Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/WIwRysGtrQJ4NQocZVCl3nhJgcY.roa
File: WIwRysGtrQJ4NQocZVCl3nhJgcY.roa (raw, json)
Hash identifier: hru4RRyfLyllRyft5Za7jErHKNOYaVt5z6FQg11crjE=
Subject key identifier: 58:8C:11:CA:C1:AD:AD:02:78:35:0A:1C:65:50:A5:DE:78:49:81:C6
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 018CC56E66D33807F73DD787E6A934867169
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/WIwRysGtrQJ4NQocZVCl3nhJgcY.roa
Signing time: Mon 01 Jan 2024 14:29:55 +0000
ROA not before: Mon 01 Jan 2024 14:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.151.44.0/23 maxlen: 23
185.151.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:66:d3:38:07:f7:3d:d7:87:e6:a9:34:86:71:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Jan 1 14:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=588c11cac1adad0278350a1c6550a5de784981c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:65:6c:33:95:2e:8a:a3:f3:f6:fe:93:56:2f:
57:4f:cc:62:2b:6f:2e:68:0c:71:da:c1:fe:dd:ff:
af:7c:fd:04:5b:78:fb:b9:34:2d:0a:ae:63:32:14:
24:1f:cd:19:07:ed:c6:cf:26:e1:67:32:97:2d:64:
10:9f:74:e6:e0:65:e1:ab:b0:e1:5b:90:30:df:f7:
08:09:41:d3:b5:33:37:75:0d:fd:eb:5b:d1:cb:e2:
22:14:67:55:90:fa:47:37:67:11:d4:65:bd:26:53:
60:88:f5:0f:ae:d5:b7:a0:38:db:de:a5:70:fa:14:
f0:e9:d8:95:1e:38:57:4b:df:ee:f1:e0:13:45:e0:
c8:1f:30:5f:2e:06:f5:20:8c:39:ea:a8:30:d9:71:
8d:5f:b9:07:a5:9b:02:7e:e4:34:0b:e1:aa:91:3a:
cf:37:ad:19:4d:dc:4f:d0:a1:8e:f6:4b:42:6c:35:
b4:a4:ad:1e:f6:50:0b:57:f4:c4:bd:44:06:61:a0:
57:4d:61:84:84:75:54:7b:be:cf:71:f3:ce:4c:02:
d6:0a:4e:ca:1c:f6:44:c5:94:67:7a:60:cd:7c:e4:
e6:eb:57:00:d3:a7:8a:d1:38:ca:23:2a:16:f1:cd:
a0:d6:ef:dd:a8:0b:ed:3a:a6:03:6b:4f:8a:9b:3b:
70:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8C:11:CA:C1:AD:AD:02:78:35:0A:1C:65:50:A5:DE:78:49:81:C6
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/WIwRysGtrQJ4NQocZVCl3nhJgcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.44.0/23
185.151.47.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:a3:9b:70:41:26:73:f7:d5:c9:13:c0:66:1c:d9:8b:f9:9d:
2e:15:66:5c:2f:10:e5:81:0f:c9:c9:8b:b8:63:06:36:d7:be:
a3:12:2e:df:1d:b4:a8:c1:cf:37:a8:78:81:13:9d:cd:a3:71:
ea:e6:09:de:c2:a1:8b:11:97:9a:5d:e1:96:4d:b3:d5:18:da:
47:69:de:2b:58:1f:ca:bd:eb:95:c7:bf:fc:a2:c3:6f:55:6d:
46:a6:09:ef:f3:78:09:8f:69:1c:dd:e5:13:2f:7f:f4:2b:4e:
90:9b:10:83:50:3f:5b:7f:d1:fa:6c:53:1d:73:15:c6:f7:4e:
17:b6:de:50:70:ff:fb:36:7b:57:0f:33:cd:b1:6c:a4:0b:e8:
31:4d:9b:02:72:a6:ac:0b:f6:49:42:53:a6:67:96:d1:c6:16:
00:4c:88:17:d0:c9:fb:7f:50:c3:c7:80:d8:c1:f0:83:82:e3:
59:86:c4:50:37:47:d5:4f:b6:5b:51:d4:ba:b5:4e:e3:9a:13:
e5:7a:f5:3d:76:c9:37:a9:1c:aa:11:ae:7f:d2:77:db:f2:20:
e0:89:de:e8:90:6f:79:90:bd:5d:75:aa:de:33:cf:43:47:f6:
bc:ef:fc:25:45:b2:ad:68:94:cb:9b:89:3d:71:f4:4b:15:bb:
be:9e:c8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:07:37 2025 by rpki-client