Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WCmoWoncOM58TITIrtYRwQ5fwV8.roa
File: WCmoWoncOM58TITIrtYRwQ5fwV8.roa (raw, json)
Hash identifier: EKlPXKklH9Q+MAj/1XE7+x0/CXdqzVHQTjoA0WTLTek=
Subject key identifier: 58:29:A8:5A:89:DC:38:CE:7C:4C:84:C8:AE:D6:11:C1:0E:5F:C1:5F
Certificate issuer: /CN=19426325acb8ce609a686fa655b058968809b346
Certificate serial: 018DC5A596AB806AE1C9C3C8FE68128D78C7
Authority key identifier: 19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WCmoWoncOM58TITIrtYRwQ5fwV8.roa
Signing time: Tue 20 Feb 2024 08:33:00 +0000
ROA not before: Tue 20 Feb 2024 08:33:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3319
IP address blocks: 195.178.144.0/23 maxlen: 23
195.178.147.0/24 maxlen: 24
195.178.152.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 20 Feb 2024 16:37:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:a5:96:ab:80:6a:e1:c9:c3:c8:fe:68:12:8d:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19426325acb8ce609a686fa655b058968809b346
Validity
Not Before: Feb 20 08:33:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5829a85a89dc38ce7c4c84c8aed611c10e5fc15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6e:1c:a7:5f:e1:65:f8:55:63:f2:88:74:b9:
84:6b:e2:e5:78:b9:8a:5c:27:c0:86:78:6b:d7:88:
32:91:13:96:1f:40:6f:6a:f6:31:1b:5f:8d:dd:98:
8a:3f:47:9a:43:58:7f:b2:4d:95:e1:9a:12:3a:a6:
d3:2e:59:ad:0b:b4:eb:44:9c:5b:25:8e:0a:2b:7a:
d0:8e:13:d5:20:d7:5b:29:77:85:d6:2a:2b:71:4a:
1b:93:1e:9d:8d:08:1c:32:3a:65:60:26:c8:62:54:
5a:25:f7:78:24:23:18:9f:59:86:44:39:13:dd:d8:
e8:83:d5:e1:64:ef:48:96:55:d0:eb:f2:c1:be:72:
74:84:d4:9f:c1:c3:97:a3:d9:b1:83:e2:f4:e6:78:
7b:94:b1:46:a8:df:0b:65:7b:18:ac:6c:2d:d5:c4:
c8:4e:6b:dd:cf:3b:12:62:65:66:8f:8f:2b:64:7a:
c3:e7:c1:54:2c:e1:51:57:1f:ca:b0:57:61:6d:cc:
18:7a:49:4f:ed:42:24:02:c2:af:8e:1b:2d:61:83:
83:e7:b5:2e:29:d4:56:fc:e6:57:be:ea:6f:a3:77:
00:46:25:78:c5:51:41:6f:97:42:39:e2:83:e5:c9:
97:37:e9:12:54:8e:a8:3a:06:81:05:ee:63:69:fd:
f3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:29:A8:5A:89:DC:38:CE:7C:4C:84:C8:AE:D6:11:C1:0E:5F:C1:5F
X509v3 Authority Key Identifier:
keyid:19:42:63:25:AC:B8:CE:60:9A:68:6F:A6:55:B0:58:96:88:09:B3:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GUJjJay4zmCaaG-mVbBYlogJs0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/WCmoWoncOM58TITIrtYRwQ5fwV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8b6fb0-a875-4947-8ae4-03f4c7113c34/1/GUJjJay4zmCaaG-mVbBYlogJs0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.144.0/23
195.178.147.0/24
195.178.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:bd:7e:0f:b4:f5:ad:92:9d:01:74:c4:d4:32:e2:4c:6c:b2:
42:1f:c7:da:31:83:c7:36:88:02:bd:2e:7a:3d:68:ed:45:10:
14:06:d8:63:45:d0:8f:9f:f2:96:cb:a1:2d:8a:03:eb:56:ea:
c9:48:55:3c:30:e8:ba:ee:a8:cd:6b:a0:c0:a0:0b:53:a9:4c:
15:c2:a2:44:77:04:39:7e:24:74:eb:20:27:14:29:30:bf:9d:
a1:ee:c5:70:b8:8c:ed:91:b4:d2:08:43:ed:b8:78:fc:51:78:
96:0d:58:81:af:2f:b1:0d:e4:fa:22:85:2b:1d:76:5a:35:2b:
19:4e:53:19:c3:f1:3a:b7:5d:7f:b7:4f:a2:c1:2d:02:23:76:
9c:fe:db:36:67:fc:e5:17:c9:ba:db:b8:03:88:51:7c:71:36:
c0:7c:a7:d3:af:06:2d:e0:1f:b2:f1:69:cb:42:1a:31:59:f7:
6f:4c:a5:c3:f1:09:1f:54:71:43:f8:bf:1a:13:ff:57:0b:78:
1d:51:2c:8d:f5:85:54:35:0e:83:b5:fa:cb:a5:52:f5:46:cf:
44:af:66:92:4b:83:29:81:18:69:de:f3:b5:6c:97:2b:3f:b6:
7f:09:20:a2:9b:a3:65:d2:ce:b0:6e:e4:cc:34:42:2f:60:48:
ec:ba:36:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:42 2024 by rpki-client on console-fra.rpki-client.org