Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WzONWKp0wbWKVwywDfRF0G356LA.roa
File: WzONWKp0wbWKVwywDfRF0G356LA.roa (raw, json)
Hash identifier: t71gaR6456rzZopxYpRTBX0WufcZFpVLl80di2+XmkY=
Subject key identifier: 5B:33:8D:58:AA:74:C1:B5:8A:57:0C:B0:0D:F4:45:D0:6D:F9:E8:B0
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018CCA28754C7AC6315484443EED3C88542C
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WzONWKp0wbWKVwywDfRF0G356LA.roa
Signing time: Tue 02 Jan 2024 12:31:38 +0000
ROA not before: Tue 02 Jan 2024 12:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 185.243.49.0/24 maxlen: 24
185.124.172.0/22 maxlen: 24
178.239.159.0/24 maxlen: 24
185.26.34.0/23 maxlen: 24
185.124.173.0/24 maxlen: 24
185.124.175.0/24 maxlen: 24
2a00:7040::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 23 Jan 2024 04:04:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:28:75:4c:7a:c6:31:54:84:44:3e:ed:3c:88:54:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Jan 2 12:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b338d58aa74c1b58a570cb00df445d06df9e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:7d:19:6f:ea:6e:57:9f:14:dd:c0:c5:16:
6d:4a:ae:dd:fb:d5:9b:41:9c:bc:ab:ed:e8:c0:d2:
61:a3:6a:92:29:34:24:4c:b7:56:49:d7:cc:c7:17:
2e:04:54:a2:63:40:ab:df:fe:bb:7c:a3:8f:78:32:
3f:c8:e2:ff:4e:a0:78:b8:f2:0b:7c:67:2d:f1:0f:
d2:9d:93:3f:49:b9:49:24:f7:ed:f0:0b:4b:0c:3a:
23:f5:9d:ea:56:49:e9:36:64:7f:90:24:fa:4f:18:
a7:1d:aa:a6:86:10:d3:80:2b:b2:38:5b:f8:6f:54:
a4:90:e8:29:e5:26:c0:83:14:78:58:36:2c:b7:5a:
7b:7d:4f:d4:00:dc:37:56:32:d3:c1:8e:7a:91:66:
43:ea:b9:71:c9:03:1a:9c:0a:d6:f6:6a:77:8c:b2:
0b:2f:fe:a6:52:29:1d:93:db:00:fd:7e:60:2b:ba:
40:37:1e:29:05:86:3a:ec:45:16:17:45:de:ea:27:
a7:c0:9c:ce:5d:26:47:5f:42:bc:54:13:19:16:48:
7f:21:c8:1f:f5:4b:06:4a:99:6b:2e:0e:8d:9b:bd:
18:c7:39:08:75:21:c1:7e:bf:fd:8b:f9:f7:c1:da:
6f:6b:90:f0:36:a5:11:fd:71:24:8b:d3:64:ed:bd:
4a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:33:8D:58:AA:74:C1:B5:8A:57:0C:B0:0D:F4:45:D0:6D:F9:E8:B0
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/WzONWKp0wbWKVwywDfRF0G356LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.159.0/24
185.26.34.0/23
185.124.172.0/22
185.243.49.0/24
IPv6:
2a00:7040::/32
Signature Algorithm: sha256WithRSAEncryption
4f:d4:9c:22:ec:c2:79:d9:6d:ae:37:6a:9c:e8:37:a6:df:7b:
7e:ac:c7:7b:97:55:ec:de:8b:c1:a4:2f:ce:b0:ac:3d:5b:0d:
d4:2b:cd:8d:15:af:8c:64:1e:f6:80:2d:2e:48:4e:f1:1c:49:
99:6a:77:f1:48:05:e0:0c:76:15:a0:be:67:9d:71:b4:8a:dc:
62:2d:5f:bf:29:60:00:05:90:6c:74:a4:5b:74:75:0f:fc:09:
2f:60:2b:03:37:ac:48:be:5e:5e:9e:84:7c:83:f0:a4:aa:82:
86:c0:f1:27:5b:b5:3a:e7:dd:bc:b7:5d:b8:c8:f1:5e:5c:23:
e9:3d:68:2a:22:d6:20:f2:4b:7a:23:c9:4e:ec:7b:20:76:11:
f7:ff:27:4a:a6:37:18:15:2e:d8:b6:23:57:90:9a:be:15:e3:
88:27:32:de:81:5c:d5:f1:c2:d7:09:ff:eb:9b:25:9f:91:7d:
4c:6c:99:b5:d9:1e:3d:14:87:20:ad:86:b7:68:88:e6:27:71:
c1:e9:9c:97:52:26:c9:fe:d6:80:79:ff:32:4b:6a:a7:cd:c2:
3e:92:52:4d:95:50:78:de:be:cb:bc:1d:1c:a5:f6:d4:35:9a:
38:6e:d5:28:00:f1:8b:1b:62:c9:b3:82:a9:6f:03:84:52:0b:
c0:53:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:09 2024 by rpki-client on console-ams.rpki-client.org