Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wjK-BRzo1Cd9xIWQYP5as5nml5A.roa
File: wjK-BRzo1Cd9xIWQYP5as5nml5A.roa (raw, json)
Hash identifier: ykiLSFkAbUi75Vq3SRsfF5dsmuUbHA5nEAqUz7LXzdw=
Subject key identifier: C2:32:BE:05:1C:E8:D4:27:7D:C4:85:90:60:FE:5A:B3:99:E6:97:90
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01910CF05DA918AAC3DCF47EC2CF6BF8C6B9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wjK-BRzo1Cd9xIWQYP5as5nml5A.roa
Signing time: Thu 01 Aug 2024 07:56:04 +0000
ROA not before: Thu 01 Aug 2024 07:56:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.58.41.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.66.0/24 maxlen: 24
194.58.155.0/24 maxlen: 24
194.58.223.0/24 maxlen: 24
194.87.44.0/24 maxlen: 24
194.87.49.0/24 maxlen: 24
194.87.52.0/24 maxlen: 24
194.87.54.0/24 maxlen: 24
194.87.55.0/24 maxlen: 24
194.87.83.0/24 maxlen: 24
194.87.84.0/24 maxlen: 24
194.87.104.0/24 maxlen: 24
194.87.115.0/24 maxlen: 24
194.87.130.0/24 maxlen: 24
194.87.133.0/24 maxlen: 24
194.87.134.0/24 maxlen: 24
194.87.138.0/24 maxlen: 24
194.87.140.0/24 maxlen: 24
194.87.143.0/24 maxlen: 24
194.87.151.0/24 maxlen: 24
194.87.161.0/24 maxlen: 24
194.87.169.0/24 maxlen: 24
194.87.187.0/24 maxlen: 24
194.87.190.0/24 maxlen: 24
194.87.200.0/24 maxlen: 24
194.87.202.0/24 maxlen: 24
194.87.208.0/24 maxlen: 24
194.87.215.0/24 maxlen: 24
194.87.220.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
194.87.226.0/24 maxlen: 24
194.87.233.0/24 maxlen: 24
194.87.250.0/24 maxlen: 24
194.135.38.0/24 maxlen: 24
194.135.105.0/24 maxlen: 24
195.58.34.0/24 maxlen: 24
195.58.36.0/24 maxlen: 24
195.58.37.0/24 maxlen: 24
195.58.38.0/24 maxlen: 24
195.58.39.0/24 maxlen: 24
195.58.63.0/24 maxlen: 24
195.133.9.0/24 maxlen: 24
195.133.15.0/24 maxlen: 24
195.133.18.0/24 maxlen: 24
195.133.21.0/24 maxlen: 24
195.133.25.0/24 maxlen: 24
195.133.27.0/24 maxlen: 24
195.133.30.0/24 maxlen: 24
195.133.39.0/24 maxlen: 24
195.133.50.0/23 maxlen: 23
195.133.63.0/24 maxlen: 24
195.133.73.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
195.133.92.0/23 maxlen: 23
195.133.194.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
212.192.223.0/24 maxlen: 24
212.192.246.0/24 maxlen: 24
212.192.248.0/24 maxlen: 24
212.193.1.0/24 maxlen: 24
212.193.5.0/24 maxlen: 24
212.193.24.0/24 maxlen: 24
212.193.30.0/24 maxlen: 24
2a01:57c0::/29 maxlen: 29
2a0c:ff40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 03 Aug 2024 10:35:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:f0:5d:a9:18:aa:c3:dc:f4:7e:c2:cf:6b:f8:c6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 1 07:56:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c232be051ce8d4277dc4859060fe5ab399e69790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:f9:b8:75:53:df:5a:82:10:ce:54:bf:52:
71:6a:12:5b:e1:61:10:fc:7c:05:c2:29:8e:6c:0e:
