Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wg_SNj0PSvNsKDiMYpqe9U5qQdY.roa
File: wg_SNj0PSvNsKDiMYpqe9U5qQdY.roa (raw, json)
Hash identifier: wn+J1d0zYCoPDkPO1L8VZ19+bdj1cUhBzsmL4tAQ5u4=
Subject key identifier: C2:0F:D2:36:3D:0F:4A:F3:6C:28:38:8C:62:9A:9E:F5:4E:6A:41:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01902AD58582B0365E9739FB531795DA0EEA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wg_SNj0PSvNsKDiMYpqe9U5qQdY.roa
Signing time: Tue 18 Jun 2024 10:12:34 +0000
ROA not before: Tue 18 Jun 2024 10:12:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 45.12.255.0/24 maxlen: 24
45.66.228.0/24 maxlen: 24
141.98.5.0/24 maxlen: 24
171.22.31.0/24 maxlen: 24
178.215.238.0/24 maxlen: 24
193.149.28.0/24 maxlen: 24
193.149.29.0/24 maxlen: 24
193.149.30.0/24 maxlen: 24
193.149.31.0/24 maxlen: 24
194.180.36.0/24 maxlen: 24
212.115.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 08:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:d5:85:82:b0:36:5e:97:39:fb:53:17:95:da:0e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 10:12:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c20fd2363d0f4af36c28388c629a9ef54e6a41d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cd:d6:ba:4c:41:93:b2:b2:3b:e4:a6:1f:2d:
99:d9:25:a7:09:f9:f5:4d:af:17:15:48:f2:7e:2e:
d4:fc:95:95:12:27:c2:d0:e6:61:bb:2c:24:07:2e:
3f:5a:49:55:82:fe:b5:dc:73:ef:96:4f:6d:87:af:
b3:d6:31:df:36:ec:d4:26:8d:db:6e:80:fd:ba:a5:
4a:28:6e:94:b7:1f:f0:39:94:76:85:08:98:85:7a:
01:21:44:62:dd:f2:76:2c:40:5f:75:46:6c:49:cc:
e8:72:c8:e4:79:b9:c0:91:3b:01:b2:e4:86:ef:2d:
2f:59:64:be:25:9d:61:9f:e3:37:46:f2:65:a7:60:
c3:86:9b:7c:cf:a3:cd:20:91:9e:f9:f1:4d:43:af:
86:78:95:a6:3b:57:0e:4a:16:7d:4d:9b:68:89:b5:
ac:be:07:41:8e:18:87:ef:f7:23:c8:26:33:d8:60:
56:59:5a:9d:28:ba:ab:ab:b5:cf:5d:fc:dc:97:90:
8c:4e:14:b5:6d:23:24:47:30:66:5d:19:2a:d1:1e:
30:66:e5:57:0c:30:83:87:86:c0:67:bc:cb:40:59:
ab:ce:26:34:2e:02:a3:1c:59:c3:f0:ca:e0:b3:f3:
9a:fe:ed:1f:a2:b5:33:bf:58:25:c4:e7:e7:d7:b5:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0F:D2:36:3D:0F:4A:F3:6C:28:38:8C:62:9A:9E:F5:4E:6A:41:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wg_SNj0PSvNsKDiMYpqe9U5qQdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.255.0/24
45.66.228.0/24
141.98.5.0/24
171.22.31.0/24
178.215.238.0/24
193.149.28.0/22
194.180.36.0/24
212.115.41.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3a:0f:bd:f9:80:0c:85:a3:b1:0d:2f:6f:85:8a:fc:fa:66:
ac:cf:8a:6d:81:be:84:7b:a6:70:22:70:fd:99:bc:86:5b:da:
f5:e6:60:64:39:7e:dd:da:a3:69:ad:b1:47:2f:4c:c0:27:18:
75:1d:82:7c:cc:03:93:31:96:11:4e:d3:60:81:8e:b5:2e:7d:
12:64:b2:73:63:9e:ca:cd:5d:59:59:fd:60:d9:ba:14:5b:4a:
ac:92:ff:40:ec:5d:e8:d2:d7:ec:94:aa:b9:b0:d7:ea:01:7a:
ee:ed:e0:ee:6a:f5:06:32:3e:bf:fd:c8:c6:31:d5:d1:85:5a:
20:91:19:de:8c:9b:32:a4:30:a8:46:c3:e4:48:c3:5f:36:32:
ea:42:8b:90:55:3a:6c:b5:ec:04:ff:39:bd:8e:35:08:7e:6e:
5d:b3:67:89:8b:8c:55:08:58:89:0d:8e:9c:a1:3f:86:91:43:
37:b4:8f:12:ac:9e:b5:fb:42:cf:0a:9c:60:db:d8:8d:a5:9e:
40:61:b9:f2:ef:16:78:c6:c4:6e:e2:34:29:29:61:b1:e4:49:
ac:b9:89:8a:c1:03:f8:89:34:46:33:19:4b:99:ad:7a:93:e7:
6b:91:7c:c7:63:53:72:e6:21:82:f9:9c:f8:e8:07:72:1e:e6:
7b:de:cc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 11:54:48 2024 by rpki-client on console-fra.rpki-client.org