Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/wKjkZ3yGa6Pq0C-wPUA8wlhen1o.roa
File: wKjkZ3yGa6Pq0C-wPUA8wlhen1o.roa (raw, json)
Hash identifier: LF6f+H1No4NlkPAchsbhX/fN0VHmFoYsWSc5JDhqjGI=
Subject key identifier: C0:A8:E4:67:7C:86:6B:A3:EA:D0:2F:B0:3D:40:3C:C2:58:5E:9F:5A
Certificate issuer: /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial: 0186DBE305C2586ABD3BF29D4B9D8CD14EA9
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/wKjkZ3yGa6Pq0C-wPUA8wlhen1o.roa
Signing time: Mon 13 Mar 2023 16:52:13 +0000
ROA not before: Mon 13 Mar 2023 16:52:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48158
IP address blocks: 176.58.41.0/24 maxlen: 24
176.58.40.0/23 maxlen: 24
176.58.39.0/24 maxlen: 24
176.58.38.0/23 maxlen: 24
176.58.43.0/24 maxlen: 24
176.58.42.0/24 maxlen: 24
176.58.48.0/23 maxlen: 23
176.58.47.0/24 maxlen: 24
176.58.46.0/24 maxlen: 24
176.58.45.0/24 maxlen: 24
176.58.50.0/24 maxlen: 24
176.58.55.0/24 maxlen: 24
176.58.54.0/24 maxlen: 24
176.58.53.0/24 maxlen: 24
176.58.52.0/24 maxlen: 24
176.58.57.0/24 maxlen: 24
146.255.212.0/22 maxlen: 24
185.190.190.0/24 maxlen: 24
212.124.96.0/22 maxlen: 24
212.124.100.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Jun 2023 10:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:db:e3:05:c2:58:6a:bd:3b:f2:9d:4b:9d:8c:d1:4e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Validity
Not Before: Mar 13 16:52:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0a8e4677c866ba3ead02fb03d403cc2585e9f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:66:55:ae:b7:3e:6b:7f:e3:95:8d:af:31:
ae:65:8e:68:37:3e:51:37:81:04:8a:42:b2:07:54:
ec:39:5c:e9:40:58:94:63:d1:4b:c0:64:15:b1:77:
9c:f0:7b:16:09:da:79:a7:00:6f:14:f9:5d:30:f1:
6b:b4:35:fd:04:b3:e8:20:78:26:09:8e:62:8d:4e:
a5:a7:53:9d:92:a1:5a:de:01:a5:da:4e:71:cc:c4:
00:27:fd:65:92:bd:e2:79:c7:64:40:0d:e4:ff:d3:
59:9f:1a:6b:41:bd:1f:28:04:b9:be:c2:b6:0b:72:
21:06:ca:d5:9a:e5:aa:c7:aa:76:ad:2d:a4:e8:b9:
7c:ee:e0:da:08:d4:12:78:74:f2:83:df:4c:78:dd:
e5:4c:d3:75:5d:64:95:a5:ba:f3:86:de:6a:4e:0a:
67:c1:45:83:8b:61:d8:26:80:21:01:93:1a:f0:8e:
9f:7e:27:f0:04:af:1e:e8:66:e3:4a:12:91:84:16:
41:f1:2f:4c:59:cc:f2:2b:26:0f:c6:7b:c4:d5:e8:
7a:d5:33:f3:4d:8e:61:b1:81:03:7a:a9:2e:82:e0:
48:9f:15:13:70:07:e8:bd:05:41:ee:08:11:f5:bf:
84:da:ca:73:17:ec:12:b5:e9:f1:84:34:76:e9:0f:
e0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A8:E4:67:7C:86:6B:A3:EA:D0:2F:B0:3D:40:3C:C2:58:5E:9F:5A
X509v3 Authority Key Identifier:
keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/wKjkZ3yGa6Pq0C-wPUA8wlhen1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.212.0/22
176.58.38.0-176.58.43.255
176.58.45.0-176.58.50.255
176.58.52.0/22
176.58.57.0/24
185.190.190.0/24
212.124.96.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:46:72:28:cc:bd:50:cd:d6:9c:18:b0:f7:20:28:44:84:4a:
ad:3d:10:d5:99:7b:c5:4b:07:4f:3e:07:f0:b2:1a:04:be:ed:
bc:d0:8d:3e:37:15:78:af:f7:3b:c9:ec:00:a8:e6:04:85:d1:
4c:25:6e:1a:c1:76:1b:65:44:5a:0a:9e:e3:ea:6e:52:88:59:
20:a2:e8:92:71:20:24:1a:60:76:8b:fa:3c:c4:79:ed:00:37:
8e:b6:29:0e:c1:36:4e:2d:70:c7:37:1f:0e:6c:6e:a6:c0:5a:
02:13:c4:da:c7:e6:f4:56:7b:2f:76:d0:d4:60:94:0e:bb:5e:
ad:5b:62:13:a9:74:50:a2:8d:3c:8b:b2:e8:3d:b3:69:bd:90:
de:0c:a5:dc:34:1f:7c:ed:bc:4c:1d:c2:83:74:62:4e:ce:3a:
c6:b2:9b:18:ae:b4:16:23:00:bf:15:e6:04:0c:e8:df:37:67:
97:73:31:ba:80:5a:c8:2d:eb:23:bd:25:8e:ff:64:20:1e:c1:
fa:c5:9b:1c:6f:0a:21:65:64:e7:83:de:fc:54:85:c5:cc:d6:
6d:5d:84:23:5b:c0:07:c7:49:29:8a:93:33:ca:34:09:2d:5c:
48:76:ee:10:b5:be:f7:25:63:4a:25:c2:e5:b2:d3:74:d6:df:
97:83:5a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:27 2024 by rpki-client on console-ams.rpki-client.org