Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WQMCALraDK8bS2E2l5pIshVREg0.roa
File: WQMCALraDK8bS2E2l5pIshVREg0.roa (raw, json)
Hash identifier: iKQ3rbDaYcqfIC1rGGpsmc3QJtLy0pmw/Ld2E4OLIR4=
Subject key identifier: 59:03:02:00:BA:DA:0C:AF:1B:4B:61:36:97:9A:48:B2:15:51:12:0D
Certificate issuer: /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial: 018CC86FC6B8208B1F80C518151532036C3F
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WQMCALraDK8bS2E2l5pIshVREg0.roa
Signing time: Tue 02 Jan 2024 04:30:17 +0000
ROA not before: Tue 02 Jan 2024 04:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209854
IP address blocks: 109.207.129.0/24 maxlen: 24
91.229.18.0/24 maxlen: 24
77.36.59.0/24 maxlen: 24
91.229.19.0/24 maxlen: 24
93.120.24.0/23 maxlen: 24
193.36.203.0/24 maxlen: 24
192.162.184.0/24 maxlen: 24
192.162.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 13 Sep 2024 07:45:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:c6:b8:20:8b:1f:80:c5:18:15:15:32:03:6c:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Validity
Not Before: Jan 2 04:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59030200bada0caf1b4b6136979a48b21551120d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:56:61:fb:e9:13:c1:ba:c1:05:74:62:00:fb:
76:6b:57:08:4a:a2:30:e4:1f:49:20:2f:34:bf:15:
a2:b0:2e:bd:fb:62:9d:91:f2:ea:ff:23:1f:47:75:
0c:ed:03:02:8e:22:e4:d7:27:52:6b:77:10:a3:b7:
35:ea:2d:16:ac:59:1d:92:cf:c7:41:21:c1:b1:63:
b9:15:d4:ac:60:1e:84:57:68:ac:e8:c9:5b:dd:50:
0e:8b:65:61:c0:64:27:9b:26:c3:43:5b:53:3f:9f:
3a:f2:71:45:d8:5c:06:c9:dd:08:c8:ee:01:23:1d:
2d:38:bb:43:d0:87:4d:d5:39:50:11:0a:95:97:d7:
33:7e:34:e9:eb:ca:ce:c1:38:8e:06:ca:e1:ce:1e:
b7:e9:66:db:17:db:cb:5a:2f:46:7d:e4:f5:f8:a1:
f6:4d:51:4a:b1:1e:e9:fa:9a:4f:18:1c:90:ec:24:
26:e4:f8:5b:5a:88:8a:5f:f7:ea:a3:49:52:82:60:
bb:7b:79:ae:59:ed:1e:92:0d:f1:78:38:c8:a6:72:
da:58:a5:93:5a:19:a9:29:6a:3b:65:a0:f4:4a:80:
cc:f2:82:1d:bc:e7:47:88:ee:12:5a:61:ca:2b:3d:
17:d4:e7:aa:f6:63:39:7a:97:91:b1:e6:af:d3:c3:
05:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:03:02:00:BA:DA:0C:AF:1B:4B:61:36:97:9A:48:B2:15:51:12:0D
X509v3 Authority Key Identifier:
keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/WQMCALraDK8bS2E2l5pIshVREg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.36.59.0/24
91.229.18.0/23
93.120.24.0/23
109.207.129.0/24
192.162.184.0/23
193.36.203.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:ef:26:88:1d:b2:72:7a:ac:3a:5d:e5:5e:37:74:9c:ff:2b:
09:73:8f:3a:00:d1:20:70:04:f4:0e:e4:77:6a:bf:61:ec:8a:
cc:65:64:48:4a:64:83:d9:ad:2f:1d:9a:b7:7c:3c:e0:4e:9c:
d1:8a:ba:0a:5c:35:ef:57:b0:3e:b8:57:93:a0:42:4a:e4:1f:
26:b5:d1:20:63:07:2c:4d:aa:54:03:1e:15:ff:16:14:41:b3:
34:43:df:b2:14:0a:da:6c:6b:96:bf:48:04:1a:c9:47:eb:57:
76:0e:66:e6:5a:d7:93:98:2d:da:50:09:fe:ff:68:ee:73:82:
86:d9:76:90:e9:42:7e:6e:4c:09:1f:36:d5:7b:7e:63:61:3d:
89:30:e7:c9:c1:57:a6:1b:54:84:37:46:5d:2f:92:be:6b:27:
c0:34:dc:7e:d4:db:cc:49:d8:05:01:23:2b:54:a1:7e:03:ce:
6d:f2:b2:cd:c8:92:77:79:d6:91:13:7d:ee:d3:4d:19:7c:fd:
a7:0b:be:9b:9f:75:3c:f0:9d:a8:18:93:fa:9d:1e:a0:ff:e6:
94:2a:59:28:2f:b1:94:cc:b5:9a:55:4c:0c:49:06:62:96:6c:
93:6f:1c:c1:99:64:7d:27:ef:6e:dd:c4:d0:1d:08:ec:2a:ac:
e4:ef:a5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 13 08:59:15 2024 by rpki-client on console-fra.rpki-client.org