Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wIRN_RXiBJETKNKJuUooA8CD3D4.roa
File: wIRN_RXiBJETKNKJuUooA8CD3D4.roa (raw, json)
Hash identifier: WwamyaXajiAwRsN/tVXZZMDyWz/NDZc5NkeS2Rp1x2A=
Subject key identifier: C0:84:4D:FD:15:E2:04:91:13:28:D2:89:B9:4A:28:03:C0:83:DC:3E
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019128487DA21221C06843D22C4040832ABE
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wIRN_RXiBJETKNKJuUooA8CD3D4.roa
Signing time: Tue 06 Aug 2024 15:22:05 +0000
ROA not before: Tue 06 Aug 2024 15:22:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 5.42.210.0/24 maxlen: 24
212.18.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:48:7d:a2:12:21:c0:68:43:d2:2c:40:40:83:2a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 15:22:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0844dfd15e204911328d289b94a2803c083dc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:af:61:2d:dd:07:11:1b:25:cb:d3:c9:d5:8c:
9c:0c:b4:08:5b:87:8a:51:d2:e6:ce:ad:4a:81:e0:
ab:a1:d7:95:8b:1d:f5:ea:27:66:60:f3:dd:fd:04:
66:db:d2:88:d1:ea:c5:f8:33:54:24:95:7e:45:fb:
14:e6:de:d3:38:10:3e:7a:91:f3:fd:35:2d:36:a7:
6b:6c:cb:b9:45:e4:ff:74:83:4e:ac:c7:c1:80:bb:
2d:eb:3e:90:a3:48:7f:03:20:1d:b7:4a:f4:d3:68:
e4:d9:14:9c:10:36:81:83:ec:f6:e2:7e:7b:fc:0d:
6c:c8:7c:a8:fc:2c:cb:39:25:13:f3:33:38:20:39:
7d:ba:5a:ca:c8:81:04:b9:1c:81:e2:4a:ca:81:8c:
23:79:38:5a:5a:14:d0:69:03:3d:60:f6:d7:73:4c:
1a:35:44:93:87:ea:6e:f5:69:32:b2:4c:0a:29:31:
f6:38:e6:2a:6a:66:c0:7f:5e:ec:fa:a2:b7:07:0e:
7e:7e:07:33:e2:a9:a7:6d:05:ea:fd:96:d0:43:6a:
70:f2:fa:2c:bb:4a:84:66:fa:de:68:81:3c:23:26:
ce:f0:c2:ae:82:b3:b8:8c:fc:71:35:9d:cd:00:65:
52:41:3b:ff:b0:cc:b6:d0:d9:64:a0:a4:69:b0:ef:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:84:4D:FD:15:E2:04:91:13:28:D2:89:B9:4A:28:03:C0:83:DC:3E
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wIRN_RXiBJETKNKJuUooA8CD3D4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.210.0/24
212.18.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4b:ed:24:f1:23:7e:d1:65:44:64:30:21:67:ed:d1:cf:f7:
da:96:31:f3:0c:da:16:20:54:f8:f3:6c:5e:a6:31:29:d8:7e:
bf:00:d6:33:05:0c:f2:1e:2d:81:34:b3:9e:12:0a:15:ee:aa:
3d:44:e0:1b:0e:50:75:78:76:8d:6a:ed:95:a6:cb:a2:f6:22:
97:2d:e5:e4:58:e6:61:5b:c6:96:40:a3:24:bc:1b:1f:89:8a:
f0:fb:3c:9b:59:86:c8:7c:fc:cc:0c:46:fe:c5:72:ba:ea:9d:
86:06:f9:23:f7:57:f7:c2:05:f4:8f:13:c6:63:49:e7:b3:fc:
77:92:a9:b0:23:5d:90:fc:03:5f:26:7b:53:12:6e:6d:10:32:
ad:9a:b0:4c:8b:bf:fb:bd:f3:de:12:d0:18:af:7d:ae:b3:85:
95:52:c8:76:a0:8b:3d:25:72:62:b4:73:63:c7:52:9b:12:f8:
1a:19:18:30:7b:f0:ab:75:fa:f2:42:d2:7e:a2:31:df:92:fe:
f0:4f:d7:b1:84:3c:d5:54:e6:e8:74:d0:90:fd:e3:d4:7c:ba:
fd:0d:53:66:2e:61:c7:10:17:04:d0:b4:91:69:1c:86:c5:9e:
c0:81:f7:45:bd:7c:6f:9b:d5:48:71:21:3e:02:31:2d:83:4d:
36:3c:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 22:30:41 2024 by rpki-client on console-fra.rpki-client.org