Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/woMSTB62WD3MWVlVZMwUNkPWwjU.roa
File: woMSTB62WD3MWVlVZMwUNkPWwjU.roa (raw, json)
Hash identifier: sexSKVNi55zqQDebIDCfiIPQuRgnJOW/3iwUXJ90aBw=
Subject key identifier: C2:83:12:4C:1E:B6:58:3D:CC:59:59:55:64:CC:14:36:43:D6:C2:35
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018E05B36C9ED8EE1A9CDDF942ABD4377322
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/woMSTB62WD3MWVlVZMwUNkPWwjU.roa
Signing time: Sun 03 Mar 2024 19:03:48 +0000
ROA not before: Sun 03 Mar 2024 19:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 89.251.18.0/24 maxlen: 24
89.251.20.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
109.122.40.0/24 maxlen: 24
109.122.44.0/24 maxlen: 24
146.19.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 08:37:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:05:b3:6c:9e:d8:ee:1a:9c:dd:f9:42:ab:d4:37:73:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 3 19:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c283124c1eb6583dcc59595564cc143643d6c235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:1e:95:84:01:60:0f:57:bc:7e:c7:be:f7:
2d:f5:8d:65:d2:44:f7:e3:0a:d3:e6:51:ad:eb:06:
bf:72:12:08:04:b6:87:b8:37:db:27:5e:03:0d:9f:
04:f1:f6:b3:d4:42:d2:69:9a:02:b5:8e:67:49:f7:
67:fc:bf:78:a7:66:4e:f4:4b:16:5e:88:67:0e:3c:
e9:9c:bb:57:aa:09:00:56:bc:dd:9f:15:ce:1d:ef:
5d:12:31:e4:7e:49:7e:49:87:5c:6c:97:d9:fc:34:
13:f4:42:11:a2:6d:e3:c6:cc:b1:af:c3:98:27:2f:
34:55:fa:64:2a:bb:f2:80:5c:fd:e5:15:32:84:92:
86:a7:d1:cf:5b:a2:9c:fa:6a:54:f6:74:06:e4:5e:
df:e8:d7:b5:e8:2c:d3:34:cd:4c:17:b5:db:a9:25:
a4:cc:96:30:43:67:6e:7e:6f:2d:f4:e8:d9:e2:54:
60:e5:dc:f6:0f:49:b5:8e:75:f4:d1:d3:57:b6:85:
4e:98:2c:da:f8:b2:ee:b7:bb:f2:8e:ad:01:56:7f:
18:ac:37:47:da:92:2d:2d:40:c4:1f:c0:0d:7c:84:
50:2e:62:c1:ef:03:c7:93:bc:fa:89:b3:80:fb:71:
2a:1a:2e:4e:47:0b:76:79:c1:5f:c8:99:b6:f3:f6:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:83:12:4C:1E:B6:58:3D:CC:59:59:55:64:CC:14:36:43:D6:C2:35
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/woMSTB62WD3MWVlVZMwUNkPWwjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.18.0/24
89.251.20.0/24
89.251.31.0/24
109.122.40.0/24
109.122.44.0/24
146.19.56.0/24
Signature Algorithm: sha256WithRSAEncryption
00:01:1a:4c:d5:ff:20:8d:81:20:ed:61:1c:ab:80:3d:3a:31:
88:7c:3b:f7:bd:71:fa:36:38:91:a9:79:4a:fe:35:e7:98:58:
a1:e0:88:3c:7e:9e:f3:e2:75:eb:3c:2d:5f:08:97:ea:8d:33:
e8:06:64:55:3b:20:7a:f1:b5:02:3d:ad:fa:73:fd:8e:59:91:
73:3e:ce:16:6a:e0:d5:2a:75:dc:9d:47:ce:61:0e:89:81:8b:
87:68:f5:24:63:2b:30:46:9c:d6:61:a7:51:4e:e6:3a:a8:da:
01:58:33:f1:51:5a:e5:98:e0:af:33:59:60:e0:1a:44:26:60:
a3:ac:cf:d8:6f:77:bd:6b:85:ba:3b:ed:f3:f8:90:a4:0d:e2:
53:12:77:8c:b9:aa:6f:2e:88:69:4c:e7:53:47:b6:bb:36:6e:
31:80:9c:4a:79:db:c4:90:2b:e1:61:78:b4:f5:7a:49:6a:bc:
dc:22:61:09:18:ed:73:5a:e6:0e:22:40:40:19:74:76:90:33:
b5:ce:5e:8a:8c:44:a1:7f:1e:6f:88:20:88:8b:7c:a8:21:37:
af:69:e3:7a:98:e1:a7:c7:a5:4b:1e:33:d8:f6:59:8c:f4:af:
c1:ec:db:2b:98:c6:be:89:3c:a4:17:c1:ca:a2:17:2e:e7:93:
88:44:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:07 2024 by rpki-client on console-ams.rpki-client.org