Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/wFAQHnzkSg48Z8dUvdJnSiCLWq0.roa
File: wFAQHnzkSg48Z8dUvdJnSiCLWq0.roa (raw, json)
Hash identifier: DFeH4wQQNGxAp711B5wGtrO7sCqTOm2/nELEejocMiw=
Subject key identifier: C0:50:10:1E:7C:E4:4A:0E:3C:67:C7:54:BD:D2:67:4A:20:8B:5A:AD
Certificate issuer: /CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Certificate serial: 01857295E697A0E6BA7F9EFC6817D50C7F3A
Authority key identifier: 19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/wFAQHnzkSg48Z8dUvdJnSiCLWq0.roa
Signing time: Mon 02 Jan 2023 13:05:04 +0000
ROA not before: Mon 02 Jan 2023 13:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16552
IP address blocks: 46.31.232.0/21 maxlen: 24
185.165.54.0/24 maxlen: 28
185.165.52.0/24 maxlen: 28
185.165.55.0/24 maxlen: 28
185.165.52.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:e6:97:a0:e6:ba:7f:9e:fc:68:17:d5:0c:7f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=191a96a28c65d584c8dd234d3db444cf4b337ba2
Validity
Not Before: Jan 2 13:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c050101e7ce44a0e3c67c754bdd2674a208b5aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1c:65:b6:04:03:68:fc:26:fc:54:8b:be:1e:
91:37:46:50:44:45:71:6a:29:27:bb:15:3b:0f:88:
92:3a:bc:fd:91:0d:b7:2b:56:55:e6:06:b7:3f:6c:
6f:35:17:67:14:0b:04:17:d7:08:57:2e:42:f3:78:
d8:60:aa:fb:68:79:e9:29:0b:73:bf:b6:83:3c:38:
10:8f:9d:05:03:68:c4:ee:a8:c0:6d:49:b6:fa:1a:
1f:89:8d:35:b5:f8:47:02:28:ef:29:f4:fe:8c:ed:
c0:fb:79:55:3b:d2:d8:14:b1:ed:33:51:0c:f9:dc:
da:96:ad:c1:f8:8f:d9:04:4b:0c:85:ef:c2:65:54:
b3:6f:81:f2:d4:a6:b0:f3:c7:b3:03:11:ff:93:74:
0c:aa:41:5d:4e:00:4b:3a:0f:01:34:ba:62:2e:1e:
44:e6:93:9a:bb:bb:b9:de:a5:8b:5b:a7:cb:57:cc:
ff:fa:68:c5:fd:c5:83:31:9b:bd:ff:e0:3d:81:91:
db:09:6e:47:da:47:b5:c5:ec:29:fe:e9:b0:ca:82:
9d:4d:05:66:f9:79:35:98:47:94:7c:1a:9e:ea:67:
e0:c3:50:26:f7:fe:ad:83:a9:84:3a:e3:38:c2:1a:
1c:7b:f2:5c:2a:2a:79:26:1e:bd:b9:e3:8b:94:49:
ff:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:50:10:1E:7C:E4:4A:0E:3C:67:C7:54:BD:D2:67:4A:20:8B:5A:AD
X509v3 Authority Key Identifier:
keyid:19:1A:96:A2:8C:65:D5:84:C8:DD:23:4D:3D:B4:44:CF:4B:33:7B:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRqWooxl1YTI3SNNPbREz0sze6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/wFAQHnzkSg48Z8dUvdJnSiCLWq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/5e0298-0d6b-41b4-88f6-9185199a18c0/1/GRqWooxl1YTI3SNNPbREz0sze6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.31.232.0/21
185.165.52.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:8c:6f:43:d8:ec:ff:d8:1d:11:0b:dd:d3:d6:5c:98:67:2b:
3c:d6:90:c0:be:f6:57:d5:f6:f1:ac:b8:81:e3:32:19:67:cd:
b6:8e:06:07:02:9d:f1:db:80:13:96:2d:f1:94:85:3b:bc:a6:
84:dd:63:3b:4f:39:4d:6a:45:e2:c0:8c:80:45:74:3a:bd:db:
26:ed:04:b0:5b:a3:37:5b:5e:08:85:39:03:29:8d:70:ff:2a:
4b:34:31:26:ff:11:7c:04:45:b9:18:fa:0b:05:a3:e6:6d:5f:
cd:51:6f:a5:94:54:87:35:98:46:e5:9f:03:34:7f:8d:3c:f8:
24:85:f3:5d:18:6e:a7:65:39:72:49:da:3d:78:ea:6e:b3:48:
7a:b3:57:2d:0a:36:5a:3c:02:c9:75:6b:53:a6:d8:52:58:79:
bd:6a:8b:5f:06:87:7e:e5:8d:80:b6:36:12:7a:dd:5b:ed:ec:
55:d8:e4:74:6d:ab:34:3a:51:eb:e2:a7:10:55:88:e9:f3:09:
f6:d0:26:d1:8e:3c:01:4f:aa:c9:6c:ca:c4:fd:16:f9:44:92:
75:19:b6:ad:56:70:c3:6d:59:b9:57:ae:90:de:3f:2f:2f:66:
45:f0:58:38:fa:35:68:43:dd:cb:68:74:f7:07:06:d5:bf:88:
6d:29:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:07 2024 by rpki-client on console-fra.rpki-client.org