Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WO91dsHJL_IUk6F8BnsgJa0wJ54.roa
File: WO91dsHJL_IUk6F8BnsgJa0wJ54.roa (raw, json)
Hash identifier: MO1N+ALtG67YNthha9YgpAqmfuWBZAkA1uQG6D2jSpU=
Subject key identifier: 58:EF:75:76:C1:C9:2F:F2:14:93:A1:7C:06:7B:20:25:AD:30:27:9E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018E0D23012E1F94024EC75BAC9D1AF769C0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WO91dsHJL_IUk6F8BnsgJa0wJ54.roa
Signing time: Tue 05 Mar 2024 05:43:01 +0000
ROA not before: Tue 05 Mar 2024 05:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.124.7.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.142.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.245.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.78.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Mar 2024 11:26:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:23:01:2e:1f:94:02:4e:c7:5b:ac:9d:1a:f7:69:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 5 05:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ef7576c1c92ff21493a17c067b2025ad30279e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:86:0f:55:f1:55:5f:40:d7:cd:7a:b8:1c:ab:
52:8d:57:cd:e6:bf:8d:21:f0:9d:8b:3c:31:b5:62:
56:47:b3:0f:ec:f2:a7:54:18:31:5d:37:7a:ed:c7:
c3:cc:48:11:2c:c3:51:54:f0:23:28:b6:7d:69:cf:
e6:56:39:b5:f8:b4:0c:10:e5:aa:f4:96:da:44:ed:
fe:14:6b:ea:2f:d5:af:bd:4a:20:5e:86:9d:85:43:
74:63:b4:6c:cf:5f:72:ae:3e:1a:25:2b:35:56:cb:
5f:68:22:a6:a0:f4:48:60:f7:ec:d4:0c:a6:93:18:
df:9f:55:5b:45:f8:05:78:86:cb:48:f6:48:16:0e:
67:b1:fe:a4:8a:14:05:d0:58:65:12:dd:e9:ba:43:
d1:a4:28:44:6e:78:e2:ae:24:25:2b:3a:ae:60:19:
ca:06:8e:1c:a3:2a:7f:4e:06:c9:7e:de:ad:0b:7c:
9c:a1:ce:ac:2c:3d:d6:a6:cb:32:35:79:30:02:f4:
a4:71:70:05:a3:20:39:9f:df:6c:6e:f1:06:b9:87:
8d:f7:1d:c5:83:e4:83:ed:00:56:a4:c2:80:a6:5d:
4b:6b:40:5e:f5:47:d2:d8:4d:5d:08:6e:48:cf:f0:
28:ed:38:01:2a:e1:35:73:59:3c:8c:8a:15:5b:ce:
d2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EF:75:76:C1:C9:2F:F2:14:93:A1:7C:06:7B:20:25:AD:30:27:9E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WO91dsHJL_IUk6F8BnsgJa0wJ54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.203.0/24
194.87.22.0/24
194.87.32.0/24
194.87.142.0/24
194.87.169.0/24
194.87.245.0/24
195.133.6.0/24
195.133.25.0/24
195.133.78.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e9:fe:f3:07:03:91:48:b8:cd:76:b0:3b:76:1e:37:95:8b:
5e:26:d4:65:63:77:f7:59:71:ef:4b:af:f6:8a:63:dc:3a:76:
71:13:1c:dc:b3:d1:f2:e8:33:e9:1d:fb:21:8e:22:f5:d1:cf:
5b:8e:46:2b:76:8f:28:e8:4d:fc:01:2f:a3:e3:c4:30:cb:ef:
38:24:86:21:1d:8f:d9:12:f7:65:32:ae:94:db:f2:bd:b6:76:
ca:b0:bb:7d:96:92:47:3a:a2:6b:04:16:95:cb:66:79:ff:4c:
2e:3a:a0:e9:01:4a:88:6d:80:e5:08:cc:61:a7:88:d1:b0:c1:
92:0b:70:3b:1d:93:81:e8:86:7e:4e:38:38:b3:e1:6f:09:70:
d4:f6:a0:ea:8b:bc:5d:57:ff:9c:3d:bd:c1:79:a6:0e:4c:89:
45:0c:fe:9f:9a:f2:cc:3d:77:8e:0c:ba:05:9a:09:41:5a:37:
1d:65:5e:cc:ca:1c:11:8c:48:1b:30:44:e0:80:0e:c4:38:02:
ae:a6:99:24:57:89:b0:ee:39:42:bb:73:74:95:eb:c7:e3:72:
96:a9:e0:65:58:e0:2e:78:10:63:08:a8:e6:2d:3c:f8:87:08:
55:1f:a8:c3:da:ac:2d:1e:36:04:4c:58:cb:54:21:31:80:0e:
18:e0:31:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org