Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/WM-7Ge3kdVwjSAbm5vpUQ4gOA5g.roa
File: WM-7Ge3kdVwjSAbm5vpUQ4gOA5g.roa (raw, json)
Hash identifier: oQ+AnSvRscrPW8+TNPhD1wimA4+5l8sC+WVXwC2sY24=
Subject key identifier: 58:CF:BB:19:ED:E4:75:5C:23:48:06:E6:E6:FA:54:43:88:0E:03:98
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 018CCA2B70CB7C267EC0DF73AC855553F41E
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/WM-7Ge3kdVwjSAbm5vpUQ4gOA5g.roa
Signing time: Tue 02 Jan 2024 12:34:53 +0000
ROA not before: Tue 02 Jan 2024 12:34:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39072
IP address blocks: 185.145.32.0/22 maxlen: 22
194.110.165.0/24 maxlen: 24
194.110.164.0/24 maxlen: 24
194.116.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 22 May 2024 08:15:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:70:cb:7c:26:7e:c0:df:73:ac:85:55:53:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jan 2 12:34:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58cfbb19ede4755c234806e6e6fa5443880e0398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:2c:8e:ca:01:b5:80:d7:5f:f6:90:47:48:
73:70:d8:4b:09:86:b8:6f:d4:e5:33:05:63:c0:ea:
85:c3:cf:72:fd:0b:2b:24:87:40:f0:23:ef:9f:b2:
aa:b4:ae:42:8d:3a:e8:a3:44:12:f5:55:0d:8d:6a:
e3:17:23:64:87:da:73:71:7d:ad:9c:bb:90:3f:83:
73:c9:69:f6:fc:ac:4d:c8:d1:10:b7:08:43:ee:2f:
17:f8:6f:df:16:b9:e5:6b:c6:20:47:5c:27:1e:80:
d3:18:18:46:83:0a:3d:ef:2a:89:74:5e:dc:9a:56:
3c:c9:60:1c:66:64:85:b4:22:fa:72:83:16:cf:ec:
64:52:4f:e6:e5:8c:d9:80:2d:e2:de:70:09:bf:e9:
a6:7a:cf:ef:6c:da:ea:92:4a:90:19:ee:c7:72:96:
3c:7f:f6:2e:f0:0b:20:a4:49:c7:37:20:5c:4b:c7:
10:9a:90:e5:51:06:66:74:d1:6c:de:8f:f2:df:e8:
c5:ec:0f:41:df:14:08:88:9f:2a:4f:8a:24:83:8b:
7e:39:b3:93:b9:d0:24:6c:ff:f6:ab:d1:96:ff:93:
3d:a8:ff:e3:5d:5c:35:4a:49:6f:e0:5a:48:3b:5e:
48:46:98:6f:f6:c1:07:40:ba:42:14:b7:d3:4e:7b:
69:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:BB:19:ED:E4:75:5C:23:48:06:E6:E6:FA:54:43:88:0E:03:98
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/WM-7Ge3kdVwjSAbm5vpUQ4gOA5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.32.0/22
194.110.164.0/23
194.116.202.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:af:30:7f:a3:49:4d:7a:2e:c7:ac:40:51:9f:7b:25:b7:87:
5e:c9:78:0c:53:04:8e:ab:77:d6:d7:14:77:07:aa:8b:90:69:
49:5a:2a:e1:d4:e8:d4:2e:ba:9c:37:a4:21:b6:97:b0:dc:2a:
9d:98:9e:33:f3:34:6c:07:ec:03:a5:91:69:4c:ab:a9:a5:01:
e2:ba:f9:92:83:79:bb:64:6c:3a:ae:e4:68:60:41:e9:d1:58:
6c:85:84:e2:47:6f:08:d9:4a:42:30:77:69:d9:b2:0f:f4:4d:
f0:af:fb:f4:80:b5:1f:8b:fd:ca:47:6d:36:a9:3f:64:51:d0:
e8:05:08:e6:6f:03:dc:41:d2:1f:54:d7:c4:4c:e7:73:ae:d4:
a7:8f:6b:6a:e1:d5:8b:f3:4a:aa:a3:9d:aa:75:49:9a:11:e8:
c7:26:3d:f0:5d:24:05:15:99:17:4f:ad:85:69:75:f1:9d:8d:
65:52:62:9b:ee:a8:3c:01:fd:c7:75:fb:58:fd:1e:b7:01:ba:
82:25:e8:b0:2a:b5:17:c6:1f:c9:03:d5:a3:ba:63:aa:bd:01:
8f:3b:49:d7:66:ad:82:80:52:85:7d:6f:af:2c:4f:ea:cd:1e:
bb:03:1d:92:99:c6:db:bf:d1:a2:cf:ff:cd:e7:c5:6a:3e:19:
a9:0f:7a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 22 12:04:23 2024 by rpki-client on console-fra.rpki-client.org