Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/WW67R5wsZUGxjVV7kY_l-i7n1Rk.roa
File: WW67R5wsZUGxjVV7kY_l-i7n1Rk.roa (raw, json)
Hash identifier: Ba43Sm8gsp59B1kgaG2GsSllF4kqH4c7Lynro8zCHCE=
Subject key identifier: 59:6E:BB:47:9C:2C:65:41:B1:8D:55:7B:91:8F:E5:FA:2E:E7:D5:19
Certificate issuer: /CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Certificate serial: 018CC94E3E1D6353B9876213DE68EBE6118B
Authority key identifier: 9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/WW67R5wsZUGxjVV7kY_l-i7n1Rk.roa
Signing time: Tue 02 Jan 2024 08:33:17 +0000
ROA not before: Tue 02 Jan 2024 08:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50467
IP address blocks: 193.106.208.0/23 maxlen: 23
31.134.48.0/20 maxlen: 20
109.95.112.0/21 maxlen: 21
91.221.88.0/23 maxlen: 23
46.151.16.0/21 maxlen: 21
185.235.76.0/24 maxlen: 24
109.95.144.0/21 maxlen: 21
193.200.133.0/24 maxlen: 24
2a0c:db00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 24 Apr 2024 10:09:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:3e:1d:63:53:b9:87:62:13:de:68:eb:e6:11:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f36d08a3cd8a42f46a2c96dfd72ed8cee279477
Validity
Not Before: Jan 2 08:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596ebb479c2c6541b18d557b918fe5fa2ee7d519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:63:c0:de:48:d8:4f:c2:ff:38:0e:98:3d:
73:5e:a7:57:4a:c3:01:3d:09:ad:d3:90:22:f8:c3:
52:71:93:b2:68:00:93:2f:65:03:fc:6d:6d:94:87:
4c:06:39:8c:3f:f6:dc:4a:38:57:c7:ec:82:a0:f3:
28:be:d2:d2:b3:6e:7a:03:43:6f:95:10:10:97:8d:
d9:59:85:c9:e5:36:a5:89:12:4e:61:e8:72:b8:7f:
35:32:3c:f2:84:39:1f:5e:f8:44:d7:77:49:9a:62:
5f:d2:57:e8:b1:19:d8:f9:d0:27:6b:2e:0f:87:b0:
f5:25:c6:2f:4d:da:58:11:48:de:52:2c:79:3e:e6:
98:86:20:ef:88:95:13:ed:74:54:b1:4c:61:2e:80:
2c:e6:52:37:a4:a3:f8:a4:95:f3:16:55:7a:18:0d:
a8:81:65:68:43:6d:03:b4:f9:53:cd:6d:bf:d1:d1:
ed:bc:43:d2:71:5b:8c:af:7c:c5:9a:b5:36:44:c3:
ce:e6:ca:59:40:90:cf:6d:d8:b8:05:e9:56:a2:9d:
aa:36:bc:da:07:62:2a:1d:8b:08:61:96:ec:dc:74:
9f:9c:02:70:0b:dc:a6:94:f0:26:6d:87:c2:58:7b:
b8:67:f2:fc:40:ac:be:e4:88:c3:16:45:81:04:61:
06:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6E:BB:47:9C:2C:65:41:B1:8D:55:7B:91:8F:E5:FA:2E:E7:D5:19
X509v3 Authority Key Identifier:
keyid:9F:36:D0:8A:3C:D8:A4:2F:46:A2:C9:6D:FD:72:ED:8C:EE:27:94:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzbQijzYpC9Goslt_XLtjO4nlHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/WW67R5wsZUGxjVV7kY_l-i7n1Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2fbba7-ea0e-4089-9727-c33372c9d507/1/nzbQijzYpC9Goslt_XLtjO4nlHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.48.0/20
46.151.16.0/21
91.221.88.0/23
109.95.112.0/21
109.95.144.0/21
185.235.76.0/24
193.106.208.0/23
193.200.133.0/24
IPv6:
2a0c:db00::/29
Signature Algorithm: sha256WithRSAEncryption
06:ce:17:c1:86:e8:77:3b:14:cd:00:fb:ed:9e:4f:ac:43:29:
00:c1:43:74:4f:6a:fd:10:3d:db:d3:9f:b4:61:2c:54:eb:c4:
81:30:76:fa:97:d6:0b:f9:d6:73:3d:89:06:d7:a3:28:43:f7:
65:c2:fc:d1:8f:e2:b9:4b:28:ac:ef:ae:d5:47:c3:31:fd:4a:
72:b1:9e:f0:9f:f2:60:51:01:0c:ff:1e:bc:61:30:90:f9:ff:
57:7b:ea:72:ca:e0:c6:37:ca:38:68:f2:c3:37:0f:95:36:ac:
1c:48:d8:7f:b6:6e:1c:56:bb:0f:34:50:5e:f3:a0:28:88:3f:
16:00:a0:10:08:4f:26:39:da:63:b3:a4:59:c0:8e:61:79:96:
42:0e:16:7a:b4:bb:34:af:d1:e9:33:c4:f6:da:a9:2f:8f:33:
1c:02:77:ba:2c:80:78:9e:9f:ef:aa:20:ad:5b:68:7d:1d:82:
55:4d:d4:be:48:eb:d2:b0:12:9d:4c:26:82:e9:28:43:62:35:
d3:aa:d7:74:ac:89:46:2a:f6:87:03:7d:57:fc:2d:69:ce:4f:
7d:a7:de:d2:47:07:6b:21:1b:aa:46:15:14:fd:a3:67:dc:74:
4f:08:bb:3e:04:d3:a7:ac:fd:31:b5:fc:fb:79:41:e6:69:6a:
12:dd:fc:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:47 2024 by rpki-client on console-fra.rpki-client.org