Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/wk88SMy0UDn_RrskEdJks6E1r3w.roa
File: wk88SMy0UDn_RrskEdJks6E1r3w.roa (raw, json)
Hash identifier: RX4dvBGKV9AVTlUBKBFaH9g3MM2U0zz+tgIRA12yBpM=
Subject key identifier: C2:4F:3C:48:CC:B4:50:39:FF:46:BB:24:11:D2:64:B3:A1:35:AF:7C
Certificate issuer: /CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Certificate serial: 01859C64062C24A6299B647355FF3F12BB6B
Authority key identifier: DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/wk88SMy0UDn_RrskEdJks6E1r3w.roa
Signing time: Tue 10 Jan 2023 15:54:38 +0000
ROA not before: Tue 10 Jan 2023 15:54:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59931
IP address blocks: 109.75.64.0/24 maxlen: 24
109.75.66.0/24 maxlen: 24
109.75.67.0/24 maxlen: 24
109.75.65.0/24 maxlen: 24
109.75.70.0/24 maxlen: 24
109.75.71.0/24 maxlen: 24
109.75.68.0/24 maxlen: 24
109.75.69.0/24 maxlen: 24
109.75.73.0/24 maxlen: 24
109.75.74.0/24 maxlen: 24
109.75.72.0/24 maxlen: 24
109.75.77.0/24 maxlen: 24
109.75.78.0/24 maxlen: 24
109.75.75.0/24 maxlen: 24
109.75.76.0/24 maxlen: 24
109.75.79.0/24 maxlen: 24
185.204.48.0/24 maxlen: 24
185.204.50.0/24 maxlen: 24
185.204.51.0/24 maxlen: 24
185.204.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9c:64:06:2c:24:a6:29:9b:64:73:55:ff:3f:12:bb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd5f2e7cc2c687f58c0d1f6132bb2dcfdf38cb64
Validity
Not Before: Jan 10 15:54:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c24f3c48ccb45039ff46bb2411d264b3a135af7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d5:fe:bf:dd:77:50:48:7e:76:64:59:6e:88:
46:ff:63:78:34:80:1f:2c:40:75:2c:9f:db:ff:d3:
9c:7b:b3:4c:0f:22:f9:4e:5b:0a:2d:12:a4:cd:22:
d9:77:1d:58:97:ec:08:55:f1:87:dc:af:c2:44:54:
13:84:71:77:f2:18:96:51:34:bb:8b:22:07:46:e3:
37:99:f3:df:73:53:ae:1d:80:c3:e5:90:24:5b:63:
8a:49:c7:3c:c5:33:4c:31:3b:6c:f8:87:7a:ea:92:
cf:59:0f:22:01:bf:38:45:0a:c4:c0:1d:52:cf:91:
97:cf:9f:3b:fd:1f:b2:80:2b:e2:f3:4b:27:4c:9d:
d5:e2:5f:28:88:cc:95:cc:e8:3f:4e:0c:df:3c:ac:
a4:4f:97:4f:14:5f:c9:6a:8e:cf:07:b0:67:32:bf:
d3:89:54:73:07:ee:9c:a4:26:8b:b7:d7:9a:5b:81:
4b:c4:29:6d:c6:70:3f:99:47:49:34:61:50:ce:7d:
0a:4c:2f:b0:75:a9:56:ca:40:07:6c:c5:92:85:5f:
49:79:44:25:4e:bb:be:7b:9d:3a:99:64:46:67:f0:
82:a1:4c:11:51:cf:ba:c6:ca:ed:40:65:04:d5:cf:
00:d6:12:81:95:49:63:9f:26:35:2c:27:f3:88:8c:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4F:3C:48:CC:B4:50:39:FF:46:BB:24:11:D2:64:B3:A1:35:AF:7C
X509v3 Authority Key Identifier:
keyid:DD:5F:2E:7C:C2:C6:87:F5:8C:0D:1F:61:32:BB:2D:CF:DF:38:CB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V8ufMLGh_WMDR9hMrstz984y2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/wk88SMy0UDn_RrskEdJks6E1r3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc0a25-933a-4f5a-a5f3-9dcfd2ef3023/1/3V8ufMLGh_WMDR9hMrstz984y2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.75.64.0/20
185.204.48.0/22
Signature Algorithm: sha256WithRSAEncryption
83:4a:b0:17:8f:5f:7a:3a:4d:dc:09:33:23:35:9f:4a:17:65:
15:fd:5b:28:b0:9f:01:9c:52:c1:0f:7b:84:5b:cb:72:e2:fe:
39:7a:d9:ef:c3:46:ef:7e:b6:5a:25:ff:af:52:bd:54:4b:81:
f2:84:fd:68:f7:16:66:45:df:f5:36:51:71:f7:44:e1:a0:6d:
be:b0:ca:6e:fb:bf:20:d1:f1:18:1c:32:5a:09:d8:a3:aa:a2:
e7:3a:b6:d7:94:bf:4a:53:fa:7c:a3:8e:9a:8b:4d:63:66:c3:
d9:e5:c3:41:83:00:58:f3:9d:cc:84:a3:ec:72:32:dd:b9:e6:
2f:7e:b9:79:9a:f6:4e:f5:c5:1d:7b:5d:46:de:23:6e:70:5a:
9d:2c:fb:9f:2f:0a:b0:dd:b8:8b:f9:8e:9b:75:e7:02:ad:b8:
3a:ca:bc:d6:d9:07:f4:c2:0b:56:ce:2c:6e:59:ac:97:9d:b0:
28:19:95:78:e8:39:d3:22:87:95:4d:01:68:28:d2:19:cb:e3:
31:28:80:2e:33:0f:e5:ac:6d:c2:23:99:2e:1b:04:a1:0a:70:
9f:34:8d:82:36:be:80:22:f7:45:85:56:08:0e:80:58:8c:ec:
35:fd:26:24:a0:ef:a5:98:66:3c:12:ed:ef:62:2b:15:e7:42:
a7:55:cb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:09 2024 by rpki-client on console-fra.rpki-client.org