Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/wbo645J4z3QPngapQuP-JSHIbac.roa
File: wbo645J4z3QPngapQuP-JSHIbac.roa (raw, json)
Hash identifier: Hmkn55CIUQeEDFrDkFaXsHZmmVyAmvd9RLZ5OXogjjI=
Subject key identifier: C1:BA:3A:E3:92:78:CF:74:0F:9E:06:A9:42:E3:FE:25:21:C8:6D:A7
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01882018ABD83974DA9A33B9A1A927827762
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/wbo645J4z3QPngapQuP-JSHIbac.roa
Signing time: Mon 15 May 2023 15:47:47 +0000
ROA not before: Mon 15 May 2023 15:47:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34400
IP address blocks: 84.23.105.0/24 maxlen: 24
84.23.109.0/24 maxlen: 24
84.23.107.0/24 maxlen: 24
84.23.108.0/24 maxlen: 24
84.23.106.0/24 maxlen: 24
84.23.115.0/24 maxlen: 24
84.23.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 17:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:18:ab:d8:39:74:da:9a:33:b9:a1:a9:27:82:77:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: May 15 15:47:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ba3ae39278cf740f9e06a942e3fe2521c86da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:27:90:14:46:d0:b0:dd:63:e6:a8:70:a0:
92:c9:e2:76:bc:cc:24:87:35:85:de:d9:c2:da:2a:
78:c3:f0:7f:6e:1c:18:6f:54:c2:0b:b9:2b:59:c6:
e3:43:39:34:74:68:a9:55:69:d1:38:b9:e6:12:f0:
b3:54:77:c7:12:48:5f:23:78:a2:e0:53:24:4e:45:
3c:fe:96:22:1f:2b:5e:a0:47:26:0b:05:65:8e:17:
34:7e:79:46:fa:72:ee:8b:8f:d7:8e:51:08:cb:12:
91:d7:e5:02:66:f6:c9:63:f5:aa:06:d1:02:5b:56:
60:fe:1a:7e:fa:3d:5b:10:33:2e:be:ed:90:03:ed:
55:b2:26:32:26:89:38:29:2a:56:14:1f:99:08:4c:
b9:cf:28:b5:1c:3d:fa:6e:65:83:bd:90:3c:0c:01:
d5:b8:75:32:ee:5a:ea:c7:49:1d:ff:95:57:8c:38:
06:12:f6:62:f2:1c:c7:d5:90:d9:12:e0:8d:06:57:
cb:c9:67:11:e6:29:75:5f:94:db:c2:14:9f:07:2a:
da:83:5d:fe:c3:9a:64:3d:d6:63:1c:c8:9e:08:47:
8c:f4:02:3b:d3:e7:f6:a8:d9:4f:4d:be:aa:77:d4:
66:53:09:67:c4:f5:71:dc:19:4a:7d:ab:93:33:a4:
61:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BA:3A:E3:92:78:CF:74:0F:9E:06:A9:42:E3:FE:25:21:C8:6D:A7
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/wbo645J4z3QPngapQuP-JSHIbac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.23.105.0-84.23.109.255
84.23.113.0/24
84.23.115.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:31:e0:9e:20:6f:42:35:1c:a9:18:1d:29:ae:b6:88:3e:28:
9d:95:d5:81:0e:b5:a4:cf:30:90:47:84:79:dd:f9:bd:7a:ac:
48:ce:43:7a:e4:29:1d:85:93:94:b4:99:ad:c3:5f:e4:bf:59:
31:b7:3a:0e:96:c5:35:68:6c:cf:f7:22:47:78:85:4d:29:f1:
99:72:a7:29:46:6a:03:68:33:74:b0:f2:a0:3e:a0:82:fc:8a:
12:96:a5:67:0a:4b:fc:2e:71:56:99:00:b5:ef:c5:11:bc:34:
73:0a:7a:61:09:91:05:21:a1:26:11:b1:62:5b:e3:52:3a:ea:
04:94:1e:ac:94:e3:a6:f7:fd:cb:80:14:07:0a:33:4b:3b:a9:
39:87:1b:e3:8e:26:d8:62:aa:3d:fd:fc:ce:59:0c:11:d5:99:
30:df:2f:ef:7e:70:10:4e:dd:fa:a1:36:d1:fc:20:6f:39:9f:
ce:59:fb:50:07:05:5d:88:6b:32:cf:0c:d8:f0:3e:68:8e:1a:
50:39:28:85:ca:c4:e4:d9:e0:6b:5f:92:22:67:c0:7b:8d:f7:
97:63:3b:5c:7c:cd:bd:a7:a3:e8:93:52:da:94:b3:5f:50:b0:
cf:50:48:d4:c3:b1:58:ba:99:50:67:f0:20:d8:22:0b:39:6b:
ee:2e:f8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:05 2024 by rpki-client on console-ams.rpki-client.org