Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/WlkbH5_U30c1L67tsL6CdMy9bLM.roa
File: WlkbH5_U30c1L67tsL6CdMy9bLM.roa (raw, json)
Hash identifier: f++wCuH2EtT5FnWP3jTkCs5uquWnGLlwS3ic/vlTIGE=
Subject key identifier: 5A:59:1B:1F:9F:D4:DF:47:35:2F:AE:ED:B0:BE:82:74:CC:BD:6C:B3
Certificate issuer: /CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Certificate serial: 018CC8DE8FE909B1239289E83DAE632153FE
Authority key identifier: 26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/WlkbH5_U30c1L67tsL6CdMy9bLM.roa
Signing time: Tue 02 Jan 2024 06:31:18 +0000
ROA not before: Tue 02 Jan 2024 06:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208685
IP address blocks: 89.47.1.0/24 maxlen: 24
2a00:1ca8:8a::/48 maxlen: 48
2a03:3f40:35::/48 maxlen: 48
2a03:3f40:89::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Feb 2024 09:13:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:8f:e9:09:b1:23:92:89:e8:3d:ae:63:21:53:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2631166de785a3531bdc8361f1190a8369a7ed6a
Validity
Not Before: Jan 2 06:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a591b1f9fd4df47352faeedb0be8274ccbd6cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9d:60:a8:aa:1a:d3:88:6b:de:53:1b:e0:05:
ee:ce:78:6f:12:d9:6d:5e:45:c4:d7:3f:24:66:dd:
d7:3d:48:d9:19:d0:95:6b:49:5b:f3:3d:74:27:2f:
3d:10:9b:c1:89:f6:62:80:46:f8:d9:17:9b:4a:e7:
cc:8b:06:83:53:39:5d:8a:8a:75:31:ae:80:fc:23:
fb:a7:16:f2:a7:d6:2b:d1:14:3e:58:74:13:54:fd:
2a:76:9e:03:4a:05:a2:50:a2:7d:05:d1:a9:f2:ff:
b7:4c:bf:13:0a:56:a3:63:7e:8e:97:0e:2c:bb:a0:
58:9f:29:3b:61:72:12:6b:23:15:fb:03:bb:d1:ab:
16:5f:c2:8f:70:b4:9b:b1:cc:6d:f8:dc:82:a0:ca:
8e:63:e5:bf:d8:80:96:69:3c:10:b4:9a:15:39:48:
37:45:88:12:8d:b2:55:22:12:8b:94:b8:d9:88:c1:
6d:f3:64:eb:35:f8:72:9e:1e:09:ef:30:7e:3d:fe:
5f:7c:52:bc:1e:0f:c0:50:a1:c6:66:6c:11:6c:c2:
df:cf:1f:20:60:59:92:96:6c:91:91:3c:a4:dd:b3:
22:0c:e4:e2:9b:b3:ea:3c:67:01:c6:b9:1d:d8:13:
38:d9:b6:c6:92:42:0d:84:f6:eb:a8:37:63:ec:96:
29:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:59:1B:1F:9F:D4:DF:47:35:2F:AE:ED:B0:BE:82:74:CC:BD:6C:B3
X509v3 Authority Key Identifier:
keyid:26:31:16:6D:E7:85:A3:53:1B:DC:83:61:F1:19:0A:83:69:A7:ED:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/WlkbH5_U30c1L67tsL6CdMy9bLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/fb0157-6746-4b00-8f8e-b89a26199976/1/JjEWbeeFo1Mb3INh8RkKg2mn7Wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.1.0/24
IPv6:
2a00:1ca8:8a::/48
2a03:3f40:35::/48
2a03:3f40:89::/48
Signature Algorithm: sha256WithRSAEncryption
39:bf:c5:f8:0b:a8:d6:a5:14:d3:7e:87:5c:ed:a9:e3:fc:f2:
5c:81:16:33:87:84:8f:cc:5e:3a:30:49:46:78:aa:5e:51:98:
91:2c:49:f5:e2:66:52:62:50:45:3c:b8:1b:a8:1d:18:a6:f2:
f5:46:22:56:04:49:d5:0b:03:db:12:53:89:0e:90:f5:de:b7:
fe:03:71:64:79:90:5c:9d:1c:0b:50:2f:23:d8:ba:9a:30:2e:
5b:92:14:ce:82:59:7c:1b:c5:1f:97:bb:b0:1f:51:53:89:75:
33:97:95:a4:a4:fd:0b:70:50:87:bc:69:a5:3a:14:9e:d9:64:
ce:68:96:d9:ab:8b:4b:17:dd:2d:fa:9d:f4:fc:6b:c8:37:0c:
0d:91:03:10:9c:ae:f0:4c:7f:54:d0:5a:d5:93:22:5b:ee:7d:
35:67:03:d6:58:4b:4d:61:4f:83:66:6f:c1:7b:d5:2f:40:b9:
94:39:aa:c8:dc:6b:ba:cc:91:57:15:aa:ba:af:9a:75:dd:f0:
41:a3:76:b5:f5:a0:3d:93:27:7d:77:5b:10:7e:21:1f:a5:57:
28:98:d5:6e:de:1b:ba:71:fe:6a:ba:44:c2:91:fd:f2:34:40:
8a:47:84:fe:19:cd:e4:64:17:a4:fd:61:34:91:12:74:9b:73:
36:e3:10:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:32:38 2025 by rpki-client