Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wcoF-oSnmrFf1Krjrd68QxIBVFk.roa
File: wcoF-oSnmrFf1Krjrd68QxIBVFk.roa (raw, json)
Hash identifier: 07g9DMuoLzfxS//xSSvTOomJdQkVBQJ5WGsSsyFizN4=
Subject key identifier: C1:CA:05:FA:84:A7:9A:B1:5F:D4:AA:E3:AD:DE:BC:43:12:01:54:59
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018D6DE76091414CD09D6E0F15A03953D49F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wcoF-oSnmrFf1Krjrd68QxIBVFk.roa
Signing time: Sat 03 Feb 2024 07:38:16 +0000
ROA not before: Sat 03 Feb 2024 07:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 192.124.183.0/24 maxlen: 24
193.124.5.0/24 maxlen: 24
193.124.7.0/24 maxlen: 24
193.124.95.0/24 maxlen: 24
193.124.200.0/24 maxlen: 24
193.124.202.0/24 maxlen: 24
193.124.207.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.87.22.0/24 maxlen: 24
194.87.26.0/24 maxlen: 24
194.87.32.0/24 maxlen: 24
194.87.81.0/24 maxlen: 24
194.87.149.0/24 maxlen: 24
194.87.170.0/24 maxlen: 24
194.87.172.0/24 maxlen: 24
194.87.201.0/24 maxlen: 24
194.135.18.0/24 maxlen: 24
195.58.54.0/24 maxlen: 24
195.58.60.0/24 maxlen: 24
195.133.2.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.72.0/24 maxlen: 24
195.133.85.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.193.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 05:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6d:e7:60:91:41:4c:d0:9d:6e:0f:15:a0:39:53:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 3 07:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1ca05fa84a79ab15fd4aae3addebc4312015459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3f:e3:36:d4:bc:22:5b:81:f6:f5:1d:0b:c0:
3f:46:14:0c:10:f2:84:b4:a0:91:a3:a3:5e:99:d2:
32:11:e1:71:f0:43:04:76:22:c9:f5:03:16:67:e2:
f9:9f:99:ea:12:d4:f6:f1:bb:e0:ab:fe:be:cb:f3:
37:e1:e9:87:8a:ef:cb:d8:d1:b9:f3:5b:29:e5:a5:
40:fa:e8:79:e6:ad:f9:95:0d:e3:2c:e6:8e:53:ec:
26:15:e2:99:db:f7:8d:4a:59:44:a8:cf:5a:08:93:
80:14:7e:47:e0:6d:df:9c:83:41:ee:fd:95:c0:df:
3d:dc:91:85:e9:56:8f:c7:38:43:32:93:1d:16:e2:
ff:be:91:f2:58:68:be:50:e1:63:3a:d7:3d:32:f4:
f7:2a:5d:13:4b:5a:7d:c8:3d:c2:39:74:31:5b:44:
a1:54:ae:9c:b0:2a:3e:aa:69:8b:64:75:c9:e4:59:
fc:5f:7d:bc:26:91:dd:7c:4b:f3:7b:b3:c4:1b:c8:
35:75:fb:c5:b7:73:70:47:1d:b8:4d:55:b0:18:a8:
3b:d6:79:ec:7b:be:40:7e:ed:87:51:10:4a:a7:07:
af:a2:38:c7:5c:a3:4e:b7:4f:ce:35:a9:11:42:dd:
24:12:38:73:d7:ff:a7:99:8c:b5:1f:81:8a:15:bb:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CA:05:FA:84:A7:9A:B1:5F:D4:AA:E3:AD:DE:BC:43:12:01:54:59
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wcoF-oSnmrFf1Krjrd68QxIBVFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.183.0/24
193.124.5.0/24
193.124.7.0/24
193.124.95.0/24
193.124.200.0/24
193.124.202.0/24
193.124.207.0/24
194.58.42.0/24
194.87.22.0/24
194.87.26.0/24
194.87.32.0/24
194.87.81.0/24
194.87.149.0/24
194.87.170.0/24
194.87.172.0/24
194.87.201.0/24
194.135.18.0/24
195.58.54.0/24
195.58.60.0/24
195.133.2.0/24
195.133.25.0/24
195.133.72.0/24
195.133.85.0/24
195.133.192.0/24
212.192.1.0/24
212.193.13.0/24
Signature Algorithm: sha256WithRSAEncryption
07:34:91:49:09:39:3e:81:bf:35:1f:36:57:15:15:b7:84:c7:
73:ff:65:f2:74:c0:ad:69:3e:34:70:bb:15:88:7b:fb:30:dc:
ae:27:db:3b:eb:a2:14:e8:7c:62:dc:aa:55:33:7e:5f:93:82:
f3:f6:6a:40:e2:ca:46:bf:00:7d:b7:8a:d9:4e:df:61:cb:12:
a3:da:22:e2:53:0a:6b:01:b3:b1:cd:50:80:72:65:e9:03:95:
e0:97:0a:5a:82:de:6d:86:ab:2b:fc:81:be:f3:f3:8a:a6:ed:
06:81:2a:f3:4c:6c:9f:ae:aa:8b:e0:64:ca:8b:30:c7:3f:48:
17:23:ea:e8:4b:4b:a5:fc:7c:a5:aa:9d:ec:bd:c5:69:eb:5b:
28:aa:43:e2:d5:4c:3a:ae:82:d3:56:6b:44:5f:e9:7b:2c:c1:
bf:8d:c8:ae:d1:51:3c:92:1e:31:c0:70:d6:35:81:56:63:d5:
f3:53:8b:7e:fa:b7:e3:77:d1:39:c0:a0:ba:0a:c9:09:63:cd:
51:95:d8:2c:46:5f:50:5e:f7:b2:71:ba:ef:6f:f7:e4:80:62:
86:54:ae:17:09:1c:22:0c:38:e5:7b:2d:24:a7:87:39:19:de:
a2:2e:60:d1:42:4b:65:73:a8:35:96:3b:91:de:48:5a:a0:6c:
51:42:8b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:30 2024 by rpki-client on console-fra.rpki-client.org