92:51:43:69:d8:6d:69:26:34:9c:9c:dd:d8:f4:03:
f5:63:38:f8:35:26:51:17:3d:d2:49:85:02:a1:20:
e3:6e:68:32:c8:0f:6c:7a:d3:15:ff:83:81:9d:d1:
ce:5a:f9:96:40:e4:b9:03:38:70:0c:7d:77:b2:30:
67:02:79:dc:35:cc:72:fb:92:af:e0:f4:5b:f0:aa:
fc:d0:1b:8e:9e:98:da:ac:4c:6b:64:f1:34:82:22:
18:4f:e1:ff:ef:34:e1:18:37:5e:23:1e:9a:e2:be:
48:64:f8:e9:df:ad:cd:a2:80:ac:f0:49:f5:9c:83:
bf:5c:ba:f2:1e:06:1c:9f:67:97:98:ba:e6:0e:75:
f5:77:69:58:93:a0:ff:a9:2d:9e:fd:2a:db:37:25:
6e:fd:29:9b:cd:09:e2:ce:35:b5:7e:b6:ef:c6:a1:
74:9a:70:00:20:6e:d2:28:a1:0d:de:5f:ba:b5:7d:
92:a4:e0:96:9c:48:7f:98:c2:56:70:3c:c5:97:ed:
b6:52:b3:81:86:e9:d7:17:29:27:2a:7c:0f:41:5f:
ec:d6:62:77:36:13:22:b6:06:6c:77:46:4b:84:70:
96:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:32:BE:05:1C:E8:D4:27:7D:C4:85:90:60:FE:5A:B3:99:E6:97:90
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/wjK-BRzo1Cd9xIWQYP5as5nml5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.58.41.0/24
194.58.44.0/24
194.58.66.0/24
194.58.155.0/24
194.58.223.0/24
194.87.44.0/24
194.87.49.0/24
194.87.52.0/24
194.87.54.0/23
194.87.83.0-194.87.84.255
194.87.104.0/24
194.87.115.0/24
194.87.130.0/24
194.87.133.0-194.87.134.255
194.87.138.0/24
194.87.140.0/24
194.87.143.0/24
194.87.151.0/24
194.87.161.0/24
194.87.169.0/24
194.87.187.0/24
194.87.190.0/24
194.87.200.0/24
194.87.202.0/24
194.87.208.0/24
194.87.215.0/24
194.87.220.0/23
194.87.226.0/24
194.87.233.0/24
194.87.250.0/24
194.135.38.0/24
194.135.105.0/24
195.58.34.0/24
195.58.36.0/22
195.58.63.0/24
195.133.9.0/24
195.133.15.0/24
195.133.18.0/24
195.133.21.0/24
195.133.25.0/24
195.133.27.0/24
195.133.30.0/24
195.133.39.0/24
195.133.50.0/23
195.133.63.0/24
195.133.73.0/24
195.133.81.0/24
195.133.92.0/23
195.133.194.0/24
212.192.1.0/24
212.192.215.0/24
212.192.223.0/24
212.192.246.0/24
212.192.248.0/24
212.193.1.0/24
212.193.5.0/24
212.193.24.0/24
212.193.30.0/24
IPv6:
2a01:57c0::/29
2a0c:ff40::/29
Signature Algorithm: sha256WithRSAEncryption
7f:b9:25:b9:cf:02:f2:21:4c:3c:58:38:13:4f:77:96:e9:00:
ae:bf:c6:45:2b:58:6a:8e:07:a4:22:29:62:e9:1c:86:de:20:
5f:27:bf:a5:ea:71:06:3b:a5:53:96:ff:10:f2:06:36:c8:ba:
83:c4:74:6a:1c:e6:8d:3a:2e:e5:49:05:a9:5a:7d:cb:70:04:
b9:5f:2c:00:a4:c9:9d:78:71:0f:58:5b:15:f8:09:31:a8:f4:
52:e5:34:22:91:da:61:df:32:58:ef:25:5d:82:99:14:17:75:
85:f4:d5:1f:a6:2b:12:c3:22:6c:8c:f2:0f:dd:0e:57:08:00:
3e:7d:58:11:7e:3a:8b:6c:cb:d5:b2:77:12:4e:31:a3:fd:91:
f8:1d:03:f0:3e:19:61:ef:c4:f4:30:2c:46:a5:d2:b0:e2:14:
9b:d2:ae:69:88:07:e4:d8:09:c0:df:29:30:45:87:ae:fd:9e:
b7:a3:51:34:52:81:bb:9a:58:58:c0:8b:fa:5b:ed:89:ff:a4:
c6:10:78:95:ff:14:93:37:4a:1b:0e:7a:57:20:87:47:20:4d:
68:60:b4:5b:43:18:87:24:3a:25:21:e1:f8:a2:98:33:c2:17:
6c:93:a2:18:d0:f1:c8:96:bf:81:8f:dc:40:88:3c:5a:f8:74:
f0:4f:f6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 3 12:12:58 2024 by rpki-client on console-fra.rpki-client.org