Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/WYc_E1Wp1PGJsD8pz8jMwpEDBYI.roa
File: WYc_E1Wp1PGJsD8pz8jMwpEDBYI.roa (raw, json)
Hash identifier: yHJl/rG0NNaPL7WvYW2Ymld1xOZ13Qsqs3BKpelwnvg=
Subject key identifier: 59:87:3F:13:55:A9:D4:F1:89:B0:3F:29:CF:C8:CC:C2:91:03:05:82
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 018679665EB8247991996A1223161A194E1D
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/WYc_E1Wp1PGJsD8pz8jMwpEDBYI.roa
Signing time: Wed 22 Feb 2023 13:53:17 +0000
ROA not before: Wed 22 Feb 2023 13:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210538
IP address blocks: 193.164.4.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
93.177.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 14:17:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:66:5e:b8:24:79:91:99:6a:12:23:16:1a:19:4e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Feb 22 13:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59873f1355a9d4f189b03f29cfc8ccc291030582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:9f:fb:a3:e0:0c:7b:0e:3d:72:a4:b4:92:
ee:f3:5f:d5:e9:04:a9:1d:78:9c:56:29:c7:80:a5:
87:5e:f8:70:81:b9:d6:50:de:93:c7:45:99:3c:ca:
9a:d0:f1:f2:09:05:4e:2e:a6:47:97:a8:2d:57:b6:
4a:0f:69:35:44:b4:85:20:7f:1c:55:f0:a6:98:d0:
be:95:8c:a6:30:db:0c:31:a1:8f:31:d7:30:12:f0:
35:e1:5e:52:51:8c:41:bd:9f:78:f3:98:01:4f:f8:
1b:4c:11:7b:7a:f7:ad:89:0f:69:a5:8f:8b:f9:6f:
94:e8:57:7b:36:ac:de:15:87:18:ac:f0:a3:b6:7a:
3a:04:70:c7:32:75:4c:d8:0a:89:7a:c1:a5:6c:4a:
33:fa:c4:e6:d1:5f:a5:8e:2a:f1:94:dd:9f:e1:3b:
2f:04:33:1f:9d:24:1c:46:8e:65:0d:79:c0:e5:ab:
9c:a6:19:ed:e0:9b:41:fb:d5:a7:4b:27:96:48:eb:
e3:4d:58:f8:d0:7e:ac:c7:e6:0c:46:67:b1:a7:17:
d9:e5:f1:aa:97:89:68:32:a6:2f:eb:2e:de:59:e5:
85:37:80:c9:0b:9f:ed:c7:f9:54:28:97:ec:c3:95:
5b:dc:0f:07:80:58:78:0a:87:5d:2d:48:7f:89:c3:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:3F:13:55:A9:D4:F1:89:B0:3F:29:CF:C8:CC:C2:91:03:05:82
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/WYc_E1Wp1PGJsD8pz8jMwpEDBYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:db:a1:5b:5f:aa:1a:da:4e:a3:aa:a2:15:8c:d3:0f:77:61:
2d:ff:f6:5c:01:a6:54:15:e0:72:e8:71:7a:19:6d:ea:72:3c:
be:10:63:df:86:e2:4e:5f:19:de:9d:76:7e:3e:9e:86:da:b6:
e4:b2:77:61:32:85:9e:54:19:fe:00:9b:84:0d:ca:67:0f:a9:
49:ca:1c:8d:9b:a5:d0:48:bb:85:29:27:b7:66:5b:39:32:74:
33:fc:55:9a:1e:4f:43:6c:37:5d:98:eb:5a:3b:16:bc:7a:ac:
ab:ef:39:f6:ac:e2:47:0b:05:dd:93:40:86:f9:13:9e:33:99:
b0:1c:f1:02:32:ba:d1:a7:62:36:e1:87:cc:d6:c0:64:02:bf:
de:fe:d0:80:fb:c9:54:39:f0:f8:66:8b:80:df:79:c5:48:e7:
b9:cf:ff:20:fd:22:cb:3f:cc:a1:cc:eb:33:eb:8d:6c:87:7c:
35:27:59:37:ca:64:6e:5b:06:fa:98:17:01:a9:95:21:24:f9:
02:84:24:77:01:39:33:86:27:49:7c:43:b1:fb:17:22:26:20:
f2:35:40:13:ce:37:aa:b1:bb:4a:f2:6d:16:45:55:1f:e2:db:
24:9e:0a:5d:c6:24:ae:51:a9:b5:28:50:91:10:0c:1f:0d:ec:
82:3b:1b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-fra.rpki-client.org