Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WULn7xIXt4ScmBjFFE56Ws_OUHo.roa
File: WULn7xIXt4ScmBjFFE56Ws_OUHo.roa (raw, json)
Hash identifier: bnIRIhP9McolqDIrQGd/rkglP8SZZ5JSafHMNJGCIhs=
Subject key identifier: 59:42:E7:EF:12:17:B7:84:9C:98:18:C5:14:4E:7A:5A:CF:CE:50:7A
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018EA54E719F573D527B2DBE4F3B26A25FD6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WULn7xIXt4ScmBjFFE56Ws_OUHo.roa
Signing time: Wed 03 Apr 2024 18:52:45 +0000
ROA not before: Wed 03 Apr 2024 18:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 82.152.176.0/23 maxlen: 23
82.153.136.0/22 maxlen: 22
89.213.133.0/24 maxlen: 24
89.213.148.0/22 maxlen: 24
89.213.152.0/22 maxlen: 24
89.213.156.0/22 maxlen: 24
89.213.172.0/22 maxlen: 24
89.213.180.0/24 maxlen: 24
109.176.245.0/24 maxlen: 24
185.49.126.0/23 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Apr 2024 07:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a5:4e:71:9f:57:3d:52:7b:2d:be:4f:3b:26:a2:5f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 3 18:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5942e7ef1217b7849c9818c5144e7a5acfce507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a4:6f:e5:8f:37:8c:f3:03:ba:61:51:e0:9d:
f5:d6:a1:d6:f1:84:a1:76:63:94:53:20:3d:b9:e4:
ae:d8:76:0a:c4:16:6b:b0:ad:fd:62:6b:09:94:d0:
4e:8d:d6:2b:31:a1:6f:c2:94:3c:57:f9:d8:fd:81:
e4:5c:aa:0e:a7:47:8c:7f:e8:be:d5:90:9d:50:7f:
41:04:b7:ae:fa:c7:b8:26:b8:e3:56:0b:b8:29:cb:
0b:e2:49:25:a1:58:28:36:d2:19:ee:00:30:12:78:
27:13:d0:65:a1:16:27:3d:64:69:8d:f4:71:bd:17:
48:73:24:a5:ee:23:14:8c:f3:b4:b1:a4:25:a4:0d:
3b:02:4e:1b:65:46:d5:79:43:51:7d:5b:45:48:32:
20:49:4a:7b:6c:f1:70:fb:f6:95:ef:c0:70:cc:79:
1e:c2:84:22:9f:85:22:73:60:42:34:7f:d8:e6:7c:
07:64:a9:5e:34:52:7a:bf:d5:39:65:e3:4f:a9:fa:
fd:e2:1f:47:93:40:3c:c8:ac:91:d5:8d:44:ba:38:
74:82:4b:98:d8:04:b0:7e:e8:2b:66:7f:20:b5:55:
16:83:db:8e:c2:61:e2:44:27:f2:18:a1:60:5e:3f:
9b:26:97:b2:09:51:31:cb:26:9c:d0:ea:1a:50:9b:
ef:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:42:E7:EF:12:17:B7:84:9C:98:18:C5:14:4E:7A:5A:CF:CE:50:7A
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/WULn7xIXt4ScmBjFFE56Ws_OUHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.152.176.0/23
82.153.136.0/22
89.213.133.0/24
89.213.148.0-89.213.159.255
89.213.172.0/22
89.213.180.0/24
109.176.245.0/24
185.49.126.0/23
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e2:34:37:2f:b7:38:38:a4:bf:d6:bc:03:4b:39:cc:e4:3b:
0d:fa:6b:0b:0c:28:56:dc:01:1d:c0:3d:8d:9e:07:3c:e3:08:
d5:69:c0:39:38:cf:d5:ee:b7:16:19:6d:2c:55:ec:db:a4:c8:
06:d2:0d:ff:af:a1:e7:41:3f:81:d6:a1:30:78:7c:63:5c:1a:
8b:a4:6d:5e:62:23:77:10:29:25:60:71:51:06:4d:e5:58:ed:
21:97:c0:63:ca:08:dc:4e:e0:75:41:cb:ad:cf:dd:0c:76:a9:
09:57:e4:a2:65:3f:c9:7c:5f:e0:a6:85:7a:ba:65:57:6c:1a:
be:8b:80:c4:18:10:d3:07:73:7a:f4:74:9d:ef:97:8b:1e:51:
78:0d:c7:e7:b7:48:68:71:7a:0a:3a:14:5c:11:d8:25:19:97:
ca:c5:57:9d:b9:bf:a6:f1:2d:7b:d1:b8:40:e7:48:ed:48:5d:
23:c7:33:36:23:e2:be:fb:4a:65:b0:3e:7d:60:23:41:f0:3a:
86:05:53:5e:49:a9:10:14:7d:15:74:cd:9a:5a:b7:1d:db:54:
94:65:02:3c:02:64:71:65:c8:41:9f:58:06:46:5c:d1:98:bc:
0b:56:62:27:96:54:c0:0d:25:23:3e:5d:13:70:d0:00:19:fb:
95:f2:d6:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:16 2024 by rpki-client on console-fra.rpki-client.org