Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/WtWxxaE_B7olD1_pJ2HrgqZF2ZY.roa
File: WtWxxaE_B7olD1_pJ2HrgqZF2ZY.roa (raw, json)
Hash identifier: qhV1C9/STEYEIkmKrg9igpqzli70fHk67LHD+A9r7qY=
Subject key identifier: 5A:D5:B1:C5:A1:3F:07:BA:25:0F:5F:E9:27:61:EB:82:A6:45:D9:96
Certificate issuer: /CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Certificate serial: 018BB3D6C0672ADC1A1D22543B37B6C7CC19
Authority key identifier: 6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/WtWxxaE_B7olD1_pJ2HrgqZF2ZY.roa
Signing time: Thu 09 Nov 2023 11:27:57 +0000
ROA not before: Thu 09 Nov 2023 11:27:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3262
IP address blocks: 185.192.183.0/24 maxlen: 24
185.224.92.0/24 maxlen: 24
185.194.24.0/24 maxlen: 24
185.219.217.0/24 maxlen: 24
185.219.216.0/24 maxlen: 24
185.219.219.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b3:d6:c0:67:2a:dc:1a:1d:22:54:3b:37:b6:c7:cc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba3186597742a926cd26504e1ed76f8543fdb26
Validity
Not Before: Nov 9 11:27:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ad5b1c5a13f07ba250f5fe92761eb82a645d996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:ea:f3:9d:2c:67:be:40:7c:52:5d:0b:23:
ae:8c:61:69:b3:41:4f:58:26:a1:fa:e8:f2:3d:1e:
ff:ab:ea:6c:43:56:bf:ef:20:ee:f6:f6:63:74:ac:
2e:e6:78:9b:c1:53:e1:19:8a:6f:1d:cc:7b:47:63:
43:bc:5a:6b:97:cc:84:b3:08:77:be:da:95:b1:5d:
13:17:47:ba:c9:7b:7d:2f:28:22:73:9e:77:e1:8e:
39:c1:48:cb:2c:52:50:14:47:f5:5e:89:28:0d:74:
98:8b:bd:7b:7e:2d:e5:12:19:6d:60:7f:39:5d:d1:
8f:51:97:67:58:02:98:92:b7:de:ac:10:f5:c0:d9:
99:f4:07:56:f0:bd:ad:c7:a8:c1:f7:ce:65:a3:23:
e8:51:aa:fe:f5:2a:86:df:46:87:23:62:86:af:ce:
8f:e1:0f:51:f2:e2:64:3c:b0:e0:3d:a7:96:31:89:
e3:b7:1c:74:19:7f:5e:8b:86:f2:58:9a:a3:91:a9:
02:b4:46:98:07:58:a7:c5:5c:65:7b:31:98:5a:e5:
c9:98:58:9c:78:3c:d9:ee:bc:3e:14:e7:7e:5b:66:
1e:c1:52:ae:ec:d4:9a:9c:c8:0a:26:d6:ec:c5:30:
c4:4f:0b:23:f2:f9:29:2e:32:ec:96:45:03:5e:a9:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D5:B1:C5:A1:3F:07:BA:25:0F:5F:E9:27:61:EB:82:A6:45:D9:96
X509v3 Authority Key Identifier:
keyid:6B:A3:18:65:97:74:2A:92:6C:D2:65:04:E1:ED:76:F8:54:3F:DB:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6MYZZd0KpJs0mUE4e12-FQ_2yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/WtWxxaE_B7olD1_pJ2HrgqZF2ZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d5910-9f5e-446c-8d3c-bc007f2dac24/1/a6MYZZd0KpJs0mUE4e12-FQ_2yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.183.0/24
185.194.24.0/24
185.219.216.0/23
185.219.219.0/24
185.224.92.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:a2:92:26:c7:c1:23:c2:1e:41:c9:7f:5c:c6:12:18:ee:02:
ae:e9:c5:e1:fe:53:3d:35:d5:22:69:ec:b7:26:b5:65:a1:c5:
9c:61:11:f1:af:c4:b0:01:bd:da:6c:02:db:fb:e6:88:93:ff:
46:dd:3d:7a:ef:53:5f:06:9b:b9:a7:0e:bb:42:c8:a6:47:03:
de:41:50:9e:94:c6:bf:61:8a:06:24:51:fe:36:93:6e:da:12:
8c:07:38:c9:da:56:b7:c0:ef:8e:54:39:14:8e:f1:8b:c5:18:
92:ab:46:a4:c5:71:d2:66:e2:d2:54:2e:ad:8c:67:c0:05:c1:
4f:c5:db:6c:ec:2f:48:ff:1b:bc:34:20:b5:bd:42:c7:09:bc:
ca:9d:61:ca:72:5b:77:e5:6b:02:01:d7:60:ae:15:da:6c:9c:
94:9b:f6:3f:6f:0e:04:df:58:ae:89:c3:74:0d:88:3f:f3:ba:
ea:e3:7d:56:fa:78:b0:d2:fb:0a:f9:cb:15:4a:15:3e:30:04:
97:46:28:f2:7c:91:c7:21:49:7d:47:49:f1:29:42:99:61:fa:
92:c6:b0:ef:3b:c4:0f:d8:cb:e2:c6:8e:59:d1:48:83:88:89:
b2:08:67:25:e2:e5:f7:e2:ac:05:b8:34:13:ba:d5:d4:5f:1e:
8c:de:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:50 2024 by rpki-client on console-ams.rpki-client.org