Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/WRejmdSG3cOT_jSKgMkoJXHcn8U.roa
File: WRejmdSG3cOT_jSKgMkoJXHcn8U.roa (raw, json)
Hash identifier: oiyT71o818lYaw6VcQWlb3gsxDVznqm3GqiRNHcsv9g=
Subject key identifier: 59:17:A3:99:D4:86:DD:C3:93:FE:34:8A:80:C9:28:25:71:DC:9F:C5
Certificate issuer: /CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Certificate serial: 018CC5DD1FF2D5A30DF1EE478E0274B5008A
Authority key identifier: B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/WRejmdSG3cOT_jSKgMkoJXHcn8U.roa
Signing time: Mon 01 Jan 2024 16:30:52 +0000
ROA not before: Mon 01 Jan 2024 16:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 176.116.0.0/24 maxlen: 24
94.247.137.0/24 maxlen: 24
146.19.84.0/24 maxlen: 24
185.235.230.0/24 maxlen: 24
31.222.227.0/24 maxlen: 24
2001:678:e30::/48 maxlen: 48
2a11:8481::/32 maxlen: 32
2a0a:2e80::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 07:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:1f:f2:d5:a3:0d:f1:ee:47:8e:02:74:b5:00:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b35002ba088d5bd09c1553dced5b0bf3907ff736
Validity
Not Before: Jan 1 16:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5917a399d486ddc393fe348a80c9282571dc9fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a9:dc:da:fd:fb:5d:6f:31:40:c3:90:34:55:
b8:36:52:fb:31:37:f6:3a:b8:92:04:16:28:17:a4:
54:54:6a:f0:47:b6:7e:c5:d9:d9:7d:a7:ad:6a:32:
b4:aa:ac:8d:ec:90:b2:19:48:29:05:9e:7f:4c:9c:
15:e2:0e:db:67:8e:ad:24:dc:6a:b8:39:fb:ce:ba:
a7:75:97:55:cb:1d:b7:82:c3:b4:ab:b1:7f:9c:08:
cd:8f:ca:fb:b9:00:e0:51:8a:82:38:12:df:70:ed:
75:39:d3:b2:50:36:3a:19:14:40:31:72:21:90:76:
d1:74:24:03:66:50:bb:95:f0:93:cf:ef:11:12:a0:
4d:4b:13:3e:7a:33:5d:97:af:d9:a1:ba:86:44:77:
74:9f:72:1c:e9:fd:c3:97:f7:d3:47:4c:02:eb:26:
60:3b:b6:84:a1:31:2a:16:67:ca:21:fb:12:8b:ed:
e3:45:3b:fb:d3:03:8f:5d:99:58:39:40:19:65:e7:
e3:b8:5a:4f:85:8a:b1:6a:38:81:fd:92:25:8b:83:
71:fc:fc:7e:76:00:c4:a0:6d:bd:49:0d:96:33:33:
f1:2f:53:24:16:48:3a:98:e2:77:7b:de:94:68:d1:
5a:15:28:64:0c:f6:d2:3e:6b:e4:f7:6d:f2:fa:62:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:17:A3:99:D4:86:DD:C3:93:FE:34:8A:80:C9:28:25:71:DC:9F:C5
X509v3 Authority Key Identifier:
keyid:B3:50:02:BA:08:8D:5B:D0:9C:15:53:DC:ED:5B:0B:F3:90:7F:F7:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s1ACugiNW9CcFVPc7VsL85B_9zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/WRejmdSG3cOT_jSKgMkoJXHcn8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fe4b06-fc2e-4bcb-877e-af1ef1d7afb8/1/s1ACugiNW9CcFVPc7VsL85B_9zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.222.227.0/24
94.247.137.0/24
146.19.84.0/24
176.116.0.0/24
185.235.230.0/24
IPv6:
2001:678:e30::/48
2a0a:2e80::/32
2a11:8481::/32
Signature Algorithm: sha256WithRSAEncryption
1d:c3:5d:4e:49:71:e0:34:4d:7b:17:63:42:cb:03:3e:5e:13:
fd:66:28:77:ca:2d:c1:2d:bf:fd:be:1a:21:e4:37:a8:e9:de:
8b:c9:b8:b4:f6:44:3a:09:0c:69:e8:53:ea:b1:f1:39:7e:19:
c0:bb:43:35:dd:c7:c8:89:e1:a5:19:8e:cb:f2:3e:e8:cd:34:
95:f7:99:55:09:ce:a6:60:ca:e7:54:12:ea:9e:41:62:34:0b:
05:a5:ad:2f:85:f6:82:e7:f4:65:47:e1:10:2d:a0:85:26:68:
a4:6e:a5:f9:17:61:f4:54:38:84:b9:14:ae:43:d9:c7:14:88:
7f:03:71:d4:74:f6:ce:e7:f2:ca:dc:5d:76:ab:0a:7e:4a:14:
cb:0c:52:fb:1d:a9:1d:45:77:7d:8f:b2:ea:65:12:7a:83:a6:
dd:d4:0d:88:ac:e7:e7:10:37:c5:22:29:a6:ea:5b:0b:29:f7:
e4:26:7a:50:b2:2b:1b:aa:75:23:53:67:49:0a:03:b6:5f:71:
08:ca:76:92:a4:f6:d7:34:51:85:be:d2:39:ae:72:32:93:e6:
68:72:a6:1b:b6:ac:9b:0c:e3:50:5d:15:60:01:fa:77:d0:d4:
7d:e4:28:2d:d2:af:82:ad:94:c1:b6:68:c5:88:df:39:de:46:
cf:3e:7a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:47 2024 by rpki-client on console-ams.rpki-client.org