Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/WBPwWbvC9fZxNuqje5WxNaDtDjg.roa
File: WBPwWbvC9fZxNuqje5WxNaDtDjg.roa (raw, json)
Hash identifier: t0VkiAGpBMVqNndvQFvcCCm8R9wnYQTWWstK8zPXOuI=
Subject key identifier: 58:13:F0:59:BB:C2:F5:F6:71:36:EA:A3:7B:95:B1:35:A0:ED:0E:38
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018C02E6AF2E2F1F1AF884A259B7782EBBB3
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/WBPwWbvC9fZxNuqje5WxNaDtDjg.roa
Signing time: Fri 24 Nov 2023 19:55:21 +0000
ROA not before: Fri 24 Nov 2023 19:55:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16589
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
94.154.33.0/24 maxlen: 24
94.154.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:e6:af:2e:2f:1f:1a:f8:84:a2:59:b7:78:2e:bb:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Nov 24 19:55:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5813f059bbc2f5f67136eaa37b95b135a0ed0e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:54:f8:fa:c8:a2:61:b2:83:1b:98:38:06:
45:c8:59:be:42:d3:67:ff:e8:f4:44:89:f4:af:47:
1b:23:8a:9d:33:a7:23:71:8f:f7:4d:ae:2a:db:ea:
47:7f:c3:1b:5c:ba:37:e4:d0:cc:f6:47:3a:a1:0c:
de:c0:dd:c6:82:38:f2:13:12:a5:21:79:d0:c1:91:
eb:94:4a:5a:57:49:2c:1d:df:db:86:3f:5c:72:7e:
35:b2:72:15:0f:43:8b:1b:1b:22:df:2d:ae:d8:69:
97:54:8c:67:a2:3f:c7:89:82:5b:bb:d4:94:48:69:
cc:fb:f9:f4:45:74:0d:d4:78:49:20:9a:f9:71:c3:
03:11:a0:42:64:f2:2e:02:42:7a:5f:b9:9d:a4:a0:
d4:eb:bd:1e:44:10:ff:19:09:ea:27:bb:47:f8:bc:
ca:01:c7:05:58:ce:19:08:f4:f9:2e:eb:fb:9f:cf:
96:48:10:be:2a:ee:0e:d7:f6:08:3d:3b:dd:37:e3:
b6:df:c8:9d:f5:e9:ce:6e:e3:fc:38:44:4b:39:a4:
25:cd:8f:06:d0:32:d2:a0:f7:b7:29:ae:7d:0d:2d:
be:ea:1e:ae:e6:97:4b:36:d9:03:4f:18:5a:97:47:
12:54:4a:23:55:cd:85:39:ce:2b:49:6c:1e:31:ef:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:F0:59:BB:C2:F5:F6:71:36:EA:A3:7B:95:B1:35:A0:ED:0E:38
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/WBPwWbvC9fZxNuqje5WxNaDtDjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
94.154.33.0/24
94.154.36.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:44:c1:f1:c6:3a:85:f4:54:6e:49:d0:7f:fa:cf:12:8a:07:
de:83:b6:83:a1:19:27:ff:cc:b2:92:8c:e9:0d:24:93:f1:cc:
f1:b9:3a:49:1b:89:af:af:23:e4:15:df:61:ef:93:12:11:05:
ba:3f:50:cd:b7:c3:fb:d5:4f:2d:8a:6f:92:f4:59:0c:d5:80:
d4:54:2b:18:8e:7c:25:36:1d:a0:5d:fb:47:8a:f2:70:1b:c0:
19:41:08:02:a2:69:69:ae:00:90:d7:3c:fd:d7:a1:c8:4e:e7:
8b:31:f1:9a:c6:18:4f:93:ce:66:22:0b:3f:2d:29:bf:69:ee:
dc:1d:dd:a0:ce:62:cf:c3:de:7b:63:1e:0a:d1:a7:c9:ee:59:
e2:9c:4e:62:4d:27:3c:c8:13:6d:0a:a6:51:00:32:e9:5f:64:
95:6c:77:d4:7e:42:25:1e:a6:62:c0:72:3b:48:b7:e5:a9:21:
4f:3d:a1:e8:84:ce:44:8a:79:b4:0e:65:53:df:91:a1:0e:da:
45:5d:cc:36:24:ea:ef:f1:59:7c:b8:fd:81:c4:5d:b8:89:6c:
67:e8:51:f7:f4:13:31:2e:de:90:ce:a0:8e:17:1a:c1:58:21:
52:d2:6d:d0:3e:c8:71:6c:db:ff:ea:49:4e:5a:a9:e4:fa:d3:
46:ac:92:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 28 10:38:16 2023 by rpki-client on console-ams.rpki-client.org