Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/w6kO7pgI3i3fS3gNXIAfVcTtGkg.roa
File: w6kO7pgI3i3fS3gNXIAfVcTtGkg.roa (raw, json)
Hash identifier: pQkdtX2mTJcbT5GDVfUboKaN4zyx9cjaRs66lPdsChU=
Subject key identifier: C3:A9:0E:EE:98:08:DE:2D:DF:4B:78:0D:5C:80:1F:55:C4:ED:1A:48
Certificate issuer: /CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Certificate serial: 018A84B1F731F92DC35E826072D5A02B31E1
Authority key identifier: 5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/w6kO7pgI3i3fS3gNXIAfVcTtGkg.roa
Signing time: Mon 11 Sep 2023 14:42:50 +0000
ROA not before: Mon 11 Sep 2023 14:42:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12360
IP address blocks: 217.17.16.0/20 maxlen: 24
192.54.68.0/22 maxlen: 24
192.54.67.0/24 maxlen: 24
93.119.240.0/20 maxlen: 24
82.115.96.0/19 maxlen: 24
212.7.160.0/19 maxlen: 24
185.39.108.0/22 maxlen: 24
79.171.176.0/21 maxlen: 24
178.248.216.0/21 maxlen: 24
5.57.192.0/21 maxlen: 24
77.236.104.0/21 maxlen: 24
185.5.168.0/22 maxlen: 24
2a01:5580::/32 maxlen: 48
2a02:1628::/32 maxlen: 56
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:84:b1:f7:31:f9:2d:c3:5e:82:60:72:d5:a0:2b:31:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a756994bb292e49ecc6337b7f95d69ee2af61e1
Validity
Not Before: Sep 11 14:42:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3a90eee9808de2ddf4b780d5c801f55c4ed1a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d2:b7:1c:54:34:b9:7e:90:49:c8:ea:a9:73:
ad:7f:f1:36:f2:68:5c:58:e7:2d:5f:5f:b5:0e:7e:
5d:0f:4f:f8:99:ce:f4:c5:ff:35:74:74:30:7d:24:
b8:1e:7c:b9:d7:2b:a0:77:68:bf:c9:d9:97:d6:31:
40:ca:79:e4:24:cc:75:86:7c:ce:eb:96:1f:3f:9f:
39:c4:3c:d3:01:80:08:7c:a0:3b:9f:a1:27:6d:6a:
aa:15:67:85:4f:1a:1a:00:a7:d3:94:c4:d5:ae:4d:
e4:6d:2c:2d:71:9d:df:48:c7:0d:df:9c:ea:d1:a4:
9a:c0:85:f3:a6:28:18:39:99:8c:86:52:8d:8e:ee:
26:24:19:16:26:2a:78:6c:00:4c:fb:f8:f7:a6:71:
39:1d:24:34:99:bd:60:16:46:86:87:84:55:73:f6:
f5:48:94:9a:fb:04:52:54:5c:fd:82:88:c3:0a:47:
35:3e:fb:4f:70:1f:c0:28:71:f1:52:e0:fa:a1:6f:
68:6a:34:be:e3:da:6e:22:ff:21:46:00:d4:8f:fa:
53:c8:26:ee:0f:94:6c:76:0d:e8:c2:59:5a:53:c8:
4a:3a:c3:b0:e8:4f:91:15:6d:5a:66:28:1f:88:8c:
33:ef:95:ab:4e:a3:2b:a4:00:83:32:48:91:b6:c1:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A9:0E:EE:98:08:DE:2D:DF:4B:78:0D:5C:80:1F:55:C4:ED:1A:48
X509v3 Authority Key Identifier:
keyid:5A:75:69:94:BB:29:2E:49:EC:C6:33:7B:7F:95:D6:9E:E2:AF:61:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WnVplLspLknsxjN7f5XWnuKvYeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/w6kO7pgI3i3fS3gNXIAfVcTtGkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83b07f-1d22-4ae0-a2de-4e0aa42a15a8/1/WnVplLspLknsxjN7f5XWnuKvYeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.192.0/21
77.236.104.0/21
79.171.176.0/21
82.115.96.0/19
93.119.240.0/20
178.248.216.0/21
185.5.168.0/22
185.39.108.0/22
192.54.67.0-192.54.71.255
212.7.160.0/19
217.17.16.0/20
IPv6:
2a01:5580::/32
2a02:1628::/32
Signature Algorithm: sha256WithRSAEncryption
39:3a:1f:b4:47:87:fa:1c:22:d0:a0:6f:19:c5:c5:78:36:95:
74:2f:b7:80:e5:1c:f4:75:39:bb:dc:31:c0:89:94:5b:37:ce:
5d:a7:0a:f4:6f:0a:13:42:bf:88:23:88:57:17:a1:76:af:bc:
c5:98:9f:a6:cf:7c:a0:d8:12:73:ff:92:92:91:1b:3f:2f:d2:
ed:11:28:5b:ff:34:af:8b:9f:2c:9b:10:75:7e:69:74:c6:37:
ef:fb:fd:c7:3b:f7:bf:a9:1b:d9:4a:ac:09:ad:51:6d:81:b9:
35:8c:b4:dc:75:26:cf:e7:0e:32:06:81:de:02:68:59:b2:80:
83:de:d7:86:1e:c1:c7:51:98:a5:cf:fd:f3:38:64:96:d5:e0:
7b:1d:7e:2a:a6:b5:ce:a3:11:5d:44:a7:0c:47:67:c0:6e:b2:
83:dc:5c:a4:60:d0:5d:2b:7d:b7:12:ac:3d:77:76:f9:de:67:
a1:25:22:be:6c:99:86:07:ff:35:3d:1e:22:b9:9d:c9:2f:d3:
06:6a:f5:b0:e8:51:8c:1a:16:70:9b:c9:ac:51:d3:e0:3c:ff:
b7:01:60:82:e0:ab:e9:66:ac:c0:61:08:e7:9f:68:a9:be:f0:
4a:de:38:d1:ac:f4:92:87:d9:48:d0:66:95:e0:f0:cc:bd:7e:
83:65:ac:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:28 2024 by rpki-client on console-fra.rpki-client.org