Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/WxsVX2987UijE1ALY2ysVXlWzp0.roa
File: WxsVX2987UijE1ALY2ysVXlWzp0.roa (raw, json)
Hash identifier: Hizw3DoDh+8QBv2Q3N8Dvrzj3iTlRbZ8eNyN1B8HcDs=
Subject key identifier: 5B:1B:15:5F:6F:7C:ED:48:A3:13:50:0B:63:6C:AC:55:79:56:CE:9D
Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Certificate serial: 018AACE8273F793D7ABEFAF962D57497ED04
Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/WxsVX2987UijE1ALY2ysVXlWzp0.roa
Signing time: Tue 19 Sep 2023 10:06:50 +0000
ROA not before: Tue 19 Sep 2023 10:06:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25400
IP address blocks: 84.214.32.0/20 maxlen: 20
84.214.192.0/24 maxlen: 24
84.214.193.0/24 maxlen: 24
46.212.64.0/21 maxlen: 21
46.212.72.0/21 maxlen: 21
46.212.80.0/21 maxlen: 21
84.214.0.0/20 maxlen: 20
46.212.88.0/21 maxlen: 21
84.214.16.0/20 maxlen: 20
46.212.0.0/20 maxlen: 20
46.212.16.0/20 maxlen: 20
80.239.0.0/17 maxlen: 17
46.212.48.0/20 maxlen: 20
84.210.128.0/20 maxlen: 20
188.126.197.0/24 maxlen: 24
84.213.128.0/20 maxlen: 20
188.126.200.0/21 maxlen: 21
84.213.144.0/20 maxlen: 20
84.214.114.0/24 maxlen: 24
2a02:228::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ac:e8:27:3f:79:3d:7a:be:fa:f9:62:d5:74:97:ed:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456
Validity
Not Before: Sep 19 10:06:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b1b155f6f7ced48a313500b636cac557956ce9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a7:57:5c:ea:f2:f2:0a:bf:37:a5:45:78:57:
87:4b:d4:0b:1f:97:57:46:82:1c:28:92:6c:13:3a:
59:95:2b:e7:11:67:4f:cd:7d:fb:28:39:ff:77:08:
bd:d5:28:b9:2e:74:6e:1c:c3:fa:8b:ab:4b:c1:9e:
7f:0e:5d:78:02:04:d3:44:dd:34:a2:74:30:95:0e:
b0:b8:0e:07:ec:30:d7:0f:05:8f:32:97:2f:67:fb:
c7:07:4c:81:dc:09:57:42:78:bc:ef:e9:bb:46:ce:
37:66:83:49:6c:46:34:e1:07:86:db:27:f9:55:8e:
92:19:0b:bb:0b:96:be:90:12:c4:7d:c7:9d:85:45:
14:12:8e:23:a8:04:b9:9d:52:3a:de:4c:06:d3:1a:
60:05:9e:bc:15:3e:f4:a3:16:48:e9:cc:a0:43:ea:
ab:02:28:fa:c5:f3:d6:a8:e3:9d:b9:c4:3f:cb:5b:
b1:25:fb:a0:29:ee:be:a8:3c:d3:56:83:5d:cc:3b:
01:1f:a7:ca:38:57:05:9c:4b:b5:de:40:ef:0d:06:
7b:00:cb:15:ea:20:8e:88:93:a4:3c:f0:c8:2a:f7:
9e:5c:35:9a:df:dd:a9:c6:39:7c:e9:f6:28:f1:64:
e1:40:7d:1d:92:73:05:1b:c2:ce:ab:f7:8c:22:44:
a6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1B:15:5F:6F:7C:ED:48:A3:13:50:0B:63:6C:AC:55:79:56:CE:9D
X509v3 Authority Key Identifier:
keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/WxsVX2987UijE1ALY2ysVXlWzp0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.212.0.0/19
46.212.48.0-46.212.95.255
80.239.0.0/17
84.210.128.0/20
84.213.128.0/19
84.214.0.0-84.214.47.255
84.214.114.0/24
84.214.192.0/23
188.126.197.0/24
188.126.200.0/21
IPv6:
2a02:228::/29
Signature Algorithm: sha256WithRSAEncryption
2f:37:99:c8:9c:78:80:49:c6:5a:ed:70:3a:be:6f:b4:01:e2:
1c:29:d7:3d:a3:51:3c:d3:59:a5:21:f4:36:68:9f:07:15:19:
87:8a:6a:53:05:95:8e:a1:b1:83:f4:b9:f9:8f:f7:02:da:fc:
06:a9:78:b7:61:ae:b1:b4:97:f1:e7:c4:b5:e9:7c:ae:e5:55:
a3:f8:d1:58:c0:21:49:a0:8e:bb:40:dc:5d:73:3f:d6:f1:87:
3a:b2:da:4b:51:72:d2:57:29:18:70:87:d7:ac:d4:5a:a2:21:
99:f1:64:22:e8:f0:db:ea:24:d2:91:c6:86:35:b4:35:c4:cd:
6d:30:82:29:f6:9a:1e:21:83:f0:e2:4e:4b:bc:84:e5:45:28:
25:6b:b8:90:1b:5f:d8:b9:d9:41:66:aa:c4:ce:e3:76:f9:11:
8a:79:60:7e:4b:b8:12:64:fb:f4:4f:bd:ae:cb:6d:d1:2e:d7:
5e:eb:55:38:42:6c:1b:12:e8:49:9d:a4:37:11:d8:68:3e:2b:
39:18:c3:f8:ef:07:65:10:6d:5b:2f:1a:b0:ea:7c:df:11:e7:
ff:ba:96:83:b8:27:b0:54:d6:92:7c:43:2d:bf:26:31:8d:68:
96:83:71:07:45:8a:4b:56:dd:ed:02:42:83:69:ca:93:10:b5:
cc:aa:2f:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:36 2024 by rpki-client on console-ams.rpki-client.org