Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/WOLZ11rledpgZyWz-hy9pWLCJfQ.roa
File: WOLZ11rledpgZyWz-hy9pWLCJfQ.roa (raw, json)
Hash identifier: 1IsyN5Gy5S0VdaIAGv3nkLbwRvroJ86H34RDjTGtTSo=
Subject key identifier: 58:E2:D9:D7:5A:E5:79:DA:60:67:25:B3:FA:1C:BD:A5:62:C2:25:F4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 01921DBAB6CF8758025315C713DEB1C1DD00
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/WOLZ11rledpgZyWz-hy9pWLCJfQ.roa
Signing time: Mon 23 Sep 2024 07:13:48 +0000
ROA not before: Mon 23 Sep 2024 07:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16154
IP address blocks: 80.95.28.0/22 maxlen: 24
88.213.194.0/23 maxlen: 24
88.213.204.0/22 maxlen: 24
217.79.64.0/19 maxlen: 24
217.79.64.0/22 maxlen: 24
217.79.72.0/21 maxlen: 24
217.79.80.0/20 maxlen: 24
2a02:7900::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 23 Sep 2024 11:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1d:ba:b6:cf:87:58:02:53:15:c7:13:de:b1:c1:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Sep 23 07:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58e2d9d75ae579da606725b3fa1cbda562c225f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:08:9f:4f:b7:5d:1d:47:0c:93:c3:07:6e:b2:
c7:ba:fc:a0:1a:89:32:f3:9d:18:c5:aa:94:fb:1b:
91:30:02:e5:e3:e8:e4:5e:47:cd:c2:8a:e4:40:9d:
5b:b6:25:4b:e4:12:b1:68:02:2e:47:9e:d9:a0:89:
25:2b:d9:9f:a9:c3:32:89:b0:89:a6:ae:79:72:93:
c5:d9:40:af:e9:92:24:1d:db:bb:66:2f:4e:5d:67:
df:3e:30:71:52:43:3b:a2:8c:2b:88:46:93:b2:38:
ee:21:b0:c9:9e:18:51:a5:e2:42:91:06:6a:e8:76:
c8:3b:84:fc:ef:64:8b:e4:81:52:e7:bc:f3:b6:3e:
26:53:67:85:d7:31:c8:34:57:35:85:24:1f:bf:dc:
15:1e:2e:e2:d3:ce:29:16:83:eb:1f:eb:f2:f6:11:
bb:39:97:3f:31:c7:16:70:31:9a:7d:79:a5:c9:00:
7c:97:a1:f4:2a:58:26:11:d8:14:95:dd:ba:8e:bc:
45:4b:3d:46:a3:1c:07:aa:bc:4e:70:12:5a:a3:20:
75:b1:76:d1:9d:e6:2c:73:59:5b:39:00:ad:c9:00:
7d:d3:60:43:a3:bb:1c:37:84:58:76:07:70:3d:06:
43:4b:e7:29:59:d9:8a:86:0d:b8:16:e1:c4:b1:97:
71:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E2:D9:D7:5A:E5:79:DA:60:67:25:B3:FA:1C:BD:A5:62:C2:25:F4
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/WOLZ11rledpgZyWz-hy9pWLCJfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.95.28.0/22
88.213.194.0/23
88.213.204.0/22
217.79.64.0/19
IPv6:
2a02:7900::/32
Signature Algorithm: sha256WithRSAEncryption
8f:f2:79:ef:1a:c4:99:68:43:0d:a3:5a:fa:51:f6:d3:be:33:
19:05:3d:bb:56:76:2c:2d:a9:50:ac:5c:45:9c:b7:cf:5a:58:
16:2a:33:95:9a:d9:b4:09:a9:6a:43:08:37:a7:79:24:e7:94:
c9:39:a5:65:c0:7e:82:47:ac:a5:d6:8f:b0:98:29:8f:c6:b7:
6d:28:3c:e3:ca:6c:3f:a5:72:d1:73:49:45:89:00:83:44:55:
f7:57:00:48:c9:0b:c7:20:61:bd:87:43:0e:e4:4a:7e:2b:7e:
e6:f6:bf:53:1c:97:fa:7a:f3:35:f0:6c:6b:5e:54:8f:bd:7a:
00:98:e7:86:7f:dd:3b:cb:ab:d3:27:55:d4:1f:5e:95:92:c2:
19:03:4f:09:26:b1:1f:99:5f:13:08:2c:5d:d3:1d:33:e8:a4:
72:67:13:a1:04:d4:6c:02:51:9d:0c:c4:c1:8c:04:e6:cd:2d:
ed:3b:01:9f:ba:f9:ac:8c:24:c3:99:54:c6:5b:6f:ed:ae:48:
f2:46:38:d1:50:12:7a:ab:ca:ca:f4:a8:28:49:af:0d:1f:bc:
4d:c8:a2:6e:af:a0:c2:d8:f3:76:c8:c8:bc:76:ff:54:1d:d0:
fb:06:88:67:52:56:96:b8:aa:f9:f0:86:f4:54:00:ac:1c:d6:
57:c1:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 15:22:07 2024 by rpki-client on console-fra.rpki-client.org