Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WM4RFN3N_DBEdbpdB5qFpU6rcGM.roa
File: WM4RFN3N_DBEdbpdB5qFpU6rcGM.roa (raw, json)
Hash identifier: x6GHeF8Xt0p1rw90meGmW4yQU7b0yzyqg5EldkfC8rY=
Subject key identifier: 58:CE:11:14:DD:CD:FC:30:44:75:BA:5D:07:9A:85:A5:4E:AB:70:63
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 0187B7DBB45EE768C8D26623C75D6B5282B9
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WM4RFN3N_DBEdbpdB5qFpU6rcGM.roa
Signing time: Tue 25 Apr 2023 10:00:41 +0000
ROA not before: Tue 25 Apr 2023 10:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205463
IP address blocks: 188.132.130.0/24 maxlen: 24
188.132.165.0/24 maxlen: 24
188.132.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b7:db:b4:5e:e7:68:c8:d2:66:23:c7:5d:6b:52:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Apr 25 10:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58ce1114ddcdfc304475ba5d079a85a54eab7063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:34:0c:f1:72:98:87:5d:8a:69:f0:cf:1f:b5:
d4:34:e3:f8:e1:94:ef:c0:dc:00:71:64:aa:77:be:
8c:41:99:ed:34:ec:27:04:6f:7e:65:a2:85:da:17:
21:f0:f8:ac:ae:78:e0:31:1a:cd:e2:42:2b:25:1d:
2e:59:9b:b5:bd:31:70:0b:1c:44:53:61:ed:98:57:
14:58:15:c3:5f:0f:8c:e3:9a:d3:76:47:54:c8:27:
7b:a7:7d:93:b1:64:23:8e:4e:96:e8:38:59:3f:b4:
9c:37:43:3b:49:cb:8a:02:cc:71:b1:0c:f0:bc:b6:
26:da:25:9e:21:b0:38:a8:95:61:4e:36:7c:76:c2:
b4:48:aa:7e:8f:be:72:fa:66:b2:2d:f4:1a:8d:27:
87:bb:87:9d:5c:1b:f3:0b:c0:4e:59:ac:77:6a:af:
73:bf:ef:1f:07:69:8c:70:68:7f:e3:16:53:43:72:
13:7b:4b:02:62:9d:4b:2a:23:2f:07:d3:db:d1:43:
24:2b:1b:b2:cc:e7:9d:a2:ba:80:0c:44:d2:c1:b0:
fa:fd:7a:d2:12:5d:55:49:bb:d6:33:5a:5f:d7:68:
54:ba:11:89:20:e6:44:e8:34:55:ba:56:61:4a:48:
2b:c2:2c:d1:94:3c:28:dc:d4:b8:0b:63:d1:e3:9c:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CE:11:14:DD:CD:FC:30:44:75:BA:5D:07:9A:85:A5:4E:AB:70:63
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/WM4RFN3N_DBEdbpdB5qFpU6rcGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.132.130.0/24
188.132.165.0/24
188.132.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a1:ee:7c:b1:50:4f:74:85:4d:6f:58:63:b0:a2:b1:11:e3:
a1:6c:8a:9f:53:a4:f3:7f:ea:bc:66:1e:7f:78:a3:b0:9f:ed:
08:d2:6d:6e:c9:c1:2a:af:7d:1f:dd:a2:af:c0:27:41:be:1e:
3a:13:75:87:b8:90:11:9d:13:e2:1c:e0:fa:5f:10:2d:01:19:
78:0e:b1:7c:1d:b2:f3:2d:ac:f2:75:19:18:60:20:21:da:34:
3f:a9:ae:9b:7e:4d:4b:de:88:7b:97:3a:d1:01:29:96:a6:fd:
0c:a3:f9:ce:b9:54:65:17:9d:37:d1:5b:1a:99:9e:90:43:27:
ca:26:47:a1:ec:e9:cf:d8:fe:d8:b9:ba:4a:db:69:bf:21:99:
16:2b:4b:0f:43:14:47:8f:2d:b7:67:c1:80:6d:18:b7:93:f6:
f3:03:bf:f6:cb:7e:e2:84:90:21:ef:c4:fc:d0:3e:e0:48:65:
3d:d8:72:48:99:5b:02:15:fc:e1:8e:e4:9a:f3:f0:15:94:a4:
2e:9d:60:61:5d:68:db:29:be:f1:9b:4f:db:d8:4b:ca:d7:61:
e3:d9:56:b7:c2:be:dc:03:66:d5:f4:c9:c1:b1:ac:aa:94:e3:
f8:3a:23:09:43:b5:10:87:01:92:d2:12:fa:3f:b3:e9:e9:91:
b2:1c:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:44 2024 by rpki-client on console-fra.rpki-client.org