Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wcuzg875av-vr8TtAkDD54ZRUv0.roa
File: Wcuzg875av-vr8TtAkDD54ZRUv0.roa (raw, json)
Hash identifier: RAytVwclEqpWCb57s2Jwv0Hq3wsKmVQNGSUouzd78bw=
Subject key identifier: 59:CB:B3:83:CE:F9:6A:FF:AF:AF:C4:ED:02:40:C3:E7:86:51:52:FD
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018B0A79EA9D8E798F300914A64CAD2F4D26
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wcuzg875av-vr8TtAkDD54ZRUv0.roa
Signing time: Sat 07 Oct 2023 14:10:43 +0000
ROA not before: Sat 07 Oct 2023 14:10:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 193.124.5.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.30.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.252.0/24 maxlen: 24
212.192.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:79:ea:9d:8e:79:8f:30:09:14:a6:4c:ad:2f:4d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Oct 7 14:10:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59cbb383cef96affafafc4ed0240c3e7865152fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:4e:bc:78:6b:19:57:44:a0:4a:c4:15:3d:76:
a1:8b:00:62:29:db:89:c2:0a:b1:be:7f:7a:47:ba:
53:4c:18:c9:09:2a:33:91:15:f5:e5:4b:9b:66:e9:
a3:8d:67:98:ce:b1:eb:37:3c:aa:c2:08:78:13:46:
c8:f7:91:46:0b:27:4c:4f:4b:83:94:57:64:1a:3d:
98:00:b3:61:0b:cc:c3:87:c1:40:2b:49:89:4e:8c:
7a:44:7e:d8:0c:9e:80:8d:73:eb:f3:d4:b6:08:02:
f4:34:b9:02:b9:61:29:1d:fc:f7:d9:7a:8a:cf:10:
50:a4:1c:e7:67:1c:a3:f5:5d:c3:a2:fe:86:a6:28:
8b:b4:06:43:14:bb:d9:d2:77:46:31:40:3d:63:5c:
7b:fc:b3:d8:69:82:1a:68:9d:ed:ee:35:b1:d3:0a:
2c:bf:c7:a7:c0:a9:5f:61:bb:f2:68:ad:3d:5c:4d:
70:48:54:2c:c3:17:60:25:cb:a2:9e:79:21:84:da:
d4:5b:16:16:89:62:69:f7:5b:3f:13:29:eb:a9:67:
4b:75:6f:17:ba:c6:b1:1a:d4:50:91:40:b4:21:b4:
13:f8:4f:ef:6d:1a:e2:cf:b5:d4:d4:81:18:19:ee:
c2:94:2b:cd:53:94:fd:d1:9f:3e:48:3a:7b:e0:2b:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:B3:83:CE:F9:6A:FF:AF:AF:C4:ED:02:40:C3:E7:86:51:52:FD
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/Wcuzg875av-vr8TtAkDD54ZRUv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.5.0/24
194.87.30.0/24
194.87.143.0/24
194.87.221.0/24
212.192.215.0/24
212.192.252.0/24
212.192.254.0/24
Signature Algorithm: sha256WithRSAEncryption
28:b0:2b:12:ad:6a:1d:ae:16:16:e1:7a:20:55:43:d2:c5:a4:
2d:c6:29:d7:65:92:aa:7d:6e:3c:ae:4c:9f:4f:b5:6a:f7:01:
42:d6:fc:52:a8:37:3a:42:ea:f5:08:3a:38:e7:01:ce:f7:5b:
b1:15:9a:f8:44:16:63:45:d7:8c:8c:45:60:10:4f:d9:09:d8:
c3:d3:23:e2:5f:18:41:3a:da:f9:49:e8:56:bd:4f:39:4d:fe:
e7:b9:ef:25:9b:09:f8:76:53:b0:fc:e8:65:bc:ca:0a:69:2e:
e0:cf:c6:1d:63:8e:0f:49:c9:45:8a:51:15:dc:5a:12:4c:7e:
0e:b9:40:0a:47:d6:7e:3a:53:8b:98:04:84:5e:84:32:78:98:
53:e0:07:7f:f8:a3:ef:45:47:83:a9:1e:f2:05:48:fa:4a:d2:
13:7d:d8:b0:8a:46:f2:c5:19:3f:4b:33:1f:b5:74:fc:db:57:
0a:ea:85:1b:2f:be:03:6c:41:c2:74:14:56:03:d4:da:16:6e:
b4:7b:95:d9:a7:4b:81:e1:f9:0e:2b:78:82:e6:21:46:5a:a7:
ea:df:2f:2b:63:6f:7d:94:37:af:6a:e4:22:85:2c:fb:39:a7:
37:b2:25:11:b6:e8:e5:ec:65:57:34:d9:48:45:e1:2b:12:66:
0c:4c:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 10:47:37 2023 by rpki-client on console-fra.rpki-client.org