Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/WBO63Y12LHjihw9H22zh6ZUpyjg.roa
File: WBO63Y12LHjihw9H22zh6ZUpyjg.roa (raw, json)
Hash identifier: m89OR0Mepgv5PALzAJJmUOKhoEA7GAZdys4VF4XtLBE=
Subject key identifier: 58:13:BA:DD:8D:76:2C:78:E2:87:0F:47:DB:6C:E1:E9:95:29:CA:38
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41D9E65407B171078EE7120CFB3FB3
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/WBO63Y12LHjihw9H22zh6ZUpyjg.roa
Signing time: Sun 01 Jan 2023 16:54:47 +0000
ROA not before: Sun 01 Jan 2023 16:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44220
IP address blocks: 85.204.246.0/24 maxlen: 24
188.213.134.0/24 maxlen: 24
188.213.49.0/24 maxlen: 24
89.45.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:d9:e6:54:07:b1:71:07:8e:e7:12:0c:fb:3f:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5813badd8d762c78e2870f47db6ce1e99529ca38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:77:3e:39:f3:ee:3c:c7:e6:63:10:07:3f:a2:
6c:c0:de:0e:53:86:19:26:be:4a:87:35:47:c5:81:
cd:45:79:04:1f:f4:f2:1c:1a:91:ac:36:a2:54:a3:
62:18:7f:e3:0b:b8:c4:9f:e9:8e:64:c1:72:ec:9d:
e8:15:c1:58:80:68:60:69:60:a7:c3:18:28:4a:0f:
46:75:e9:43:8b:0e:d2:79:09:6b:69:cf:06:d6:c8:
ee:b2:c6:f1:8d:d0:95:48:97:3a:7e:59:94:c6:9b:
c7:87:d4:99:9d:b9:41:39:a5:2b:58:14:1b:ac:5a:
33:ed:f1:61:f0:92:e0:35:9a:52:5a:01:d9:35:19:
dc:19:74:22:1a:26:4d:40:06:c4:67:bf:6c:55:4d:
7a:15:03:94:2c:ce:ed:a9:c7:1d:3d:0c:21:3d:7d:
c0:c3:3d:61:86:e9:fd:37:65:33:1c:41:42:3e:ad:
98:bf:3a:61:3f:0d:42:ba:9e:94:07:f0:ff:4d:22:
f4:97:c1:0d:a8:86:8d:53:6d:7a:ce:39:2e:89:fc:
d2:f8:1a:74:2c:16:87:9e:f5:a0:88:fd:b7:c8:0a:
75:78:9b:e1:b9:28:f5:0e:81:94:0f:a7:60:09:0f:
80:10:ff:d3:4e:31:e1:3c:7d:fa:da:96:28:dd:e0:
43:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:13:BA:DD:8D:76:2C:78:E2:87:0F:47:DB:6C:E1:E9:95:29:CA:38
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/WBO63Y12LHjihw9H22zh6ZUpyjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.246.0/24
89.45.46.0/24
188.213.49.0/24
188.213.134.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:41:18:a7:fd:c2:f4:bb:e9:68:93:3c:c5:02:f2:56:51:14:
73:a3:2c:67:d7:79:67:73:e8:6f:1e:d3:7f:1d:df:96:31:c6:
24:7d:1a:e2:c8:fe:9f:b7:13:76:d6:79:96:bb:6b:31:d0:35:
7f:f7:ef:56:41:73:d6:41:52:a7:23:54:f2:cd:ec:4a:58:88:
13:e4:42:6f:80:7b:4f:6f:69:e1:43:f8:45:b3:e0:dd:fc:74:
54:79:9e:7c:e1:36:54:b4:cf:e8:47:be:af:c0:93:93:d7:a3:
1d:1e:ab:77:d1:07:5d:d6:af:16:b5:d3:7e:34:6f:08:2a:da:
8a:dd:15:3c:c6:b7:0e:47:55:e9:96:25:ce:52:3e:11:6d:7c:
89:70:fa:63:ab:be:52:9c:53:ff:49:e7:28:5a:e0:49:28:74:
a9:d1:59:3f:3c:53:85:3c:4b:57:3c:51:61:a3:4f:53:e9:33:
d9:87:86:02:5a:6f:9d:8e:1b:41:fb:70:aa:f8:3d:f5:f1:35:
8b:84:4a:9f:08:92:80:68:c4:f2:6d:78:1b:f0:40:d5:05:dc:
5a:2e:b0:c1:23:1d:d1:76:13:c8:95:e6:6e:16:8e:5a:a8:33:
59:51:3b:ea:42:b9:32:22:e9:e4:6f:4f:ea:38:dc:79:75:1c:
86:4e:86:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:06 2024 by rpki-client on console-fra.rpki-client.org