Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/wj_rebg3Zz46MN1SHa6A9uKUrLs.roa
File: wj_rebg3Zz46MN1SHa6A9uKUrLs.roa (raw, json)
Hash identifier: +ZtoC4NgjyhMsMA0w6DY+uvFjkKRECNY0kiundf1Mh8=
Subject key identifier: C2:3F:EB:79:B8:37:67:3E:3A:30:DD:52:1D:AE:80:F6:E2:94:AC:BB
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018FC13C2755854C365D3B7B7AD19EC39FDE
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/wj_rebg3Zz46MN1SHa6A9uKUrLs.roa
Signing time: Tue 28 May 2024 22:04:55 +0000
ROA not before: Tue 28 May 2024 22:04:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56884
IP address blocks: 84.246.111.0/24 maxlen: 24
91.247.178.0/24 maxlen: 24
176.97.213.0/24 maxlen: 24
178.23.188.0/24 maxlen: 24
194.26.223.0/24 maxlen: 24
213.232.252.0/24 maxlen: 24
2a11:a100::/29 maxlen: 29
2a13:8e00::/29 maxlen: 29
2a13:9300::/29 maxlen: 29
2a13:a700::/29 maxlen: 29
2a13:da00::/29 maxlen: 29
2a13:fe00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jul 2024 20:05:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c1:3c:27:55:85:4c:36:5d:3b:7b:7a:d1:9e:c3:9f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: May 28 22:04:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23feb79b837673e3a30dd521dae80f6e294acbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bf:32:57:a4:d4:3f:45:6e:80:81:21:9d:54:
2d:15:05:6e:be:6a:d6:4a:e5:28:71:2c:d2:be:33:
c6:50:5a:c7:1a:79:8e:b5:56:c9:17:38:50:36:fd:
4c:00:18:e8:50:6f:2d:a0:3d:d7:e3:28:a9:87:36:
1a:b4:08:ea:04:dd:67:7d:e4:66:ec:22:80:68:90:
8f:5b:c0:a8:46:fc:91:58:25:93:7c:78:16:b8:19:
c1:02:00:72:ab:25:e3:15:a7:a8:85:02:96:d4:79:
29:37:f7:d6:15:02:3e:5a:a3:fc:fc:fd:b1:42:b5:
61:c8:1a:97:f4:c6:0f:95:92:56:92:cb:3a:a7:9e:
ed:fa:f9:2d:b4:14:5c:e2:9d:44:89:1f:35:63:e2:
c9:cb:70:92:e4:74:3d:a0:8c:95:76:1b:68:10:4d:
26:ef:06:5f:21:3f:6b:80:9f:48:0a:98:a3:82:0a:
7e:13:dd:ce:64:29:c6:3a:69:36:da:28:dd:cc:aa:
18:cd:e7:95:1a:a9:fc:9a:a2:10:b8:3a:d3:3c:a5:
4f:99:64:ba:ae:12:cc:60:dc:00:a8:97:64:c1:2b:
0e:d8:3e:87:ac:87:d3:97:c4:fd:be:4a:e3:fa:e0:
fc:53:d0:d2:fa:b4:e6:4d:0d:1a:72:01:5f:80:9d:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:EB:79:B8:37:67:3E:3A:30:DD:52:1D:AE:80:F6:E2:94:AC:BB
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/wj_rebg3Zz46MN1SHa6A9uKUrLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.246.111.0/24
91.247.178.0/24
176.97.213.0/24
178.23.188.0/24
194.26.223.0/24
213.232.252.0/24
IPv6:
2a11:a100::/29
2a13:8e00::/29
2a13:9300::/29
2a13:a700::/29
2a13:da00::/29
2a13:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
02:59:95:9f:a6:91:c7:0a:38:6f:32:3f:f3:10:43:12:62:f8:
a6:13:0c:6c:eb:12:04:32:e1:6e:8e:29:6c:9f:20:b3:91:72:
52:0b:48:e6:5b:d2:20:ed:bc:2d:5c:a1:6d:a7:58:c7:16:8c:
bd:e4:83:7c:a1:30:56:c1:95:21:e3:05:7c:96:32:80:d7:7c:
4b:ef:c7:84:14:de:ef:43:05:2b:62:0d:43:8a:d7:88:8d:63:
2a:b1:3f:30:44:07:4a:54:5c:be:64:cb:36:0e:13:6c:ba:29:
5f:c4:19:2d:7c:83:15:c3:12:e6:4a:4b:d2:fb:4d:c3:21:33:
30:e5:61:50:bf:cc:c5:29:d6:22:79:30:07:08:2d:4a:8b:cd:
92:6d:0f:c5:2f:9c:f6:c5:b9:7c:af:0c:45:45:16:6b:ca:ad:
15:d9:9c:ef:14:97:13:d1:01:e0:2d:f0:83:0f:8b:e0:66:d8:
a7:0b:58:99:c1:9c:b1:55:20:00:25:66:fe:70:93:0c:c2:48:
86:84:67:54:96:8d:58:db:a3:ae:02:34:98:24:db:75:6b:ea:
55:17:c8:b9:01:f5:9b:06:ec:22:5e:10:07:12:18:53:17:70:
f7:2e:17:8d:2b:aa:7b:6b:11:53:88:75:56:f9:53:e4:85:e3:
db:bd:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 20:56:00 2024 by rpki-client on console-fra.rpki-client.org