Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WMqVCY4SBL0eSMbNuAKG4DjVdFU.roa
File: WMqVCY4SBL0eSMbNuAKG4DjVdFU.roa (raw, json)
Hash identifier: wyursF2uzF2scR/BB7dZnMWo7XHR2ggYlmwB71xwubs=
Subject key identifier: 58:CA:95:09:8E:12:04:BD:1E:48:C6:CD:B8:02:86:E0:38:D5:74:55
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018DEB44C1A5AC36BD4D5E0E88CF023AE618
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WMqVCY4SBL0eSMbNuAKG4DjVdFU.roa
Signing time: Tue 27 Feb 2024 15:52:48 +0000
ROA not before: Tue 27 Feb 2024 15:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 88.151.56.0/23 maxlen: 24
88.209.211.0/24 maxlen: 24
88.209.232.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 08:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:44:c1:a5:ac:36:bd:4d:5e:0e:88:cf:02:3a:e6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Feb 27 15:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ca95098e1204bd1e48c6cdb80286e038d57455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:55:19:17:64:e2:57:4e:e6:19:7b:a6:af:05:
c0:f1:4d:3f:6d:c6:00:c9:cc:f5:b8:2d:f5:1e:2b:
0d:7c:37:63:89:37:86:55:07:e0:70:30:9e:bf:99:
f5:52:0b:47:fd:bb:43:65:b1:7b:54:ae:84:b9:00:
97:33:d7:6b:e7:c1:b8:df:7a:aa:20:17:c3:24:fd:
ca:c6:5a:2a:b6:78:e3:a4:e4:ae:d5:98:b1:88:32:
c3:c5:52:8e:e6:1b:2e:8e:bb:37:e5:25:2b:c2:df:
4b:ac:7c:e6:d8:a4:32:ef:af:3c:b9:bf:9b:35:dc:
1a:30:a6:20:64:ed:bd:d7:f6:99:e6:ab:3b:d9:a4:
b2:fb:f9:04:76:07:51:5e:21:8c:47:5c:a3:28:07:
a8:58:1a:ec:8e:68:ae:01:cc:77:4f:d5:8f:fa:9a:
10:e9:54:ff:b5:1b:08:42:a0:8e:65:23:f4:91:ec:
87:a9:36:4e:26:4e:a3:54:27:b3:98:56:ed:32:52:
38:94:78:af:11:75:cb:c9:60:ad:7c:5e:fc:e7:f1:
ee:7b:c9:0b:b9:dc:79:a8:39:f1:a4:22:ec:92:0e:
d4:c7:76:00:64:44:cb:e1:d9:eb:08:f7:82:04:0a:
6d:b9:6a:b8:b2:d0:56:67:20:38:3a:97:ae:b0:4e:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CA:95:09:8E:12:04:BD:1E:48:C6:CD:B8:02:86:E0:38:D5:74:55
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WMqVCY4SBL0eSMbNuAKG4DjVdFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.56.0/23
88.209.211.0/24
88.209.232.0/22
Signature Algorithm: sha256WithRSAEncryption
56:9d:6f:86:ea:8e:87:45:dd:63:6e:37:64:99:7c:70:ee:9d:
7c:bc:38:26:22:43:b0:19:9b:fd:a4:2e:9d:19:27:cc:05:3e:
23:67:0f:b3:e9:ac:e0:f5:f8:43:b2:1e:bc:74:73:4c:4d:ec:
69:a9:c0:f1:61:e9:b3:16:c0:0f:00:c6:f8:17:91:a9:4f:e3:
d7:87:9b:70:cd:85:95:bd:77:ec:0c:2f:52:37:0f:a1:7f:e4:
bd:06:10:5b:6f:19:05:37:27:8c:e6:9b:d6:d8:15:b0:0a:36:
ec:e0:3f:7b:db:02:7b:50:54:0d:85:cf:b3:ba:e9:52:03:8d:
9e:02:66:b9:c4:dc:e0:8a:d7:c6:f8:b9:36:40:12:30:5a:a4:
77:3f:6f:ba:88:26:40:1f:44:e3:ba:e7:27:56:d5:db:42:c9:
a9:e0:48:ac:fe:5d:b2:06:eb:11:e6:f1:3a:9a:d9:0b:32:41:
ba:f1:9e:bb:dc:31:b4:bf:fb:8c:88:71:ea:9b:7a:10:07:36:
97:9c:58:84:d5:10:7f:1d:42:24:51:90:32:87:d6:91:e7:80:
9d:41:2b:db:82:13:2e:1f:0f:f3:e6:71:4a:a7:41:05:b6:1c:
76:6c:ad:40:cd:d5:a8:0f:a3:f4:cd:db:9a:bc:28:ee:76:99:
dd:8d:1d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:27 2024 by rpki-client on console-fra.rpki-client.org