Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/WYnNoFBQMIUkU852145sadYjfcs.roa
File: WYnNoFBQMIUkU852145sadYjfcs.roa (raw, json)
Hash identifier: pk+vxp6UJwr93W8IUukVrdmT3U+NTLXdB2uxA17tVyA=
Subject key identifier: 59:89:CD:A0:50:50:30:85:24:53:CE:76:D7:8E:6C:69:D6:23:7D:CB
Certificate issuer: /CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Certificate serial: 01856DD3E9B49CA9FAEA8D5A8312EBF9A984
Authority key identifier: 05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/WYnNoFBQMIUkU852145sadYjfcs.roa
Signing time: Sun 01 Jan 2023 14:54:42 +0000
ROA not before: Sun 01 Jan 2023 14:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209984
IP address blocks: 185.249.232.0/24 maxlen: 24
194.15.219.0/24 maxlen: 24
194.15.232.0/24 maxlen: 24
194.26.1.0/24 maxlen: 24
89.44.145.0/24 maxlen: 24
89.43.72.0/24 maxlen: 24
194.15.236.0/24 maxlen: 24
89.43.198.0/24 maxlen: 24
185.237.136.0/22 maxlen: 24
109.205.136.0/22 maxlen: 24
89.40.238.0/24 maxlen: 24
2a0c:1380::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:e9:b4:9c:a9:fa:ea:8d:5a:83:12:eb:f9:a9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059b86f99e2d6bde14fa8799de71ce41b98020b9
Validity
Not Before: Jan 1 14:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5989cda0505030852453ce76d78e6c69d6237dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:05:e6:ee:20:bf:c1:ab:79:8b:b7:ec:bf:
df:5f:31:c7:e4:9c:22:51:26:ab:28:b4:09:73:b7:
c7:67:bd:ca:dc:af:8a:c0:9b:27:04:70:82:33:27:
cb:14:76:9a:ff:63:b7:8b:b6:e5:ad:26:0e:c9:df:
41:cd:a2:62:90:6d:51:9c:1d:52:7c:9a:e3:48:c3:
d0:6a:21:43:30:62:e1:3b:6d:cf:cb:0a:a4:1a:c4:
24:84:96:d6:e3:58:ba:d0:6e:04:01:fe:83:3a:6e:
be:6e:47:62:6d:03:92:d5:d9:dd:ab:c6:ef:dd:c2:
36:a1:69:17:26:c8:ae:7e:e4:9f:00:fd:67:5a:e4:
06:51:13:8c:97:09:01:98:e3:4f:f5:bd:37:a5:52:
9c:96:3d:c6:e9:03:4b:e4:92:a9:d7:4d:3e:6c:58:
66:e9:bf:50:56:ce:88:a7:4f:90:93:7c:de:7f:dc:
c4:af:80:dc:c4:a4:0d:47:8b:3e:3a:74:f3:f2:1c:
46:23:90:2e:14:ad:65:67:18:f2:04:19:3b:c9:91:
df:c5:10:c7:3c:bb:aa:94:6c:1d:1a:4f:29:83:ce:
b0:f9:fe:1e:a3:c7:b5:47:35:bf:f1:c2:57:2c:4e:
d5:a7:3d:82:b9:2f:ff:7a:42:9e:f3:5a:fe:1e:f0:
6c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:CD:A0:50:50:30:85:24:53:CE:76:D7:8E:6C:69:D6:23:7D:CB
X509v3 Authority Key Identifier:
keyid:05:9B:86:F9:9E:2D:6B:DE:14:FA:87:99:DE:71:CE:41:B9:80:20:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZuG-Z4ta94U-oeZ3nHOQbmAILk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/WYnNoFBQMIUkU852145sadYjfcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/358416-2752-4159-add6-cc3fb351e336/1/BZuG-Z4ta94U-oeZ3nHOQbmAILk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.238.0/24
89.43.72.0/24
89.43.198.0/24
89.44.145.0/24
109.205.136.0/22
185.237.136.0/22
185.249.232.0/24
194.15.219.0/24
194.15.232.0/24
194.15.236.0/24
194.26.1.0/24
IPv6:
2a0c:1380::/29
Signature Algorithm: sha256WithRSAEncryption
2a:7f:41:e6:45:8f:e1:7c:1c:dc:65:8a:42:3d:f0:43:19:68:
7d:dd:19:12:31:72:a2:ec:b8:a4:4c:4c:8e:83:87:e9:8b:92:
77:0b:d4:bd:c1:da:17:a0:31:26:81:11:c0:0d:28:0f:7b:bb:
18:1d:09:ed:0c:39:ad:ba:ca:aa:bb:82:52:a7:7d:4e:01:6b:
09:8d:ce:7c:aa:c0:4b:ae:a0:a4:8d:5d:5f:1e:00:64:43:b2:
f1:03:48:58:2a:ac:3d:aa:02:56:20:ab:d6:ca:6e:72:10:93:
5e:82:71:c6:1e:a1:0b:10:f5:23:36:48:04:b3:ac:ca:05:17:
ed:8a:64:63:79:f0:a7:0e:a2:54:80:a3:af:47:46:91:14:a3:
f0:32:d0:24:aa:fb:78:a3:8e:0e:ae:12:3b:29:de:5a:c7:2c:
61:d0:15:7b:79:cc:63:6c:7a:ea:0f:f8:76:dc:46:71:8c:5b:
95:05:fd:cc:d3:bb:bb:07:f6:7a:ca:30:66:b7:06:56:fa:30:
87:6a:64:db:1c:c9:a8:eb:7e:f3:9b:1f:6a:c1:9e:1d:bc:6c:
cb:37:82:59:b6:9f:66:6a:c6:83:75:f5:bf:8e:16:82:e2:36:
02:11:dd:85:62:a7:45:d5:39:5d:3a:b0:2d:54:fd:54:40:52:
21:46:76:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:37 2023 by rpki-client on console-fra.rpki-client.org