Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WuJFrTaAiOTuElLoZs2gMEndq5M.roa
File: WuJFrTaAiOTuElLoZs2gMEndq5M.roa (raw, json)
Hash identifier: zRP5aFNLDtEnuqepMOcxS+rb7ipKQl+76cJAAdunmjU=
Subject key identifier: 5A:E2:45:AD:36:80:88:E4:EE:12:52:E8:66:CD:A0:30:49:DD:AB:93
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018FA5F27BFB89CC97A78DEBADCD191BD44D
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WuJFrTaAiOTuElLoZs2gMEndq5M.roa
Signing time: Thu 23 May 2024 14:54:43 +0000
ROA not before: Thu 23 May 2024 14:54:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 84.32.15.0/24 maxlen: 24
84.32.24.0/24 maxlen: 24
84.32.59.0/24 maxlen: 24
84.32.63.0/24 maxlen: 24
84.32.107.0/24 maxlen: 24
84.32.149.0/24 maxlen: 24
84.32.151.0/24 maxlen: 24
84.32.152.0/24 maxlen: 24
84.32.154.0/24 maxlen: 24
84.32.156.0/24 maxlen: 24
84.32.177.0/24 maxlen: 24
84.32.217.0/24 maxlen: 24
84.32.218.0/24 maxlen: 24
84.32.244.0/24 maxlen: 24
88.216.34.0/24 maxlen: 24
88.216.41.0/24 maxlen: 24
88.216.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Sep 2024 07:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:f2:7b:fb:89:cc:97:a7:8d:eb:ad:cd:19:1b:d4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: May 23 14:54:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ae245ad368088e4ee1252e866cda03049ddab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:ad:b9:2f:73:01:3c:a6:b4:56:8a:fa:2c:
70:38:08:94:78:5b:10:db:a1:3a:db:bf:ba:7f:cb:
fa:4c:57:9d:27:65:b6:68:50:1c:1a:21:43:06:af:
ac:74:7c:49:99:41:2c:e0:07:a5:64:3c:92:b2:1b:
70:5f:c1:99:96:aa:64:c1:ca:0c:87:6c:22:de:e5:
66:24:9f:dc:c9:a1:6b:cf:62:68:f1:eb:e2:44:86:
ab:58:b7:cd:a1:b6:ff:81:68:2d:b1:96:ab:0b:ff:
d0:e0:62:70:ec:4e:09:58:96:79:3d:cf:2a:df:b5:
8f:b3:57:19:13:24:b9:55:91:f6:a9:c6:93:d4:74:
f0:cb:40:78:78:fb:e7:6c:cf:ca:db:0f:ec:ce:6e:
e3:af:61:f6:b1:5a:e1:bc:8b:21:d9:eb:5d:f8:b7:
fa:be:69:ff:97:44:70:c8:a8:3e:05:66:62:82:f4:
c4:44:0d:b2:7c:fa:65:80:b1:fa:ec:b4:47:bb:72:
7d:86:98:49:ba:66:a5:fc:d2:14:ae:88:df:50:2e:
15:11:3d:9b:3b:ae:6e:59:84:0f:d1:2a:79:19:fe:
5d:6b:d6:92:a2:f3:db:4b:02:d6:97:26:77:01:3a:
98:7f:f0:25:6f:01:2a:46:d7:40:f5:05:16:03:42:
85:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E2:45:AD:36:80:88:E4:EE:12:52:E8:66:CD:A0:30:49:DD:AB:93
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/WuJFrTaAiOTuElLoZs2gMEndq5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.15.0/24
84.32.24.0/24
84.32.59.0/24
84.32.63.0/24
84.32.107.0/24
84.32.149.0/24
84.32.151.0-84.32.152.255
84.32.154.0/24
84.32.156.0/24
84.32.177.0/24
84.32.217.0-84.32.218.255
84.32.244.0/24
88.216.34.0/24
88.216.41.0/24
88.216.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:3b:eb:01:54:54:fe:c9:da:f0:72:30:98:bc:6e:59:db:70:
64:93:98:53:37:44:25:46:ea:80:44:96:ba:46:7b:7f:93:84:
fb:de:55:7b:79:91:17:c3:d4:1e:cf:d5:52:74:ef:67:3f:35:
a9:6c:24:e9:57:cc:76:90:46:d1:ad:d1:2c:76:69:5a:20:b0:
90:09:e4:e6:49:38:87:2b:db:07:d8:5f:ec:15:6d:71:48:64:
2e:b1:74:d5:79:c1:66:33:9a:63:82:03:c5:6d:48:3b:73:d8:
1d:a8:f4:e5:3c:7c:46:93:e8:4d:37:08:ed:a8:29:87:a1:7b:
f8:af:45:eb:07:bc:ca:a3:42:f8:42:5c:7f:cd:13:4a:1a:a6:
37:1e:d5:f0:e6:36:ae:ca:e7:6b:f1:50:15:1f:f1:17:85:93:
73:cc:f7:eb:ee:de:9a:05:6e:5b:5b:a5:4f:3e:d4:98:8c:a3:
59:f5:0f:77:8a:34:dd:b8:e7:62:f1:fb:75:a0:ea:2e:29:33:
b3:76:67:e9:7c:41:42:50:95:fc:0a:df:26:c1:5e:9a:a8:59:
d9:64:c8:12:de:9b:b7:ab:bf:15:b9:d9:c5:bc:5a:c3:11:c1:
b3:47:97:2e:2b:3e:61:4d:82:4c:41:6c:3f:80:18:4e:af:bd:
0e:01:66:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 12 09:26:05 2024 by rpki-client on console-fra.rpki-client.org