Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WIGUW5uhJUZBu_Eu0Jo2Y0Z-ABU.roa
File: WIGUW5uhJUZBu_Eu0Jo2Y0Z-ABU.roa (raw, json)
Hash identifier: gLteoZNFWCrnCr6533O1izFxPddNeFkjl7/vQhrdxnw=
Subject key identifier: 58:81:94:5B:9B:A1:25:46:41:BB:F1:2E:D0:9A:36:63:46:7E:00:15
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DE87EA9FF4C6A6AC51F397316A895138
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WIGUW5uhJUZBu_Eu0Jo2Y0Z-ABU.roa
Signing time: Wed 30 Oct 2024 17:45:02 +0000
ROA not before: Wed 30 Oct 2024 17:45:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62425
IP address blocks: 45.95.1.0/24 maxlen: 24
45.95.3.0/24 maxlen: 24
87.121.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 14 Nov 2024 06:56:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:de:87:ea:9f:f4:c6:a6:ac:51:f3:97:31:6a:89:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 17:45:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5881945b9ba1254641bbf12ed09a3663467e0015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:5f:e7:d2:3b:7a:a0:74:62:a7:e2:5f:90:
92:1c:ef:64:f5:f2:bb:d6:32:9f:e0:f4:a1:55:18:
b2:fe:ec:09:d1:b8:c8:8c:c5:a3:de:39:e4:25:60:
6a:14:ea:44:73:da:56:11:1f:1a:11:6d:55:8e:99:
9c:cd:e6:2b:be:71:f6:eb:98:f6:53:28:ce:ea:0f:
a9:c5:3b:26:e9:23:1e:2c:e7:ce:af:b8:af:58:c4:
66:9a:1f:c6:9f:f4:a6:95:79:a7:8b:54:12:10:fb:
50:6b:2b:08:f9:8c:c4:ac:a4:33:d4:ed:db:aa:6f:
02:32:d2:3e:2e:43:fc:3f:bd:e7:77:bf:bf:d0:fe:
1f:20:43:a8:c5:07:c7:d8:dc:5e:a3:9d:5c:89:a2:
be:24:ac:67:8d:5d:d1:10:ae:de:54:f2:f4:25:42:
cc:ab:f8:a6:6a:70:8c:ba:86:a9:d8:15:db:e8:d0:
5b:4e:95:e7:63:c9:8f:80:f0:f6:be:87:be:0b:75:
e7:4e:2e:bf:0b:3e:27:5a:cf:43:d7:24:6c:31:ba:
92:dc:06:62:aa:cc:49:9a:44:03:d2:1c:27:3c:c9:
71:f4:db:c6:0d:e1:71:76:01:d2:93:4c:f8:bc:dd:
f3:c6:75:1e:7c:3b:42:93:de:dd:60:99:39:07:3e:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:81:94:5B:9B:A1:25:46:41:BB:F1:2E:D0:9A:36:63:46:7E:00:15
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WIGUW5uhJUZBu_Eu0Jo2Y0Z-ABU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.1.0/24
45.95.3.0/24
87.121.217.0/24
Signature Algorithm: sha256WithRSAEncryption
01:86:96:5d:5f:41:f5:9e:3a:43:c7:ae:71:0d:6b:1d:48:cd:
38:7e:8f:bf:78:2a:cd:73:e1:5c:5f:eb:dc:34:99:e2:c4:51:
13:9a:38:39:ce:34:e5:e8:07:66:da:9c:9d:54:ee:12:57:49:
85:1a:ee:2c:77:db:c0:e4:82:6e:7c:40:46:dd:5c:85:d4:c9:
55:aa:fe:bb:38:3c:be:8b:26:20:ae:98:44:ae:89:d6:d4:ce:
33:97:92:e1:8b:55:67:d5:19:1c:c1:0d:95:2a:dc:93:86:cd:
59:b2:65:de:de:6c:1b:7e:c6:eb:a6:a8:55:ce:d8:ec:0b:a3:
b6:62:8a:a3:f6:45:e9:34:ec:38:a4:78:9d:77:cc:a2:b4:24:
e6:77:77:11:22:3d:31:d6:fb:d2:fe:d4:bc:dc:90:ec:9e:cd:
24:f7:5e:47:f7:0a:be:45:47:af:16:4a:72:f9:bd:1d:c3:b6:
e2:db:b1:1e:57:99:44:6b:94:63:49:4a:3a:b7:cf:03:6b:4d:
25:f4:ce:b0:1b:e8:b1:68:b4:56:d4:dc:a5:bb:5f:ad:57:6f:
d1:a5:35:0e:1c:e8:ee:40:b0:9b:6f:82:05:43:40:22:03:96:
61:f2:bc:5e:f6:1b:b2:3d:67:a2:ed:94:80:76:ca:40:0c:5c:
7d:5a:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 14 08:42:07 2024 by rpki-client on console-ams.rpki-client.org