Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WV002y_yae21fukshcxaT2WOHyI.roa
File: WV002y_yae21fukshcxaT2WOHyI.roa (raw, json)
Hash identifier: G1fcIPdhLuJzwKN4Yhy5CKPAkPThW6WAZOhAtVCWDsU=
Subject key identifier: 59:5D:34:DB:2F:F2:69:ED:B5:7E:E9:2C:85:CC:5A:4F:65:8E:1F:22
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018595EAFC10536BC76B2BA883F13B0DDE0C
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WV002y_yae21fukshcxaT2WOHyI.roa
Signing time: Mon 09 Jan 2023 09:44:43 +0000
ROA not before: Mon 09 Jan 2023 09:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 194.87.3.0/24 maxlen: 24
193.124.16.0/24 maxlen: 24
62.76.232.0/24 maxlen: 24
62.76.235.0/24 maxlen: 24
195.133.194.0/24 maxlen: 24
194.87.16.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
212.192.211.0/24 maxlen: 24
194.58.47.0/24 maxlen: 24
194.87.177.0/24 maxlen: 24
193.124.93.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:95:ea:fc:10:53:6b:c7:6b:2b:a8:83:f1:3b:0d:de:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 9 09:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=595d34db2ff269edb57ee92c85cc5a4f658e1f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cf:f9:76:6d:fd:40:01:3a:d5:76:85:6e:5d:
dc:dc:94:ef:63:d1:72:86:36:c3:40:90:6d:8a:b2:
54:2e:9a:bb:05:2a:0f:9b:35:a7:f8:60:ae:68:2c:
a8:65:1a:73:27:ef:6d:a6:98:fd:47:57:79:cc:f9:
aa:41:44:86:5a:4c:d4:84:00:d8:1a:a8:06:15:f1:
71:6f:96:b5:c5:e1:93:90:e5:2c:39:fe:37:9e:dd:
a7:b4:45:03:0b:d8:ab:d2:61:4a:be:78:6f:15:69:
ec:0a:02:c0:b5:c7:99:d1:23:46:d6:71:94:36:71:
04:78:3c:36:89:40:81:76:52:60:33:e1:13:f7:85:
09:37:87:43:bc:e7:6f:3a:64:cd:c9:f9:01:af:ec:
19:cc:7e:fc:6c:e3:44:09:e1:1c:7e:24:75:9e:c5:
57:54:95:da:24:b0:df:a2:2d:64:e4:c7:bf:29:c9:
fd:c7:ce:f3:b8:55:a8:83:c3:da:7d:4f:ae:87:e1:
15:d1:5c:97:de:67:87:da:c8:23:77:d0:7e:30:6e:
92:cc:69:3c:35:34:46:10:df:95:b7:ad:f8:8b:f9:
5a:2c:4e:e9:9b:14:32:82:f2:ef:bd:d6:76:d6:4f:
e6:0c:bc:f2:d4:a3:ff:3e:ad:9c:52:16:b2:81:81:
c6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5D:34:DB:2F:F2:69:ED:B5:7E:E9:2C:85:CC:5A:4F:65:8E:1F:22
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WV002y_yae21fukshcxaT2WOHyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.232.0/24
62.76.235.0/24
193.124.16.0/24
193.124.93.0/24
193.124.202.0/24
194.58.47.0/24
194.87.3.0/24
194.87.16.0/24
194.87.22.0/24
194.87.177.0/24
195.133.194.0/24
212.192.211.0/24
Signature Algorithm: sha256WithRSAEncryption
69:f8:2b:cf:50:3e:a7:ed:7c:38:17:a3:3e:ca:58:a3:4c:57:
60:81:d1:ed:73:5e:9c:4e:26:a9:9c:d9:b6:5f:62:f1:f3:36:
a2:5c:f0:2a:42:d5:60:d4:92:c4:a9:49:6f:b7:47:0c:6a:64:
f6:92:9a:dc:34:06:2d:49:e7:b1:2a:e5:bf:df:e7:da:fc:f6:
09:f3:90:5b:d4:a2:c8:ef:75:bb:b1:66:97:81:91:dd:21:fc:
05:7b:53:0b:d2:be:54:8c:ec:78:27:0c:2f:3d:25:40:35:8f:
62:27:94:93:3d:f2:29:51:17:b6:2e:fb:fd:48:1e:19:2b:73:
9e:f4:d4:ed:12:64:7b:de:2f:13:7f:d9:61:2f:a4:74:89:29:
7f:c1:84:78:79:10:47:56:80:ce:9e:99:d2:66:70:72:69:60:
89:f7:3c:25:d4:d0:76:43:e2:60:c0:f6:fc:13:fd:e2:80:23:
70:91:bd:a6:0f:a0:30:51:6f:d3:75:a9:c4:95:4b:1d:52:01:
2f:85:c5:67:bd:f7:a8:68:03:57:7c:bd:74:b5:ec:f6:47:a4:
7f:82:79:6d:f9:d9:09:52:b7:27:dc:48:a9:28:67:a2:7f:46:
61:6c:9e:af:76:9f:5f:08:f4:47:80:08:db:57:05:8c:65:e6:
2d:ad:37:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org