Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/WKtu8QqSTZc95Wr9u6MeNGwWOps.roa
File: WKtu8QqSTZc95Wr9u6MeNGwWOps.roa (raw, json)
Hash identifier: bdtJ5VYq3w5a4HGZUjYDqGBLlZrUDNxHkZ2yluK4+CA=
Subject key identifier: 58:AB:6E:F1:0A:92:4D:97:3D:E5:6A:FD:BB:A3:1E:34:6C:16:3A:9B
Certificate issuer: /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial: 018EE640C101C1A76AC633AFFF5564ED70F8
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/WKtu8QqSTZc95Wr9u6MeNGwWOps.roa
Signing time: Tue 16 Apr 2024 09:33:07 +0000
ROA not before: Tue 16 Apr 2024 09:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58074
IP address blocks: 91.212.74.0/24 maxlen: 24
193.138.99.0/24 maxlen: 24
193.169.142.0/23 maxlen: 24
194.6.201.0/24 maxlen: 24
195.245.82.0/23 maxlen: 24
195.245.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 May 2024 06:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:40:c1:01:c1:a7:6a:c6:33:af:ff:55:64:ed:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Validity
Not Before: Apr 16 09:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ab6ef10a924d973de56afdbba31e346c163a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:22:1c:2d:45:47:28:ff:db:c0:e0:e7:91:
43:c7:9f:03:ea:5d:84:8c:90:39:87:fe:2f:07:38:
68:6f:1b:82:b2:10:e1:c3:8c:97:99:83:ab:8f:63:
fd:e8:a4:a8:fb:4c:a8:4d:0a:e9:b8:8a:d9:a0:77:
6f:7a:67:85:83:aa:f6:51:36:7d:ba:fa:91:ac:9d:
1b:e3:1f:5d:2b:cf:bd:e8:63:06:b6:c4:06:56:0f:
de:0b:cf:23:da:b3:33:66:af:43:18:df:24:54:15:
72:b9:aa:48:5e:22:5b:d2:b2:d2:03:04:ab:7c:a9:
9c:b5:04:8c:a0:55:52:f6:39:0d:dd:5b:42:10:bd:
16:d8:05:d7:5d:5a:c6:44:ae:93:64:38:32:eb:d3:
8f:3a:f5:1f:4d:68:45:04:e6:84:83:a9:42:96:aa:
4d:6b:af:ab:12:b6:c4:d2:cc:00:16:ab:ce:13:36:
f4:7d:0e:c6:eb:90:7a:77:c4:39:d2:41:45:18:ae:
81:a1:c2:28:89:bf:cf:80:a5:b2:88:9f:60:e6:ce:
86:cf:b4:fa:8a:d6:67:6a:ba:7e:70:a4:c3:86:fd:
9d:11:a1:c2:c0:a8:6a:df:01:ed:d9:c7:ea:91:7a:
37:43:74:5f:a6:b0:ba:3a:05:e9:9e:40:c2:6c:11:
8f:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:AB:6E:F1:0A:92:4D:97:3D:E5:6A:FD:BB:A3:1E:34:6C:16:3A:9B
X509v3 Authority Key Identifier:
keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/WKtu8QqSTZc95Wr9u6MeNGwWOps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.74.0/24
193.138.99.0/24
193.169.142.0/23
194.6.201.0/24
195.245.82.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:d5:86:95:48:e8:25:b5:54:fa:95:b6:a9:10:fd:ce:59:b9:
f2:3b:1e:c2:54:9d:ba:01:32:71:a6:9e:3b:61:00:99:c5:f1:
6c:22:3f:92:4f:72:aa:c6:97:88:02:73:38:2f:06:2c:49:f0:
ef:b9:7a:69:51:08:fa:fd:50:16:32:5b:d0:19:86:0c:e8:c7:
61:74:94:d9:48:c0:38:1e:1e:14:65:86:94:63:08:e6:89:da:
90:65:f7:58:81:bc:23:a1:e4:b4:e8:f9:a5:5a:c7:a3:ca:64:
90:fc:0c:64:ac:58:48:c1:98:19:3c:57:2f:85:64:1c:8d:07:
56:03:f2:fa:56:e6:fc:31:9a:24:a5:81:2a:0a:a3:b2:aa:39:
40:f8:c1:80:52:87:af:79:54:7e:53:9d:f3:de:6b:ae:d3:9f:
a0:f7:a5:fd:a8:d2:bd:d2:2c:3d:db:06:b5:13:0b:94:3b:86:
ab:d8:9a:3d:77:f7:f4:f6:12:0b:37:e9:6c:92:7a:cd:5b:5d:
50:44:81:24:3d:ca:8e:99:9a:f1:0b:3d:a0:63:68:d1:aa:fb:
4c:38:34:81:03:b4:9f:af:6a:cd:80:e7:e5:26:4d:4e:c7:32:
c0:b6:08:cd:5f:e9:ca:3d:8f:f5:3b:cf:bd:2f:42:6c:74:67:
57:63:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:46 2024 by rpki-client on console-fra.rpki-client.org