Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wjwHlU9xF8mytA8uN8ttbDfB_jw.roa
File: wjwHlU9xF8mytA8uN8ttbDfB_jw.roa (raw, json)
Hash identifier: 2z8HReAMH8mNr/EIzDKybaT5E7H0bPAI8MJDuQ/oWwc=
Subject key identifier: C2:3C:07:95:4F:71:17:C9:B2:B4:0F:2E:37:CB:6D:6C:37:C1:FE:3C
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018E9DCE9512745756A07F8EBE0C3121A79C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wjwHlU9xF8mytA8uN8ttbDfB_jw.roa
Signing time: Tue 02 Apr 2024 07:55:45 +0000
ROA not before: Tue 02 Apr 2024 07:55:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 81.168.123.0/24 maxlen: 24
82.153.10.0/24 maxlen: 24
89.213.46.0/23 maxlen: 24
109.176.28.0/24 maxlen: 24
109.176.212.0/23 maxlen: 24
109.176.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 07:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9d:ce:95:12:74:57:56:a0:7f:8e:be:0c:31:21:a7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 2 07:55:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23c07954f7117c9b2b40f2e37cb6d6c37c1fe3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3b:b0:9b:39:21:6b:b7:fc:d3:59:f9:b0:1b:
96:35:ef:76:94:74:1c:be:cd:77:e3:60:f7:ae:5e:
4f:2d:16:fd:74:c1:64:45:3b:85:5d:90:27:83:7c:
51:65:f0:91:88:0d:1c:89:f9:86:63:31:6f:74:fc:
fb:e5:75:1c:1b:89:1b:73:e9:1a:27:ef:47:01:fd:
3a:a6:39:51:a9:6f:ce:b1:8f:75:59:bb:7d:e1:e0:
d0:fd:6d:2d:80:6f:cc:e0:70:05:fa:75:31:ca:e5:
f5:d4:26:42:7f:50:61:dc:07:a3:53:cb:34:19:af:
04:cb:c8:bc:6c:58:c8:7b:8f:70:d4:43:c9:ed:38:
6b:bc:65:1c:f1:03:95:5a:fe:3a:60:d4:ee:ff:95:
23:2b:69:db:82:f2:bf:38:c6:9d:e3:81:ab:34:26:
ef:ca:d8:c9:ac:09:f4:0b:9d:c9:b6:3a:a9:7a:61:
c2:50:bc:be:ec:04:5a:ec:8a:c5:03:d4:08:95:96:
df:68:37:59:6d:32:eb:3c:ce:6f:d1:60:6f:72:b8:
9e:75:9b:53:a6:f0:10:a2:d0:87:8f:41:1f:a9:74:
e6:df:6d:0d:4a:92:4b:70:8a:b4:56:94:61:68:b7:
a1:5e:d6:06:ad:df:f7:f3:23:99:5a:2c:42:0a:9f:
d4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:07:95:4F:71:17:C9:B2:B4:0F:2E:37:CB:6D:6C:37:C1:FE:3C
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wjwHlU9xF8mytA8uN8ttbDfB_jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.123.0/24
82.153.10.0/24
89.213.46.0/23
109.176.28.0/24
109.176.212.0/22
Signature Algorithm: sha256WithRSAEncryption
09:c5:28:03:32:1b:15:be:40:b6:63:07:e1:b3:47:5a:29:e0:
e0:50:df:16:8c:15:c6:d1:8b:ae:1a:e0:d0:e0:66:b0:ef:c0:
ac:17:9e:84:95:d2:34:a9:81:0c:47:88:e4:7d:12:57:81:84:
bf:06:63:14:96:62:b8:e2:f0:1d:c8:2a:3d:ae:bb:76:b0:92:
a5:d0:b9:00:ef:c1:2b:c8:a4:30:53:47:ad:ce:36:97:5f:78:
98:0b:e4:14:1f:42:85:17:da:a4:0b:1b:79:f4:d3:1a:c3:ab:
dc:b2:82:b3:a3:c2:47:7f:50:1c:34:e9:f6:da:a8:ea:3c:10:
62:6e:25:d8:00:ac:5a:a1:9a:a7:ba:52:66:4b:a4:4f:ee:33:
f3:3a:4c:2c:d0:dc:40:68:1d:c6:dc:33:85:10:50:07:88:1c:
aa:98:ff:12:c5:2d:ec:a9:48:f0:75:cd:d3:af:bc:0e:31:5e:
f1:d3:af:f1:1c:70:ab:42:06:fb:f6:1f:7d:08:f4:fd:c1:13:
f7:2d:d2:79:f0:a3:9e:a7:b3:0e:3e:bb:59:9a:1d:fa:18:08:
2b:12:76:2d:3c:6a:9b:0e:f4:ab:b1:77:c5:e9:f1:71:10:b4:
09:25:01:1a:70:62:af:4e:c4:1a:7c:1a:39:07:12:5e:a4:e0:
da:da:1c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:18 2024 by rpki-client on console-fra.rpki-client.org