Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wc_-vXleuhXfy4mTcjNlgoeSPwc.roa
File: Wc_-vXleuhXfy4mTcjNlgoeSPwc.roa (raw, json)
Hash identifier: 7Vf4jSTtcwQVrjiYor5lxXBo0hLxRSrGrQIy9stOSe0=
Subject key identifier: 59:CF:FE:BD:79:5E:BA:15:DF:CB:89:93:72:33:65:82:87:92:3F:07
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D3067E59A1C5390752C26FAC7CABF3605
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wc_-vXleuhXfy4mTcjNlgoeSPwc.roa
Signing time: Mon 22 Jan 2024 09:02:11 +0000
ROA not before: Mon 22 Jan 2024 09:02:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 193.124.7.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
195.133.6.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 09:25:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:67:e5:9a:1c:53:90:75:2c:26:fa:c7:ca:bf:36:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 22 09:02:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59cffebd795eba15dfcb89937233658287923f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:93:6a:47:2d:3e:96:c9:b9:94:37:9a:16:9f:
ac:81:8c:43:b3:d4:70:0e:15:d6:18:5e:ed:ce:49:
99:43:56:b8:d5:e7:d5:b1:91:3f:47:92:ce:94:d9:
c8:99:f3:4d:36:23:a4:f6:d0:0e:de:67:3a:0d:dd:
5f:be:15:27:d2:13:98:13:3d:ca:07:ce:e9:d7:7d:
e0:75:7c:c2:4b:86:b0:96:89:f2:7e:bf:90:18:8c:
e4:e9:14:c6:ca:e6:a1:da:71:a3:07:c2:0e:25:e7:
ab:e5:43:fb:b6:fa:b0:06:65:b3:b3:3b:71:37:2a:
fb:43:fb:49:3b:01:06:79:aa:74:8c:0c:cb:cf:cf:
73:82:1f:48:bc:24:71:f6:e7:e6:fa:35:3b:5c:ad:
3d:d5:ae:d1:3f:d6:a1:43:a0:a8:f6:ff:d5:ff:c1:
ec:87:b5:27:c9:5e:c1:57:5e:fd:4f:c2:2a:72:9d:
b7:74:cc:47:c5:e2:91:7c:47:52:20:a4:6d:4e:5b:
dd:50:17:65:02:96:e3:0e:4e:81:77:a3:c9:1b:4b:
9d:b1:b7:31:d2:63:89:4b:fc:b8:57:84:bd:e8:3c:
20:35:db:2d:7d:b4:db:a9:29:96:ac:42:ba:61:4f:
93:81:c7:ec:54:ef:a4:9b:67:48:46:ed:15:c9:82:
51:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:FE:BD:79:5E:BA:15:DF:CB:89:93:72:33:65:82:87:92:3F:07
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wc_-vXleuhXfy4mTcjNlgoeSPwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.7.0/24
193.124.200.0/24
195.133.6.0/24
195.133.85.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a4:a6:c3:7a:1f:98:cd:ee:ee:05:f2:e1:e8:89:7d:68:cc:
f0:bc:5a:00:af:92:9a:58:a7:c5:e4:cc:7b:3a:15:08:c5:15:
8e:0b:5d:3d:a3:2f:ce:5e:aa:b8:e7:17:a2:84:0e:43:67:ca:
5d:1d:e0:7b:72:ef:cf:5e:28:37:0f:55:64:62:ad:8a:49:36:
3c:09:5f:89:83:cc:98:06:2e:c7:41:94:39:ff:3a:fc:86:60:
9c:ed:65:e1:61:19:60:44:7c:8d:09:eb:25:ba:ee:1e:d0:79:
91:0d:56:a4:28:c6:b3:04:9b:65:87:b5:6d:c7:f3:dc:57:f9:
61:ad:6d:a5:8a:4d:e1:55:90:03:63:fe:46:ab:05:7f:8a:27:
73:7e:fd:dd:c8:6d:b9:1a:8d:dc:a2:5d:f4:5a:95:de:c1:91:
2b:8c:77:6e:0a:4b:bd:09:fa:73:ff:9d:82:8e:01:24:fe:87:
2e:ac:23:3e:de:76:53:73:45:67:c1:f1:da:3f:4f:bb:de:ac:
59:e4:ed:5b:94:d3:8b:c2:f8:68:26:42:91:ec:0b:82:19:72:
6a:3e:ba:eb:cf:f8:a2:e3:b6:18:67:b8:49:b0:66:40:18:95:
ac:ee:90:64:2c:22:a4:e1:8a:27:cb:f0:bc:c3:3c:2d:1a:d4:
9b:5b:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:18 2024 by rpki-client on console-fra.rpki-client.org