Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wns413y93CLCjqsXAx9Mch51TSc.roa
File: Wns413y93CLCjqsXAx9Mch51TSc.roa (raw, json)
Hash identifier: YlBq3Tu8Z9QfpzI0TmmQYxkmxjimnuTYg+mjaSssauA=
Subject key identifier: 5A:7B:38:D7:7C:BD:DC:22:C2:8E:AB:17:03:1F:4C:72:1E:75:4D:27
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824559FE9014E0219A0530070691511
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wns413y93CLCjqsXAx9Mch51TSc.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 31.13.193.0/24 maxlen: 24
31.13.225.0/24 maxlen: 24
37.60.141.0/24 maxlen: 24
87.120.107.0/24 maxlen: 24
87.120.187.0/24 maxlen: 24
87.120.191.0/24 maxlen: 24
87.121.70.0/23 maxlen: 24
87.121.88.0/23 maxlen: 24
87.121.144.0/23 maxlen: 24
93.123.45.0/24 maxlen: 24
93.123.46.0/24 maxlen: 24
93.123.47.0/24 maxlen: 24
94.156.11.0/24 maxlen: 24
94.156.61.0/24 maxlen: 24
94.156.92.0/24 maxlen: 24
94.156.162.0/23 maxlen: 24
94.156.164.0/23 maxlen: 24
94.156.170.0/24 maxlen: 24
141.98.1.0/24 maxlen: 24
212.73.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Jan 2025 08:40:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:55:9f:e9:01:4e:02:19:a0:53:00:70:69:15:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a7b38d77cbddc22c28eab17031f4c721e754d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f9:44:dc:62:98:9c:2a:ed:85:5f:64:f9:ce:
a3:07:03:18:a3:cb:39:b3:66:2b:a2:ed:7c:46:59:
dd:eb:ca:2c:a2:29:95:b7:b8:16:10:c4:1b:d8:48:
0c:0e:bd:af:6c:5c:bf:d9:cd:af:5d:41:c9:ca:d9:
f7:5b:07:9b:72:a1:c1:61:2f:47:ce:b8:cc:ed:67:
37:99:f1:0c:79:a1:d8:bb:25:4a:98:16:f8:8a:f7:
d0:78:5d:e7:60:99:4c:13:07:d0:b7:92:73:40:fa:
07:85:eb:8d:71:7d:dd:2e:56:40:1e:30:6c:0b:94:
75:80:99:3a:89:39:04:1e:60:2e:58:74:cf:96:7e:
a0:45:eb:3f:b2:54:72:cc:87:e0:94:30:0e:c0:57:
0c:48:bb:31:ee:58:3a:6d:23:ad:57:e9:75:8b:58:
64:71:07:bb:30:4c:52:89:f7:b7:ae:2b:a9:64:8b:
88:4b:71:da:da:34:0f:95:df:09:b6:03:d3:94:e6:
76:45:2f:b3:57:17:d5:da:c4:f2:87:04:c6:92:bb:
ca:3f:a7:a8:c8:6d:95:d5:26:38:d5:3b:9a:41:b6:
aa:db:9c:07:ff:6e:72:68:58:22:b3:30:0a:ed:2d:
7b:44:a1:6e:83:a2:1f:c0:cf:77:5c:49:55:af:31:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7B:38:D7:7C:BD:DC:22:C2:8E:AB:17:03:1F:4C:72:1E:75:4D:27
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Wns413y93CLCjqsXAx9Mch51TSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.193.0/24
31.13.225.0/24
37.60.141.0/24
87.120.107.0/24
87.120.187.0/24
87.120.191.0/24
87.121.70.0/23
87.121.88.0/23
87.121.144.0/23
93.123.45.0-93.123.47.255
94.156.11.0/24
94.156.61.0/24
94.156.92.0/24
94.156.162.0-94.156.165.255
94.156.170.0/24
141.98.1.0/24
212.73.149.0/24
Signature Algorithm: sha256WithRSAEncryption
91:d6:b2:2e:ed:33:c2:6c:e7:18:42:6f:cf:e7:0a:c9:52:af:
67:3f:83:1f:b1:98:d9:1d:8d:1c:d5:b8:ed:42:04:a4:ae:6c:
c7:62:1e:9d:66:03:52:62:31:e8:4a:46:93:ee:7c:35:41:f5:
e5:6b:49:bd:7b:98:dc:a9:0d:e2:30:dc:b0:34:9d:db:4d:2b:
3f:74:c6:c7:8e:7d:d4:51:b7:c0:f9:e0:df:18:1c:42:09:18:
1d:1d:1e:80:24:0a:45:e7:a6:31:7d:fd:16:a7:61:e4:e6:84:
17:3f:2b:b2:3e:ce:2d:f6:43:27:1e:22:2c:8b:c4:1a:75:43:
06:72:c1:e6:41:65:59:f8:f7:00:b8:6f:b0:4d:39:39:8a:84:
81:23:ee:8c:62:23:98:da:c3:94:cd:1f:5f:95:bb:17:f9:de:
23:8e:94:78:3c:fd:66:5c:af:73:ba:cd:13:9a:b5:00:60:a3:
ae:5d:10:1c:28:3e:98:7d:1f:0c:77:d8:e5:bf:69:a1:ac:05:
61:d1:c6:9e:d8:27:97:d8:04:e6:08:7b:2a:c6:6e:29:3a:57:
97:3c:8f:f4:28:60:b2:6c:63:59:f8:66:32:67:53:45:7a:dd:
ac:29:f1:18:d3:dd:9b:ac:a0:24:44:43:f2:fd:aa:ae:3f:67:
e9:a1:86:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:54:31 2025 by rpki-client