Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/Wgf_C1FkI1-uuuW48ktq2yRNhrc.roa
File: Wgf_C1FkI1-uuuW48ktq2yRNhrc.roa (raw, json)
Hash identifier: O4PCIunffjJTX0kQsPupLDI9lzHIMKhL0WOnQb5V/t8=
Subject key identifier: 5A:07:FF:0B:51:64:23:5F:AE:BA:E5:B8:F2:4B:6A:DB:24:4D:86:B7
Certificate issuer: /CN=9de783e9acd56992f5835fb4882183500ca03c83
Certificate serial: 018D656761214C9F173D15524BE1CACBBC93
Authority key identifier: 9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/Wgf_C1FkI1-uuuW48ktq2yRNhrc.roa
Signing time: Thu 01 Feb 2024 16:01:30 +0000
ROA not before: Thu 01 Feb 2024 16:01:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 62.182.168.0/24 maxlen: 24
62.182.169.0/24 maxlen: 24
62.182.170.0/24 maxlen: 24
62.182.171.0/24 maxlen: 24
62.182.172.0/24 maxlen: 24
62.182.173.0/24 maxlen: 24
62.182.174.0/24 maxlen: 24
62.182.175.0/24 maxlen: 24
83.97.96.0/21 maxlen: 21
83.97.96.0/24 maxlen: 24
83.97.97.0/24 maxlen: 24
83.97.98.0/24 maxlen: 24
83.97.99.0/24 maxlen: 24
83.97.100.0/24 maxlen: 24
83.97.101.0/24 maxlen: 24
83.97.102.0/24 maxlen: 24
83.97.103.0/24 maxlen: 24
89.47.52.0/24 maxlen: 24
89.47.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:15:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:67:61:21:4c:9f:17:3d:15:52:4b:e1:ca:cb:bc:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de783e9acd56992f5835fb4882183500ca03c83
Validity
Not Before: Feb 1 16:01:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a07ff0b5164235faebae5b8f24b6adb244d86b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:d4:7f:cc:db:8e:d7:dd:d9:df:ce:40:93:
02:ba:58:35:49:33:e2:e0:1e:00:d9:08:5c:ac:e8:
ad:54:7e:e4:84:a5:30:18:7f:5a:0c:d8:d1:b6:8e:
a8:b1:01:02:17:8d:36:60:63:cc:ee:d5:0d:e0:f7:
9c:05:52:ec:4f:13:fb:75:6a:5f:71:ba:72:da:8d:
1a:ca:02:d8:37:83:ec:48:a4:73:03:b8:db:3b:a8:
6f:9b:c4:b6:94:3c:c1:2d:c4:44:92:f4:0f:3f:f4:
18:74:c5:60:b4:86:a4:dc:84:5e:36:3a:13:91:12:
d7:d4:61:6d:38:f3:d0:65:15:e7:eb:97:0a:97:ad:
d3:f2:66:30:e6:35:9a:ef:fc:fd:c2:f8:bc:9b:ce:
b5:4e:1d:5e:c1:35:28:93:3b:f5:77:31:cf:40:3c:
3d:27:97:a9:f6:2f:76:46:e5:88:3d:bf:46:9b:22:
4c:f9:3f:d2:45:16:5f:8d:a4:0d:07:60:53:43:d4:
da:f7:7b:d7:db:c5:d5:b7:0b:fe:78:9f:fe:45:6c:
b5:53:83:e8:9a:fa:05:7d:09:9b:04:64:ca:f0:40:
32:b5:4c:b3:fe:12:aa:59:74:74:26:c0:39:9c:8b:
6c:5c:ab:a5:9d:3e:03:eb:f5:93:42:0c:8d:e5:20:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:07:FF:0B:51:64:23:5F:AE:BA:E5:B8:F2:4B:6A:DB:24:4D:86:B7
X509v3 Authority Key Identifier:
keyid:9D:E7:83:E9:AC:D5:69:92:F5:83:5F:B4:88:21:83:50:0C:A0:3C:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neeD6azVaZL1g1-0iCGDUAygPIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/Wgf_C1FkI1-uuuW48ktq2yRNhrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4f05ce-a382-49a0-9999-e52f70c06c29/1/neeD6azVaZL1g1-0iCGDUAygPIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.182.168.0/21
83.97.96.0/21
89.47.52.0/24
89.47.252.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e9:ba:5b:a2:39:65:c0:5b:e4:dd:cb:7e:da:55:ce:af:b1:
36:86:23:af:d1:04:c5:05:6e:93:2b:c8:fb:06:89:ad:09:9a:
c1:8c:68:3a:66:ba:26:8b:01:35:1d:b1:7f:eb:59:1d:5c:d4:
c9:46:12:63:97:c4:b7:3e:44:28:cd:5d:74:27:23:0a:64:9e:
bc:6c:dd:a3:01:6a:2a:b9:90:ea:d6:40:51:40:5d:9b:b9:12:
d1:c3:1c:e7:f5:66:55:65:49:4e:2e:0c:39:ba:01:76:0b:9e:
1d:a3:6f:e9:47:fc:79:e0:7f:ac:c8:0b:6c:b2:fc:20:f9:1f:
bb:63:bf:13:91:a2:29:3e:99:5e:5a:f4:13:f5:ae:fc:0f:a4:
db:a0:bb:c5:34:bf:80:28:87:72:10:88:c6:d6:1e:b2:3a:79:
91:db:bb:3f:82:bf:43:71:cb:f5:50:6f:5d:9a:29:5d:bc:82:
1f:c7:16:46:79:a3:70:8b:c6:92:25:9b:33:85:fd:03:8b:45:
b7:34:5f:e4:ed:a3:46:75:cd:17:06:e0:25:ac:59:ca:50:1b:
23:38:c0:07:ae:50:e0:a9:55:f0:f2:03:5e:e3:ef:3e:6d:12:
e3:56:24:9a:23:09:51:d3:88:5c:4c:27:90:13:5d:a1:9e:f4:
53:94:58:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 12:00:01 2024 by rpki-client on console-fra.rpki-client.org