Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/WXrS48wy-fhWmcBp9rzgsmRrXjI.roa
File: WXrS48wy-fhWmcBp9rzgsmRrXjI.roa (raw, json)
Hash identifier: RrBSkY9ueFNTfN850fn9PwU+BT7t3EafvurJrFpTKa4=
Subject key identifier: 59:7A:D2:E3:CC:32:F9:F8:56:99:C0:69:F6:BC:E0:B2:64:6B:5E:32
Certificate issuer: /CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Certificate serial: 01856BCA46D1ED9FC5A92187631B8D1702A0
Authority key identifier: 0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/WXrS48wy-fhWmcBp9rzgsmRrXjI.roa
Signing time: Sun 01 Jan 2023 05:24:56 +0000
ROA not before: Sun 01 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204804
IP address blocks: 185.239.145.0/24 maxlen: 24
89.20.48.0/24 maxlen: 24
193.162.28.0/24 maxlen: 24
185.239.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:46:d1:ed:9f:c5:a9:21:87:63:1b:8d:17:02:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e9a5c3283a6a16b4d205a7c564a382641cd8691
Validity
Not Before: Jan 1 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597ad2e3cc32f9f85699c069f6bce0b2646b5e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:e8:79:05:21:08:bc:fb:40:fb:2b:91:72:
8c:a4:43:e2:18:37:31:a6:ce:5c:45:42:3e:ef:4d:
6c:56:32:d5:ed:4f:4f:d8:bc:82:20:ac:91:e7:6a:
2c:54:3d:70:66:5f:3e:ed:df:39:05:1a:01:92:c7:
35:1b:e9:f6:b1:9d:40:90:d7:21:f7:79:e5:99:ed:
88:7f:f5:b3:8d:ab:df:10:90:b0:52:38:de:02:20:
e9:18:20:17:f1:5c:1e:ce:9c:e9:f7:c9:af:b9:e2:
de:98:ed:c0:00:5c:75:3d:c0:dd:cf:c1:57:4d:bd:
53:8c:88:af:35:56:8e:2d:b7:f6:b6:dc:fa:40:8d:
dd:2d:7a:92:f8:1d:48:62:ef:fc:22:de:cf:3b:cf:
44:95:bc:e5:3a:45:68:b6:1c:95:43:b3:7c:fe:23:
af:eb:f1:1d:91:07:4e:34:7c:55:99:27:26:78:90:
5d:ea:c2:44:2e:c1:61:10:64:e5:08:07:ea:0f:a4:
95:5a:79:f1:7b:90:3a:bc:7f:fd:00:fc:f2:b1:9e:
1f:4c:e0:11:f6:c8:24:c5:d4:2a:dc:f2:e4:af:ec:
c9:23:2c:9f:74:1b:09:f1:f3:b2:b0:6a:f7:2e:dd:
6f:27:e8:3e:99:7c:3c:2a:5f:d2:99:4b:17:b1:2f:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:D2:E3:CC:32:F9:F8:56:99:C0:69:F6:BC:E0:B2:64:6B:5E:32
X509v3 Authority Key Identifier:
keyid:0E:9A:5C:32:83:A6:A1:6B:4D:20:5A:7C:56:4A:38:26:41:CD:86:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DppcMoOmoWtNIFp8Vko4JkHNhpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/WXrS48wy-fhWmcBp9rzgsmRrXjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/df6f5f-e1ec-4343-9a21-a5cee11bbae8/1/DppcMoOmoWtNIFp8Vko4JkHNhpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.20.48.0/24
185.239.145.0-185.239.146.255
193.162.28.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d4:9f:03:29:59:75:ce:2e:a4:08:05:73:9d:40:1c:97:b8:
b6:f8:e6:e5:ee:06:74:88:76:d2:c8:e9:c4:16:f8:9a:96:1a:
a1:19:fb:96:2b:22:d7:32:7e:89:8f:62:a5:fd:27:7a:e6:06:
56:89:d3:b8:bd:0e:c5:bf:68:53:81:64:ac:82:1f:a5:2d:a5:
90:cd:5f:b2:b4:68:c1:18:19:6f:49:74:4c:0d:13:a6:be:72:
70:7d:94:39:04:89:2b:b6:bf:ad:50:a4:48:50:bd:19:fa:c3:
df:cb:3d:5a:33:d3:2f:9f:43:c3:42:92:cc:a6:50:7f:9a:03:
6b:df:f5:14:24:e9:64:a4:b9:f6:aa:32:2c:31:a5:a5:b8:f4:
85:e8:09:b6:76:40:58:cd:17:47:54:43:26:34:13:f5:82:61:
c7:6a:01:16:59:a3:b5:91:d7:11:d0:84:5a:a9:cc:41:05:8b:
de:97:e0:74:c7:fc:71:1d:d6:c7:1f:de:89:04:91:69:e5:4d:
87:eb:dc:80:a7:66:93:ac:b9:60:ee:ec:4d:80:70:7d:5c:0c:
8a:5d:c0:a5:53:3e:12:38:27:a4:20:a9:6a:04:33:72:17:49:
7c:2b:ba:4a:3c:0d:ae:d8:24:3b:e2:b2:de:59:de:7a:60:e8:
28:ce:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:18 2024 by rpki-client on console-ams.rpki-client.org