Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WatuKGdgKHsWkxxIpl0QZhdNUc4.roa
File: WatuKGdgKHsWkxxIpl0QZhdNUc4.roa (raw, json)
Hash identifier: PiQzt+ir5vaSFpsgoEUiwIkTm7xAyZT1ZFbUtXII1Bw=
Subject key identifier: 59:AB:6E:28:67:60:28:7B:16:93:1C:48:A6:5D:10:66:17:4D:51:CE
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018607A929723A2232E0E356BAC339246F2A
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WatuKGdgKHsWkxxIpl0QZhdNUc4.roa
Signing time: Tue 31 Jan 2023 11:49:32 +0000
ROA not before: Tue 31 Jan 2023 11:49:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
188.212.96.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 13:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:a9:29:72:3a:22:32:e0:e3:56:ba:c3:39:24:6f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jan 31 11:49:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59ab6e286760287b16931c48a65d1066174d51ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:32:a1:c8:b9:9c:90:14:e0:7a:5d:be:81:
e0:5a:4f:ef:59:8d:50:2f:c1:a3:23:78:51:ca:23:
e0:2b:51:da:b6:61:dc:4f:05:0d:f2:99:ea:d0:7b:
9b:c3:3a:ed:df:f6:26:62:81:45:ba:08:22:57:3f:
84:3a:4f:f2:72:32:32:e3:4b:e9:67:9f:23:68:b5:
d0:b3:06:51:29:00:e4:5a:2a:cf:e0:eb:da:58:40:
93:b1:03:74:d8:48:df:ac:97:e9:28:13:55:73:26:
a6:54:a0:70:e5:9c:35:ba:c3:27:60:31:6b:23:b2:
14:8d:4f:fd:69:fd:c8:b7:5f:1a:ac:a7:0a:47:b8:
cd:57:44:6e:c7:18:3e:f9:40:94:86:d4:82:6d:69:
73:cc:ef:7c:19:4d:2f:b1:7d:43:72:ee:f3:41:f2:
b0:c6:3e:33:5e:fb:bd:b9:93:ae:e8:22:88:c9:b8:
6c:ac:d2:8e:de:21:a8:44:7b:cc:90:e6:e0:5a:ea:
ef:ff:92:4f:58:74:72:01:7a:c3:34:02:fb:50:58:
bf:40:37:12:c9:34:3f:c5:b5:f0:10:e9:e4:8b:c8:
10:ab:ed:ea:67:0e:b1:2c:09:17:29:cd:9a:bc:29:
ce:96:e3:ae:ab:28:e1:e7:1c:3f:0f:b8:5c:36:29:
3e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:6E:28:67:60:28:7B:16:93:1C:48:A6:5D:10:66:17:4D:51:CE
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/WatuKGdgKHsWkxxIpl0QZhdNUc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/24
89.42.44.0/22
89.46.217.0/24
188.212.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8f:93:ed:c6:71:e1:0b:1a:16:e9:17:ac:3f:80:ed:43:a0:
e2:1b:77:4e:10:70:3b:9d:57:68:ca:da:f4:46:25:6e:6f:79:
89:0b:4e:1c:5b:4f:d9:f0:15:8c:23:4a:4f:e6:3c:10:4e:ac:
a0:1d:8c:40:15:e4:67:4a:44:ec:ac:ab:28:e6:b8:34:48:1d:
0d:5b:e8:a8:51:cf:41:9a:8d:3a:b3:e4:0e:1a:dd:71:49:e5:
c6:39:d3:8b:43:11:30:49:18:06:95:59:af:99:a4:d6:31:19:
6b:fd:65:5a:bd:b6:06:fa:60:d6:f7:48:09:0d:f6:c5:a9:7b:
5b:83:ca:60:ef:b3:57:e7:12:1e:24:7f:7f:0c:df:e5:09:e5:
da:c5:be:e6:9e:1a:35:3d:2b:cd:2a:72:ac:cd:06:33:ae:71:
bc:cc:61:6f:a1:9b:8d:ec:a2:15:47:aa:dd:f8:31:8b:09:61:
2a:7a:58:bd:19:1f:cd:e3:c2:30:75:cd:e7:05:51:e3:5f:6c:
dc:11:10:6b:67:83:d5:1d:7d:78:36:82:d2:3c:0a:12:29:8f:
1d:8f:12:42:52:ac:4c:6d:b7:fc:1a:b5:cd:0d:62:c2:65:fc:
a6:2b:5c:3e:ab:b6:ce:e6:6c:d5:73:8c:dc:02:b2:63:f9:7e:
d6:1c:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org