Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/WI-1jnYqTfY3HFUTEEgxRWuc6wI.roa
File: WI-1jnYqTfY3HFUTEEgxRWuc6wI.roa (raw, json)
Hash identifier: z33S/MeiOUJr0OkxKKnbvLLxDuk/bbeslo9uc/Z0zr0=
Subject key identifier: 58:8F:B5:8E:76:2A:4D:F6:37:1C:55:13:10:48:31:45:6B:9C:EB:02
Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Certificate serial: 018573684B3342BF0FC9FC6F63B2F31FF4F4
Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/WI-1jnYqTfY3HFUTEEgxRWuc6wI.roa
Signing time: Mon 02 Jan 2023 16:54:52 +0000
ROA not before: Mon 02 Jan 2023 16:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49762
IP address blocks: 212.226.151.0/24 maxlen: 24
212.226.148.0/24 maxlen: 24
2001:998:82::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:68:4b:33:42:bf:0f:c9:fc:6f:63:b2:f3:1f:f4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73
Validity
Not Before: Jan 2 16:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=588fb58e762a4df6371c5513104831456b9ceb02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:cf:23:64:c8:3f:da:15:4f:16:f1:4b:04:
e8:3c:07:f3:e0:37:02:58:c7:bf:55:bd:d8:ac:cf:
95:be:ab:5d:da:44:8c:47:fa:ae:ee:5d:01:da:81:
74:1b:da:20:ce:6d:97:06:46:e0:cc:f2:a9:26:37:
10:ea:d0:d5:2b:47:36:30:36:c8:90:14:e7:2d:a4:
55:90:8d:8d:4d:74:fc:ba:d0:bc:8d:5a:9a:5e:76:
50:2f:b6:61:35:c5:78:66:08:f1:a4:dc:1a:61:95:
e9:08:57:52:ad:4e:e3:85:e4:06:5d:75:4c:65:f0:
1d:10:4e:f1:bf:9b:cd:8b:22:d4:1f:0b:3c:81:cc:
e2:70:dd:2b:56:6f:b2:a7:a2:3a:71:e7:8e:1c:73:
07:22:3e:38:bd:e4:89:48:c8:a9:65:49:b2:ac:1c:
fe:a3:28:c8:63:27:e1:50:bf:d3:48:d9:c4:ff:46:
3a:cb:7e:b1:48:fc:77:45:1c:52:6b:a2:de:bc:af:
8a:db:3a:c7:8a:ac:05:cc:8b:38:95:b5:8d:29:7e:
a4:9d:b2:e9:85:71:1a:66:fa:8f:12:34:c3:2b:61:
9c:aa:1b:a0:f0:2b:f8:10:7c:40:fc:f7:08:55:67:
79:2b:f9:20:b8:0e:c9:bf:4b:b8:7c:16:55:25:da:
84:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8F:B5:8E:76:2A:4D:F6:37:1C:55:13:10:48:31:45:6B:9C:EB:02
X509v3 Authority Key Identifier:
keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/WI-1jnYqTfY3HFUTEEgxRWuc6wI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.226.148.0/24
212.226.151.0/24
IPv6:
2001:998:82::/48
Signature Algorithm: sha256WithRSAEncryption
97:eb:e4:ed:d6:6d:bf:a1:26:c9:1a:e8:18:8f:3f:b1:e2:72:
9f:f4:ee:89:c8:de:cd:b1:45:c8:82:3f:a4:1f:60:f1:88:51:
33:7a:b5:b0:ec:99:bf:c7:27:e0:87:ed:16:5a:80:15:0b:1f:
85:b8:a8:a5:6a:86:12:e2:17:ea:2b:90:cd:d6:22:c1:50:15:
ca:0b:00:a1:4a:71:56:6f:af:b4:31:71:8f:fd:67:f7:13:13:
63:60:e9:bc:c4:a0:62:bc:d0:4a:20:b5:6d:e8:6f:00:da:78:
b8:f7:01:3c:bd:2e:eb:3c:4f:04:18:ae:bc:84:0a:4a:99:a3:
5d:20:9c:c7:9b:50:04:98:cb:94:6a:c1:07:85:c4:9b:79:da:
f4:0c:76:d7:d3:d3:8c:12:51:87:fa:3c:71:f3:77:01:e0:79:
cf:9a:1e:ea:a6:8e:bb:a4:8d:77:b0:b7:26:ec:52:c6:12:7f:
ca:de:b2:b8:74:de:69:a3:ba:fe:9b:d5:97:ec:fc:ec:a9:fc:
4b:a0:a8:30:83:27:99:08:10:05:5a:59:ff:18:7f:d3:f7:d0:
3c:bd:42:ea:2e:1a:d2:aa:02:8c:29:33:9c:06:ef:b2:75:d2:
75:ae:81:a7:7d:a3:99:46:d8:5b:f4:ec:37:f5:65:f9:51:bf:
88:80:4d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org