Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/WHehksFjI-Qi4oUSWH1-OkF4gLc.roa
File: WHehksFjI-Qi4oUSWH1-OkF4gLc.roa (raw, json)
Hash identifier: 2Ce4tTJtcEZKrnu6qaqCkO/X/q6sU2Sog5RaFe15E+A=
Subject key identifier: 58:77:A1:92:C1:63:23:E4:22:E2:85:12:58:7D:7E:3A:41:78:80:B7
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 018F09DCAF0D5CCC61EFC938B7032FFFE0F6
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/WHehksFjI-Qi4oUSWH1-OkF4gLc.roa
Signing time: Tue 23 Apr 2024 07:30:08 +0000
ROA not before: Tue 23 Apr 2024 07:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8286
IP address blocks: 31.193.96.0/21 maxlen: 21
82.145.64.0/19 maxlen: 19
212.14.0.0/19 maxlen: 19
212.14.32.0/20 maxlen: 20
2001:4c58::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 16 May 2024 06:28:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:09:dc:af:0d:5c:cc:61:ef:c9:38:b7:03:2f:ff:e0:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: Apr 23 07:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5877a192c16323e422e28512587d7e3a417880b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:5d:f6:1c:06:c9:be:5d:d7:f7:be:58:98:
25:c6:b4:e8:ab:03:1b:9f:1f:28:8a:5e:75:d2:43:
a4:ba:1f:4e:b0:db:72:1a:7e:08:27:85:94:e1:47:
3f:49:4c:7e:da:16:8f:8d:e9:58:aa:34:e4:91:0a:
7e:b2:3b:84:91:79:3a:67:a9:77:c0:de:1e:65:c3:
a5:af:bb:98:b4:ba:d4:e2:ce:4d:93:b0:27:08:f5:
0f:2c:ed:26:79:8c:0e:e5:ff:ba:f2:d0:93:af:fd:
96:2f:bf:dd:32:ff:ac:b2:31:e7:98:cf:24:40:26:
fe:5c:0e:a3:d0:30:39:a8:69:99:58:6c:21:48:65:
05:6d:5d:39:bc:31:e2:3a:18:87:92:ea:56:4c:51:
2b:2d:50:61:98:83:af:87:12:bc:ea:bc:04:cc:79:
7a:19:26:22:5d:94:43:a0:7b:39:ec:fe:38:c5:ea:
ed:02:1e:5f:fe:40:4e:61:b1:66:7d:90:60:9e:18:
da:6f:f3:a7:31:27:6b:e1:15:ef:9d:75:37:b2:c6:
91:84:6d:6b:bf:f7:48:d1:21:2b:eb:76:a1:62:f2:
bb:9b:74:44:39:21:cc:9f:0e:f5:58:c6:f3:60:3b:
04:f6:d9:13:2f:b5:11:35:c4:34:4a:f7:65:82:6c:
28:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:77:A1:92:C1:63:23:E4:22:E2:85:12:58:7D:7E:3A:41:78:80:B7
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/WHehksFjI-Qi4oUSWH1-OkF4gLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.96.0/21
82.145.64.0/19
212.14.0.0-212.14.47.255
IPv6:
2001:4c58::/30
Signature Algorithm: sha256WithRSAEncryption
5e:96:f6:44:48:3b:6a:cf:5d:a8:83:8e:34:85:d9:54:fd:f1:
05:b3:73:51:3f:69:1c:3b:e4:79:9c:9d:ec:03:67:f7:55:60:
68:c9:aa:79:aa:16:04:7f:c9:d9:0a:60:41:f2:0a:4c:aa:0b:
ef:97:ac:fc:f5:11:6d:98:97:99:9f:ec:04:c4:a2:5c:f3:7f:
05:8b:11:d8:8c:76:48:47:df:96:a2:2e:32:e2:68:9b:33:e7:
b4:3f:57:66:fd:f1:0b:01:37:81:e1:b8:aa:80:01:c7:bd:b0:
53:3a:e3:d0:11:cb:db:06:4e:59:6f:68:92:01:78:72:5e:c5:
30:7b:4f:9c:aa:2c:74:4b:ad:47:c1:6b:9e:a0:59:fd:16:fc:
46:91:dc:c4:2a:fb:1b:2e:31:ec:60:db:2b:4e:e0:e6:57:d6:
2a:45:e7:2e:81:ec:fd:ee:da:91:a2:cf:59:e8:09:79:78:be:
fd:4e:3e:5e:23:6d:3c:82:65:43:d6:b0:c0:21:2a:4f:94:59:
a6:f8:68:f1:16:ac:41:10:56:a7:48:f2:52:b1:7c:58:79:bf:
64:f3:2e:e9:54:0c:76:d9:24:42:72:fd:10:80:ab:d4:66:60:
5b:ba:40:6f:8e:63:74:a2:d0:22:e5:01:fc:58:62:db:b5:09:
e7:40:b2:4a
-----BEGIN CERTIFICATE-----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Generated at Thu May 16 07:01:20 2024 by rpki-client on console-fra.rpki-client.org