Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wcYrpa77_oHzrnqfS1MqXEZRpsw.roa
File: wcYrpa77_oHzrnqfS1MqXEZRpsw.roa (raw, json)
Hash identifier: ezZHY90BzYDpS+wyhV6AvI6lxGqGnNyC92SokdEweyQ=
Subject key identifier: C1:C6:2B:A5:AE:FB:FE:81:F3:AE:7A:9F:4B:53:2A:5C:46:51:A6:CC
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C8A7BCE07EBD3768667B3EC0A1D41B511
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wcYrpa77_oHzrnqfS1MqXEZRpsw.roa
Signing time: Thu 21 Dec 2023 03:46:58 +0000
ROA not before: Thu 21 Dec 2023 03:46:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 188.212.121.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
89.47.36.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
89.40.36.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8a:7b:ce:07:eb:d3:76:86:67:b3:ec:0a:1d:41:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 21 03:46:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1c62ba5aefbfe81f3ae7a9f4b532a5c4651a6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fc:94:2c:fd:44:fd:22:ca:55:17:1a:4c:d3:
52:7f:22:9a:32:bc:eb:9e:65:a7:30:9d:b7:80:79:
0a:91:0d:7b:40:d0:da:c7:1e:80:c4:70:7b:da:8b:
5f:16:1e:09:6c:68:cf:f9:57:d6:86:1b:34:00:24:
65:04:38:3b:43:91:26:67:b9:8f:0d:ca:c6:3e:f1:
2a:4d:9d:69:31:50:94:23:55:ed:c8:28:95:db:af:
00:f9:1d:bf:d0:63:05:86:73:00:7c:7b:58:66:2a:
7e:70:e5:6d:a4:18:ae:9e:1a:10:95:c1:fc:0c:ec:
9f:bc:35:31:39:0e:3f:15:91:a9:3d:3e:fc:8e:08:
9a:9a:6d:ab:99:6b:ed:ad:d4:8a:cf:d3:02:01:02:
b6:5d:7c:91:7a:0c:5d:7e:92:75:68:68:cc:b2:3d:
ab:85:19:64:07:b7:11:69:48:a3:15:bd:2f:5e:89:
d1:18:9e:85:2c:78:ce:3a:c6:98:bf:cf:e3:24:47:
c4:d5:08:9c:c7:70:20:43:87:98:74:1f:1f:a5:09:
ed:23:5a:f5:7b:8b:fe:1b:51:a0:39:d2:fc:3c:0a:
1a:05:4a:9b:bd:50:2a:2b:c8:f8:28:a3:e1:27:9a:
97:9f:bf:29:51:49:95:06:97:7c:d4:63:c6:a8:ca:
29:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C6:2B:A5:AE:FB:FE:81:F3:AE:7A:9F:4B:53:2A:5C:46:51:A6:CC
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wcYrpa77_oHzrnqfS1MqXEZRpsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
86.107.100.0/24
89.36.140.0/24
89.40.36.0/24
89.45.35.0/24
89.46.42.0/24
89.47.36.0/24
94.177.51.0/24
94.198.171.0/24
176.223.188.0/24
188.212.121.0/24
188.215.31.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:f6:18:c1:e9:68:3e:d4:dc:5a:bc:24:55:e8:bc:74:61:23:
f2:4c:59:fe:52:1d:69:18:09:a2:f2:af:e1:0b:04:17:d3:70:
8a:39:28:f0:9c:49:27:36:03:9e:0c:61:12:2f:ac:5b:d6:58:
f1:74:dd:59:b4:12:64:98:ab:d7:17:da:cf:b3:7c:01:3e:8b:
2c:26:2b:7a:39:64:f0:6e:73:3b:10:3c:d6:a2:01:10:8b:23:
49:52:69:e6:64:e2:b1:67:bd:32:52:f9:8c:08:40:9f:3a:8e:
25:5e:48:92:bd:fa:ba:e7:1d:c3:96:74:b7:05:fc:53:90:34:
52:39:94:24:f6:9e:51:6b:04:05:0b:64:e7:72:05:08:7a:7d:
4e:43:ba:5f:0d:b9:dc:6a:4f:69:1f:1e:67:38:19:0b:1b:26:
59:70:d5:8c:b9:3e:56:87:0d:c2:77:4b:4a:6d:96:f1:a0:fc:
d1:01:fc:bb:2c:06:12:f2:17:b0:58:a6:ab:45:d3:18:d7:d9:
21:e0:27:b4:12:ab:b2:20:3e:0f:4a:5e:64:7c:dd:cd:42:e0:
7c:fa:de:46:53:27:2f:2d:25:a8:d8:0f:7f:4b:af:bd:9a:c1:
c4:b0:8e:55:f3:22:84:e0:e2:a6:0a:30:8d:b2:01:81:1c:27:
c6:58:f1:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org