Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Wc9x5bChJ9o_LwMQ-LQt6UvBV1Y.roa
File: Wc9x5bChJ9o_LwMQ-LQt6UvBV1Y.roa (raw, json)
Hash identifier: rMW5OSBRp9+LSl7F3+BA2TFoSRFwFOSdaIGA1sOGI5k=
Subject key identifier: 59:CF:71:E5:B0:A1:27:DA:3F:2F:03:10:F8:B4:2D:E9:4B:C1:57:56
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0188D4008734168C1A4EFA7599F48F75F4FC
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Wc9x5bChJ9o_LwMQ-LQt6UvBV1Y.roa
Signing time: Mon 19 Jun 2023 14:13:04 +0000
ROA not before: Mon 19 Jun 2023 14:13:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3257
IP address blocks: 213.145.72.0/21 maxlen: 24
213.145.89.0/24 maxlen: 24
213.145.91.0/24 maxlen: 24
213.145.90.0/24 maxlen: 24
213.145.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jul 2023 13:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:00:87:34:16:8c:1a:4e:fa:75:99:f4:8f:75:f4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 19 14:13:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59cf71e5b0a127da3f2f0310f8b42de94bc15756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:1c:07:64:8e:69:a9:50:9c:ca:9a:62:06:
be:c9:d4:cf:a8:dc:79:36:57:4f:76:9c:35:ee:bd:
c4:be:8b:16:e6:82:c6:b4:a3:99:82:ea:56:e8:e8:
f2:90:94:0b:6a:c0:6c:8c:e2:33:a1:1a:fc:f4:f4:
20:05:86:7c:e1:ba:e1:78:03:44:c0:ba:1d:dd:b2:
81:fb:61:20:d2:37:7e:d9:bd:b6:69:12:87:eb:b8:
60:1b:02:08:12:a2:ae:26:9d:96:a4:2d:11:24:ac:
46:6f:34:d2:e0:e4:ab:9d:9e:c3:b0:d0:21:e6:2b:
77:6a:0c:1f:fb:b9:41:e4:83:82:a2:bf:97:f1:c9:
12:2b:74:28:86:4c:14:07:6b:d8:8e:c7:f2:58:05:
e1:e8:1b:3f:9d:5d:44:8d:d6:7e:f8:64:71:63:bd:
8a:bb:5a:90:be:e3:1d:f4:8d:3a:77:f9:77:7e:30:
26:56:dd:bb:93:91:8e:06:45:43:2a:f0:12:9e:d8:
31:53:b8:60:d9:fb:29:3d:c1:81:83:05:3b:38:d3:
4b:d3:3c:ea:c9:33:c7:e2:00:2a:58:bf:1a:7e:d6:
0c:d9:2a:21:bb:2f:01:f9:a2:2d:a9:ef:23:1c:9e:
18:3d:c6:08:7d:4b:f9:60:97:dc:41:ab:88:07:17:
c9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CF:71:E5:B0:A1:27:DA:3F:2F:03:10:F8:B4:2D:E9:4B:C1:57:56
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/Wc9x5bChJ9o_LwMQ-LQt6UvBV1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.72.0/21
213.145.89.0-213.145.91.255
213.145.93.0/24
Signature Algorithm: sha256WithRSAEncryption
78:fc:86:80:b3:27:bf:2a:38:59:b4:82:7a:e9:69:f5:ae:15:
95:c4:c8:4a:c6:a6:cd:23:5d:e8:6c:47:7b:16:cb:29:ee:95:
5c:1a:5d:ec:84:bc:1d:02:c6:08:1e:b0:e6:6b:98:1a:c3:15:
d5:05:58:e8:83:56:1f:a7:74:5d:7b:95:08:f7:f2:c7:ac:c1:
00:35:67:4d:01:a1:c7:86:b3:00:73:e1:51:e7:79:35:ca:f2:
51:3e:97:e8:fa:e6:39:fd:95:6c:7b:90:2a:8d:68:1a:19:8c:
19:1b:e6:d5:3b:9d:02:c2:cd:bf:1c:10:1b:64:89:9a:3b:ed:
24:dc:8e:74:e7:24:b2:22:09:a4:c9:66:5a:74:b7:15:7e:29:
71:68:d1:31:38:01:af:d9:6a:cc:d4:f1:fe:3b:d9:45:54:94:
8d:5a:2d:11:d3:27:1d:4d:4f:d1:20:6e:7b:69:1e:18:56:2f:
85:14:3b:26:b0:a2:f1:6c:03:0f:14:03:9e:50:7e:04:96:57:
3e:95:d3:46:87:f4:65:7b:85:f6:55:c2:c4:d0:17:f7:d2:8a:
ad:e0:da:32:31:0c:e7:38:0a:ce:db:4b:00:7e:9d:69:22:56:
8e:8c:10:cb:8b:29:98:f4:49:24:5d:b4:e8:cd:ab:3e:06:b9:
3f:76:33:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org