Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/wx9m7afUi2g19IaDdDQHOiOhSLs.roa
File: wx9m7afUi2g19IaDdDQHOiOhSLs.roa (raw, json)
Hash identifier: T8R+dgI9UrWHco8xul2s5gSYgOoyX8zuvmKZmPJYQWc=
Subject key identifier: C3:1F:66:ED:A7:D4:8B:68:35:F4:86:83:74:34:07:3A:23:A1:48:BB
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018C8EFE47CF952087AE9616379394064F32
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/wx9m7afUi2g19IaDdDQHOiOhSLs.roa
Signing time: Fri 22 Dec 2023 00:47:58 +0000
ROA not before: Fri 22 Dec 2023 00:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206505
IP address blocks: 178.22.26.0/24 maxlen: 24
213.232.239.0/24 maxlen: 24
193.17.91.0/24 maxlen: 24
79.110.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8e:fe:47:cf:95:20:87:ae:96:16:37:93:94:06:4f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 22 00:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c31f66eda7d48b6835f486837434073a23a148bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1f:e1:93:c5:99:45:14:26:38:db:fd:06:2a:
d3:a7:dc:93:3b:8a:5f:a7:0a:93:40:8a:8c:f5:14:
b6:23:6c:02:16:1e:09:c1:77:ad:b0:b3:44:c6:50:
32:48:e9:84:45:2d:09:10:b4:fa:54:04:03:83:04:
af:35:fa:1e:a9:bc:99:47:20:e3:94:a0:f7:f4:4e:
dd:d7:6f:bd:6c:29:c7:7f:a6:26:04:d0:09:9a:01:
3b:c8:a4:e4:21:fc:1e:33:a9:eb:24:fa:05:60:9f:
b7:c1:2f:84:80:87:30:ec:ba:6b:53:fb:a1:46:01:
75:9d:75:fb:18:be:4b:28:97:04:b9:d1:d2:6d:ee:
dd:9b:98:9c:c0:0b:51:2d:85:15:a7:00:6b:6a:ea:
e8:77:29:a6:fe:74:f5:84:f1:db:63:a9:0f:4d:33:
ba:15:92:8e:7f:c2:e5:aa:5a:0e:76:a4:d0:74:e8:
67:5a:c8:e0:81:df:71:8d:18:03:e0:4d:6c:eb:23:
0b:f9:d0:85:f0:c8:5a:35:e1:e3:e2:1a:d6:b1:be:
94:cd:16:3f:a5:d3:dd:e5:4a:fe:35:e6:07:08:c2:
81:33:ab:e9:12:a8:33:eb:a9:a8:79:e0:b9:f0:ea:
be:c2:b9:6f:0b:51:c4:bc:83:37:66:56:e1:65:e6:
ea:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1F:66:ED:A7:D4:8B:68:35:F4:86:83:74:34:07:3A:23:A1:48:BB
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/wx9m7afUi2g19IaDdDQHOiOhSLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.232.0/24
178.22.26.0/24
193.17.91.0/24
213.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
20:da:4d:fb:ae:6b:47:82:1f:b6:23:21:e4:d3:79:96:a0:84:
01:67:9c:78:7b:17:f4:a8:43:ae:2a:5a:a1:dd:0a:24:3c:e8:
aa:29:f9:1f:15:30:2d:c7:5d:d9:7c:77:60:d2:d0:c5:96:bb:
f4:52:d7:19:d9:f1:26:0c:59:fa:8e:40:46:f1:e6:10:f3:f6:
3c:b7:bf:c9:8b:5c:90:12:14:18:2b:88:b8:7e:d0:65:ea:48:
f1:55:99:4e:ce:ac:0a:7c:ab:2b:f8:87:fa:69:d6:db:93:50:
14:39:49:90:1b:23:7a:1a:2d:52:31:d8:ee:5e:05:39:d3:35:
09:50:30:85:6e:79:ea:78:ab:12:6b:e3:a2:21:a1:48:8c:56:
53:3f:0d:65:79:d8:bd:d4:c5:b3:4b:f3:0d:e0:8e:f1:5e:dc:
af:89:dc:6f:79:56:dc:cd:82:ca:f2:fe:a2:c6:78:1a:9f:ff:
40:6b:c6:88:25:81:37:5d:f0:b2:70:b0:f1:57:38:98:cb:7a:
3d:54:d3:84:1d:f5:e8:ec:4b:47:89:f0:e3:9b:cc:e9:1a:a8:
f9:e7:26:44:20:20:e0:53:c1:d4:58:b3:fc:bf:c3:c0:46:83:
c3:21:3d:6d:1e:33:56:64:6c:20:3c:42:8e:ce:3b:64:45:c8:
b0:b9:5a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org