Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Wbp1eBcofDiNUzEy64NAH93y5yI.roa
File: Wbp1eBcofDiNUzEy64NAH93y5yI.roa (raw, json)
Hash identifier: x8jdPkoVaeYTxr2pv4TWAuQrCULkG+opGEVkM0yeS+0=
Subject key identifier: 59:BA:75:78:17:28:7C:38:8D:53:31:32:EB:83:40:1F:DD:F2:E7:22
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 0191B310E222550FFCCC20A4E11D10131B13
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Wbp1eBcofDiNUzEy64NAH93y5yI.roa
Signing time: Mon 02 Sep 2024 14:08:33 +0000
ROA not before: Mon 02 Sep 2024 14:08:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394814
IP address blocks: 94.131.80.0/20 maxlen: 24
94.131.176.0/22 maxlen: 24
94.131.180.0/22 maxlen: 24
94.131.184.0/22 maxlen: 22
94.131.188.0/22 maxlen: 24
95.164.144.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 16:14:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:10:e2:22:55:0f:fc:cc:20:a4:e1:1d:10:13:1b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Sep 2 14:08:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ba757817287c388d533132eb83401fddf2e722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6a:7d:a1:06:91:f4:37:67:38:37:80:ec:3f:
bd:fa:3f:2d:ea:b0:ba:f9:32:d1:e9:05:75:28:c2:
73:1d:46:b6:4a:90:bd:cf:54:3f:30:c0:f5:37:ce:
bc:66:55:0c:67:4f:93:8d:ee:16:b2:db:25:8a:f1:
15:63:d4:85:99:92:71:8e:dc:09:21:81:95:eb:d3:
dc:25:b0:e9:3f:04:77:99:40:de:58:35:df:a0:fb:
76:39:a5:5b:6e:5c:54:37:a3:be:fd:c6:2d:5b:97:
36:79:76:1a:6e:79:28:84:70:14:b8:d2:05:5b:0c:
b2:97:14:f9:8c:09:50:67:71:f4:98:25:cf:9c:a7:
f9:e4:72:15:fd:62:e5:5f:cc:e6:d1:da:e2:21:38:
44:d5:5b:b8:5d:da:fc:65:5e:1f:79:e2:39:12:7d:
e1:03:10:4c:0c:92:2a:0f:6a:ea:c7:a8:e8:41:2e:
52:da:0e:9a:19:26:e5:66:92:44:e1:06:9f:e7:1f:
b1:b1:94:21:d2:78:99:c0:03:12:0c:9e:2d:77:04:
5b:15:9a:18:dd:62:5a:1d:de:5f:1e:ec:3c:33:10:
73:01:2b:2c:5b:3e:9a:4a:58:dd:d9:db:ea:a2:46:
2c:fc:b4:ce:38:9b:3d:ab:eb:cc:c5:21:a7:d0:74:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BA:75:78:17:28:7C:38:8D:53:31:32:EB:83:40:1F:DD:F2:E7:22
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/Wbp1eBcofDiNUzEy64NAH93y5yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.80.0/20
94.131.176.0/20
95.164.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:17:b9:ea:4f:6f:9c:9e:8a:17:a0:c7:35:b0:67:3b:d5:21:
38:14:fd:7c:69:7b:80:af:f5:df:1c:3a:d1:46:2f:6d:bb:9a:
0f:73:83:c7:59:01:2e:0a:09:80:2f:19:b6:f0:6b:6c:df:a3:
f4:c9:2f:b8:c2:84:97:dc:48:ad:a4:2d:e9:4a:cb:76:2b:bf:
9d:e7:86:26:e7:5c:c6:b7:2a:07:0c:bc:a9:15:1b:e1:81:9e:
8c:1c:86:a8:c1:26:57:24:0c:8a:5b:7d:d7:6a:ad:00:0d:2c:
1c:32:45:2d:d7:c8:44:71:8c:ed:03:61:e9:3d:c5:98:c1:bc:
b5:12:34:bd:bd:e1:df:77:08:3e:5c:0c:a1:b9:da:44:e3:28:
07:94:99:48:23:22:c0:9b:8d:01:35:9d:49:c6:4c:30:4f:79:
c6:ae:7b:4c:fc:ea:f8:0d:bc:9d:0a:7e:02:e4:80:95:18:48:
d5:98:9c:13:3d:56:fe:f1:a3:34:27:76:a6:53:fc:93:d7:92:
5a:dc:9a:28:4a:70:5a:1b:59:7c:28:75:b7:64:6d:ce:a2:9f:
cd:b2:b5:5d:7c:2a:f3:3e:cb:1a:bb:dd:11:10:5b:df:05:9d:
d2:6a:ab:2e:db:ec:d7:ed:72:2c:30:25:73:6c:cc:22:7f:5c:
9e:9e:ce:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 19:24:49 2024 by rpki-client on console-fra.rpki-client.org