Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/WUgcmM91cFFw6At18z19mqcZhHo.roa
File: WUgcmM91cFFw6At18z19mqcZhHo.roa (raw, json)
Hash identifier: HmBm1sdF1TzFYEkaZMPGpZNwZot5se6AdmnCHeWryHE=
Subject key identifier: 59:48:1C:98:CF:75:70:51:70:E8:0B:75:F3:3D:7D:9A:A7:19:84:7A
Certificate issuer: /CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Certificate serial: 018DE6345F8F9EECF9DBCF03F3956DA638F5
Authority key identifier: 88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/WUgcmM91cFFw6At18z19mqcZhHo.roa
Signing time: Mon 26 Feb 2024 16:16:48 +0000
ROA not before: Mon 26 Feb 2024 16:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50810
IP address blocks: 37.98.64.0/18 maxlen: 22
37.98.114.0/24 maxlen: 24
62.102.128.0/20 maxlen: 22
93.117.176.0/20 maxlen: 22
93.119.208.0/20 maxlen: 22
178.131.0.0/16 maxlen: 22
178.131.0.0/18 maxlen: 22
178.131.4.0/24 maxlen: 24
178.131.64.0/18 maxlen: 22
178.131.128.0/18 maxlen: 22
188.211.0.0/20 maxlen: 20
188.212.240.0/21 maxlen: 21
188.213.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 28 Feb 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e6:34:5f:8f:9e:ec:f9:db:cf:03:f3:95:6d:a6:38:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8847aa91b06d8c6b87284f3f45a21dc281f7ba55
Validity
Not Before: Feb 26 16:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59481c98cf75705170e80b75f33d7d9aa719847a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5d:a5:c8:26:d9:01:be:32:4f:3b:a4:d0:13:
3d:55:25:e7:d1:0c:cb:07:01:63:0e:26:c2:1f:7c:
b7:b3:20:8d:3d:14:05:8b:2f:f7:b9:e9:74:cc:53:
74:1e:dd:a5:20:4c:ce:a5:0e:8b:eb:ad:85:cc:88:
bb:50:84:a7:ea:c9:87:3c:1d:4d:a5:d5:a4:40:6b:
e9:38:68:bd:da:22:54:85:55:f4:8b:c7:7d:ec:80:
04:ff:e9:b7:e3:78:1d:69:9f:2a:2b:1e:03:cb:06:
3f:ae:f8:c6:57:53:d4:03:e5:af:8e:e2:65:19:9e:
9f:ae:51:34:64:6a:3d:b4:49:4b:45:cf:2d:fc:19:
c4:59:fa:f7:59:df:d2:52:e8:2c:53:96:7e:32:76:
8b:7a:0e:31:ab:fb:62:6e:d5:08:e1:a2:1a:b2:7e:
4f:1e:9e:74:2d:cf:f3:96:c5:ac:e3:43:92:af:0c:
3b:8b:e2:99:4b:99:59:dd:30:78:c1:e8:87:8b:14:
22:4c:33:3f:3a:2b:a5:ae:2a:af:27:9b:32:1d:e8:
ca:e9:24:f9:0b:7b:25:7a:05:79:c6:f6:92:d9:5f:
f3:6b:66:47:d8:dd:95:b3:a2:90:17:8f:64:5e:4d:
e7:e6:de:fa:9f:4f:56:93:30:7b:01:fd:f8:2c:3e:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:1C:98:CF:75:70:51:70:E8:0B:75:F3:3D:7D:9A:A7:19:84:7A
X509v3 Authority Key Identifier:
keyid:88:47:AA:91:B0:6D:8C:6B:87:28:4F:3F:45:A2:1D:C2:81:F7:BA:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEeqkbBtjGuHKE8_RaIdwoH3ulU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/WUgcmM91cFFw6At18z19mqcZhHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/fdf296-75e5-4635-9546-cea75d0cd671/1/iEeqkbBtjGuHKE8_RaIdwoH3ulU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.98.64.0/18
62.102.128.0/20
93.117.176.0/20
93.119.208.0/20
178.131.0.0/16
188.211.0.0/20
188.212.240.0/21
188.213.192.0/22
Signature Algorithm: sha256WithRSAEncryption
38:3f:64:bc:77:f6:11:5d:68:a0:3f:3c:ff:e1:b5:30:d8:37:
17:c2:f4:9c:b8:91:9d:71:4a:6d:4c:e8:a5:63:56:4f:5c:7c:
28:4f:b4:c0:bd:76:9b:bd:84:5a:9b:15:a8:df:86:8d:13:dc:
4c:e9:53:52:3e:7e:d6:85:9c:11:49:d7:db:65:58:22:ce:70:
59:87:88:4e:58:f1:1e:97:b7:fb:26:66:1d:cf:ca:ae:3f:fa:
9a:c5:f9:1e:97:02:22:50:7d:d3:3c:6f:f9:40:62:a0:3f:04:
39:cc:f7:70:08:28:ee:bb:f9:43:fb:8e:d2:85:62:c6:c0:75:
36:85:37:f0:c1:7a:1f:04:57:7d:b1:9a:e7:d3:ad:6f:aa:0f:
5d:bd:34:76:43:58:ad:19:9a:6e:74:3f:d8:94:ad:54:4f:94:
7b:30:a6:26:b9:b3:32:93:5f:22:e5:03:65:1e:7d:9c:ec:d3:
c0:95:c7:d6:59:7d:c3:80:07:47:61:42:0d:29:81:3f:03:59:
02:10:06:73:d9:30:36:b2:e7:f3:f3:c2:8a:0c:98:67:01:74:
29:8e:d0:c5:b8:ab:b4:7e:ee:73:40:53:3e:ce:ba:30:ff:30:
fb:98:5d:75:09:e7:ac:15:88:54:5b:8b:eb:fd:b7:2f:bd:e8:
92:17:a5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 17:20:17 2024 by rpki-client on console-ams.rpki-client.org