Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WTeuhAHYnGm1ramEpeU-HpSYzl4.roa
File: WTeuhAHYnGm1ramEpeU-HpSYzl4.roa (raw, json)
Hash identifier: S1dq9fU5Ts2xo3Do2iE3VIVXnDCnKZQuXRS/FYNCpq8=
Subject key identifier: 59:37:AE:84:01:D8:9C:69:B5:AD:A9:84:A5:E5:3E:1E:94:98:CE:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018F587079086A126776476639A1F7FFD69F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WTeuhAHYnGm1ramEpeU-HpSYzl4.roa
Signing time: Wed 08 May 2024 13:41:56 +0000
ROA not before: Wed 08 May 2024 13:41:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399471
IP address blocks: 194.85.250.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
212.192.245.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:58:70:79:08:6a:12:67:76:47:66:39:a1:f7:ff:d6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 8 13:41:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5937ae8401d89c69b5ada984a5e53e1e9498ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:33:3f:b4:2b:a1:0c:3a:31:7e:23:68:43:
92:5e:41:0c:d5:d9:67:57:2a:c8:95:da:fc:a4:2f:
3e:cf:b9:54:ea:ae:24:0a:d1:f3:d9:78:06:43:6d:
d0:29:3b:f0:ef:19:6e:7d:c7:5a:bc:49:35:bd:3b:
ef:b9:36:5d:04:fb:1b:77:a6:5e:1d:24:4e:73:5f:
84:ac:b8:65:0a:1a:2d:24:b0:62:0c:88:9e:16:55:
dd:2b:b6:e1:aa:29:f9:cf:d0:9a:71:d4:bc:22:ca:
1e:11:37:cf:5a:05:5e:f0:16:c7:49:88:9a:f5:17:
b6:4b:b6:07:af:8e:1d:b8:c7:77:ce:ca:30:be:21:
c5:b8:c6:69:46:ee:44:6c:41:82:72:70:63:4c:6a:
94:fa:cd:19:89:6b:1e:4b:e3:69:14:c1:a6:d6:36:
44:91:b7:30:69:84:a7:93:0f:23:c7:72:70:c4:3e:
0e:d0:ca:68:10:db:be:5b:99:b6:f8:e0:71:d2:0a:
43:e4:e6:8f:93:78:f7:63:7a:d3:22:94:13:dc:4e:
d5:cc:1f:4b:ef:6b:89:fc:23:5b:14:2e:b0:bf:78:
d4:e5:df:c4:01:b9:b1:b7:7b:03:69:fd:e7:5f:53:
a5:46:e8:13:1d:14:1b:6f:36:70:ef:47:81:75:d8:
40:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:37:AE:84:01:D8:9C:69:B5:AD:A9:84:A5:E5:3E:1E:94:98:CE:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WTeuhAHYnGm1ramEpeU-HpSYzl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.250.0/24
195.133.39.0/24
212.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
23:f0:83:06:14:1f:4f:a9:91:2f:78:cc:98:54:a8:0b:40:e7:
39:80:d5:cb:db:b2:00:c7:ad:f9:99:b9:d7:18:41:ed:80:6b:
52:35:22:8b:ec:ad:c4:fc:f9:30:9e:9d:da:4c:ff:8e:ff:b7:
be:f8:0b:6e:54:6e:9d:e2:4c:90:41:28:d9:0d:f0:89:20:b5:
b7:94:a6:65:17:c8:c0:1f:cb:ac:60:ec:20:70:bb:fd:75:e5:
e1:5c:be:2f:80:36:aa:53:5c:98:84:88:bb:3d:e0:85:5c:89:
be:a6:c1:b0:fc:86:cd:95:fa:72:67:41:7c:af:87:1b:d2:aa:
3f:a5:36:9a:44:00:67:0c:0d:f6:88:f7:95:ce:d1:ae:96:86:
75:76:36:93:61:9c:fa:92:c2:17:95:43:b7:c1:2b:2f:f6:00:
f4:fd:c4:62:83:66:e7:f2:00:49:18:80:c0:c4:4c:93:aa:32:
cc:10:61:98:18:50:73:94:71:97:15:a5:7c:fc:ce:5c:e0:55:
66:53:1c:e9:26:cb:7a:27:10:af:44:b2:49:5f:bc:d9:96:c1:
5b:98:d0:32:71:4c:27:ea:f5:12:da:40:6f:6c:af:1f:32:96:
aa:74:3b:39:c3:ac:13:8d:18:e1:e8:2b:92:65:d1:c5:1c:ff:
80:f9:f9:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 5 13:01:36 2024 by rpki-client on console-ams.rpki-client.org