Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WJLMNSARCUOhPGwc63cJwKgtLtM.roa
File: WJLMNSARCUOhPGwc63cJwKgtLtM.roa (raw, json)
Hash identifier: J4o35VXaVb0Hz8TZFV/PRmfG2J3bxfmo1JX8rm5fkg8=
Subject key identifier: 58:92:CC:35:20:11:09:43:A1:3C:6C:1C:EB:77:09:C0:A8:2D:2E:D3
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EBDAE7DFE9C868F9ACBD86E86C501B62A
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WJLMNSARCUOhPGwc63cJwKgtLtM.roa
Signing time: Mon 08 Apr 2024 12:28:33 +0000
ROA not before: Mon 08 Apr 2024 12:28:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202656
IP address blocks: 31.41.254.0/24 maxlen: 24
45.87.126.0/24 maxlen: 24
45.95.29.0/24 maxlen: 24
45.128.125.0/24 maxlen: 24
45.128.126.0/24 maxlen: 24
45.128.127.0/24 maxlen: 24
45.128.128.0/24 maxlen: 24
94.154.190.0/24 maxlen: 24
176.116.15.0/24 maxlen: 24
176.126.96.0/24 maxlen: 24
193.28.178.0/24 maxlen: 24
193.187.105.0/24 maxlen: 24
194.59.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Apr 2024 19:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:ae:7d:fe:9c:86:8f:9a:cb:d8:6e:86:c5:01:b6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 8 12:28:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5892cc3520110943a13c6c1ceb7709c0a82d2ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:b0:49:8f:2a:3b:50:8f:c1:40:6c:d5:46:
28:b2:ee:49:49:37:72:08:f9:cc:ce:62:82:34:8f:
ad:43:18:4c:56:90:d4:95:33:8c:c2:65:f5:68:1f:
e3:9e:04:77:72:c4:c0:6c:b4:6e:7c:60:35:a9:92:
d6:79:d9:ee:90:9f:e5:fb:ac:92:fd:ae:b5:56:b1:
a8:b0:5a:32:2c:b5:9f:ed:a7:c9:e7:0e:f7:7c:f7:
8c:ee:86:96:89:1f:14:c7:18:c1:13:ff:b1:7f:2f:
42:bf:ad:c5:f8:83:1c:24:ed:83:7d:58:eb:75:42:
d5:bb:d9:07:a8:e9:4c:8c:92:05:dd:33:00:8c:8f:
02:8d:8b:13:d1:3d:83:70:32:66:ab:6d:c5:28:57:
fc:68:97:81:fd:82:e5:b2:e9:76:fd:51:62:79:23:
98:74:d0:99:59:b8:66:fe:2e:5f:8b:1e:b8:0f:70:
7c:55:2a:c3:c7:7c:b9:2d:21:d1:bd:65:30:6d:88:
e8:57:b5:6c:c4:d8:47:2d:32:d0:fe:be:6e:55:40:
61:cb:99:c4:d2:a1:d1:be:4b:6a:4d:3f:47:d4:4d:
74:59:f6:e5:85:45:f9:d2:95:8c:63:15:42:42:ed:
75:d5:37:8c:01:ee:25:3d:a3:3f:50:2d:d3:9a:de:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:CC:35:20:11:09:43:A1:3C:6C:1C:EB:77:09:C0:A8:2D:2E:D3
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/WJLMNSARCUOhPGwc63cJwKgtLtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.254.0/24
45.87.126.0/24
45.95.29.0/24
45.128.125.0-45.128.128.255
94.154.190.0/24
176.116.15.0/24
176.126.96.0/24
193.28.178.0/24
193.187.105.0/24
194.59.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:64:b3:8c:80:3c:6b:18:be:93:ed:c3:5b:9e:4f:72:f7:fc:
54:19:47:0c:fc:7d:07:b4:8b:e1:56:56:f1:72:d2:df:e6:c6:
ef:62:cf:6a:27:63:51:fb:82:b7:fc:de:6e:15:d6:f2:3b:9c:
85:81:aa:9c:c1:f2:05:ae:0a:16:2f:8d:49:23:09:b2:cd:ab:
0a:5c:b4:91:c7:04:17:a7:1c:3e:d4:7f:9e:ae:91:20:aa:42:
95:57:eb:d9:65:07:00:50:e8:2d:06:66:29:8c:f8:02:79:6b:
93:2c:2b:cf:e3:24:6c:7f:b3:a0:d7:28:fa:0b:d9:6e:ce:de:
4e:96:b4:aa:75:62:c8:02:38:65:aa:1c:ce:1d:34:4d:05:36:
89:4a:d0:0e:b6:f9:91:7c:b0:eb:2d:da:16:82:5c:64:cc:56:
9a:7b:90:6c:9b:4c:8e:9e:ba:95:4b:de:21:9c:27:a8:31:b1:
1a:10:e7:6a:38:69:44:36:0f:0c:60:6d:09:7b:3f:fa:a2:2a:
5b:ee:60:7a:a7:af:c3:bf:2b:ac:1d:26:75:30:74:fe:fe:20:
fd:d3:b6:d8:ae:9b:4f:eb:be:0f:74:e8:d9:a7:76:c5:48:c0:
1b:51:f4:ca:1d:6e:fc:5d:ce:e6:43:f8:66:fe:84:36:6b:a0:
82:7e:c5:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org