0187EA66B4E5725652278A2DD386AE40AE97
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WEew45Rt3Pu5ohqlTmkCS4lJBDo.roa
Signing time: Fri 05 May 2023 05:33:32 +0000
ROA not before: Fri 05 May 2023 05:33:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
194.87.27.0/24 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 May 2023 03:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:66:b4:e5:72:56:52:27:8a:2d:d3:86:ae:40:ae:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 5 05:33:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5847b0e3946ddcfbb9a21aa54e69024b8949043a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:8d:a0:d4:df:37:7a:f7:d5:47:95:2c:4f:
e8:56:f0:07:fd:08:c9:10:16:67:0c:b4:64:73:29:
35:4b:98:0a:31:35:b4:0d:b8:89:1c:c6:89:44:c0:
5a:8d:86:fd:6e:d6:59:9e:ca:3f:3e:56:34:9d:bd:
69:ce:c2:5f:a2:d5:b7:2b:47:c7:c9:e1:64:18:c8:
89:2c:d3:69:82:e0:a2:11:14:1f:eb:5a:2d:a3:83:
50:e7:c3:01:65:a1:30:a2:30:9d:7b:06:be:cd:25:
f9:e3:00:40:55:b1:e0:37:3f:65:2b:b0:6d:d6:58:
60:9b:0f:dc:98:20:90:9f:86:70:ec:e5:3f:90:da:
ce:43:41:b3:c2:1a:7c:3f:3c:d2:ef:ea:3c:f5:74:
a3:1c:c8:39:85:d9:0d:93:46:5b:67:e2:88:d2:74:
28:39:f4:35:04:ce:0c:86:e7:86:41:4d:35:94:70:
6e:75:33:bf:b8:88:db:5b:e7:e2:34:8a:d6:29:91:
ac:e9:d0:bd:d2:68:01:b8:a9:f6:6c:d0:da:6d:e7:
02:86:4c:e7:84:c3:ee:fb:aa:94:57:ea:56:c3:52:
14:bd:eb:8d:be:70:97:a5:e0:f8:f5:44:b3:91:26:
79:d9:43:32:f0:ff:03:05:fc:e1:d8:33:ea:d0:98:
34:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:47:B0:E3:94:6D:DC:FB:B9:A2:1A:A5:4E:69:02:4B:89:49:04:3A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WEew45Rt3Pu5ohqlTmkCS4lJBDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.203.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.118.0/24
194.87.136.0/24
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
75:eb:8e:dc:02:d8:ec:2e:ff:ae:74:02:22:2e:27:8f:50:ea:
57:f6:b1:79:0d:10:ad:57:a8:20:1e:63:9e:e4:15:2c:d3:1f:
17:68:d7:bf:8e:61:9c:34:cf:e8:6d:76:a3:2d:21:62:38:d9:
47:4d:55:4e:42:14:88:8a:83:c9:36:b2:f3:35:fd:b2:a9:b5:
72:9d:f7:53:b1:ec:7a:80:49:40:ed:e9:6d:35:03:31:76:0b:
dd:35:fb:69:ba:a2:bd:06:c7:3e:12:be:36:89:ba:c4:32:65:
d4:40:79:59:76:4e:14:82:04:7c:ff:cf:27:b9:c9:a6:37:ad:
17:c2:d2:d1:7f:b9:13:ae:37:2f:e1:92:18:5d:1c:b8:35:cb:
e4:7f:11:53:cb:0e:29:93:8a:dd:83:f1:15:e2:0f:14:d7:e7:
23:e8:9a:e7:b3:72:28:e7:ff:2c:67:45:8e:15:9d:90:dc:ff:
db:83:d4:00:bc:8d:ac:e7:f6:57:d1:9d:85:07:72:fc:b2:73:
18:b9:cd:0e:ae:33:c7:a2:81:01:5a:f1:64:b0:44:91:bd:7d:
5d:9a:c7:3d:ab:d4:0e:24:a5:f1:73:b4:b4:e9:49:52:c2:34:
be:d7:71:18:28:3f:ef:53:f8:ad:c4:49:8b:86:92:c1:67:0b:
dc:ed:a0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org