Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/w9vh-8y4efUToMQ8JuaLlpR2hNQ.roa
File: w9vh-8y4efUToMQ8JuaLlpR2hNQ.roa (raw, json)
Hash identifier: WCH/ddipJMWUWRVbijiAfQiWRgRi64e7hLy8FXnPbus=
Subject key identifier: C3:DB:E1:FB:CC:B8:79:F5:13:A0:C4:3C:26:E6:8B:96:94:76:84:D4
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018DEB0FA8B7685372C8B15F78A6430442DA
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/w9vh-8y4efUToMQ8JuaLlpR2hNQ.roa
Signing time: Tue 27 Feb 2024 14:54:48 +0000
ROA not before: Tue 27 Feb 2024 14:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 37.220.87.0/24 maxlen: 24
45.129.184.0/24 maxlen: 24
85.92.109.0/24 maxlen: 24
185.166.199.0/24 maxlen: 24
195.80.48.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 03 Mar 2024 05:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:0f:a8:b7:68:53:72:c8:b1:5f:78:a6:43:04:42:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Feb 27 14:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3dbe1fbccb879f513a0c43c26e68b96947684d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:fc:c8:f8:78:99:0c:c3:79:fd:3a:bf:42:
b6:da:06:c3:65:7d:fa:2a:c8:2f:f4:02:47:f2:1e:
4c:c6:18:3b:1b:11:6a:3f:94:eb:ba:88:dd:54:11:
51:17:7b:0c:0b:99:5c:19:3e:32:f9:58:74:53:9f:
67:32:b5:01:c8:88:01:dc:df:f8:8c:13:2e:25:48:
98:72:ee:f1:72:06:8a:e2:c3:bc:75:e6:ea:d6:f6:
88:e2:17:60:0d:e9:0a:31:b8:97:85:fc:de:a1:b9:
13:c0:43:d9:62:64:2b:f4:a4:98:50:02:83:b6:27:
fc:36:7e:5d:db:4e:0a:ac:20:dc:27:3f:31:45:d8:
e7:3b:8f:d1:38:0a:2f:a5:7d:f5:ff:e0:51:f9:0a:
55:60:10:52:c9:e3:39:20:2b:3c:29:8b:64:c6:f6:
c9:65:64:2e:2d:88:4f:2a:5d:c3:82:76:4b:5b:d1:
42:05:9e:2e:bf:b5:9d:c8:c3:8e:02:59:0b:20:87:
c3:dd:2d:a0:fd:ac:f6:fa:53:db:1c:24:f6:1a:63:
66:0d:22:55:83:72:35:69:f2:85:b3:17:dd:42:40:
6d:1d:0f:37:f6:e1:11:77:b0:f1:16:cf:32:9f:1b:
9f:b0:9f:58:7d:7e:37:ed:d2:a0:ef:9b:bd:8d:e1:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:DB:E1:FB:CC:B8:79:F5:13:A0:C4:3C:26:E6:8B:96:94:76:84:D4
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/w9vh-8y4efUToMQ8JuaLlpR2hNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.220.87.0/24
45.129.184.0/24
85.92.109.0/24
185.166.199.0/24
195.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7a:e4:2c:2a:93:4f:73:4f:db:94:0f:5f:90:85:5c:40:da:
b6:44:8c:6a:9e:a3:9b:42:a2:28:b8:17:41:f8:a0:0f:43:9a:
85:4d:bc:a2:71:6e:f7:4b:c5:58:a1:fc:cd:a4:85:03:a1:52:
af:5e:6a:33:c7:bf:e8:66:fa:76:5c:31:c1:f2:f4:04:58:64:
b1:51:fe:e7:3e:8e:da:d8:93:13:ae:02:1e:5d:e4:8a:f6:71:
da:a9:e1:6a:6a:9c:84:da:4e:45:9a:f7:1a:1a:a0:e5:4e:51:
ae:3d:f2:a6:db:a3:9b:54:a6:ab:6b:58:a4:15:24:24:c6:43:
06:70:bf:34:b0:46:f8:d8:1c:23:4d:e1:53:87:a8:51:e3:29:
55:87:47:59:6c:9b:33:8d:df:7f:b4:82:1b:14:7d:22:4b:d4:
8a:88:03:99:83:5a:53:03:e1:66:c1:3e:b4:77:12:b1:2d:de:
2a:73:94:83:22:43:45:aa:68:ae:82:7a:5c:bf:71:26:5d:2d:
9c:e7:2d:b4:6d:d9:75:f3:ab:88:6d:f0:ce:de:1f:fe:99:58:
89:e8:94:68:70:37:a0:fe:24:dd:49:8f:20:8b:7a:96:67:54:
54:a6:7e:d7:67:58:c6:a2:1b:ea:18:d5:c2:d3:06:a4:fd:9f:
a3:7b:20:e2
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 3 06:25:33 2024 by rpki-client on console-ams.rpki-client.org