Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Wg9EUwYxPDO3n2c1JARrtBJsC2A.roa
File: Wg9EUwYxPDO3n2c1JARrtBJsC2A.roa (raw, json)
Hash identifier: L0QT6BonnU4DVM1RGo0/0SriJj0pXvXs3YPfxFLX2ZI=
Subject key identifier: 5A:0F:44:53:06:31:3C:33:B7:9F:67:35:24:04:6B:B4:12:6C:0B:60
Certificate issuer: /CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Certificate serial: 01857082D3A720688F37C109AD2EFAFDD889
Authority key identifier: EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Wg9EUwYxPDO3n2c1JARrtBJsC2A.roa
Signing time: Mon 02 Jan 2023 03:24:59 +0000
ROA not before: Mon 02 Jan 2023 03:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 185.73.128.0/22 maxlen: 24
104.247.172.0/24 maxlen: 24
104.247.171.0/24 maxlen: 24
104.247.170.0/24 maxlen: 24
104.247.175.0/24 maxlen: 24
104.247.174.0/24 maxlen: 24
104.247.173.0/24 maxlen: 24
104.247.179.0/24 maxlen: 24
104.247.178.0/24 maxlen: 24
104.247.177.0/24 maxlen: 24
104.247.176.0/24 maxlen: 24
104.247.182.0/24 maxlen: 24
104.247.180.0/24 maxlen: 24
185.137.215.0/24 maxlen: 24
2a03:a5a0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 27 Feb 2023 04:26:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:d3:a7:20:68:8f:37:c1:09:ad:2e:fa:fd:d8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eea02b197dbaf7deb74e0a27d9d4ecd3fae1e8ed
Validity
Not Before: Jan 2 03:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a0f445306313c33b79f673524046bb4126c0b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:09:ac:87:24:dd:2b:24:f3:bd:23:bf:da:
18:f0:b6:ba:16:53:24:0a:8a:41:41:19:f8:8f:f3:
37:ba:9c:1f:40:2c:4f:93:a6:42:21:9f:c5:32:dd:
e6:7e:b0:ed:af:55:50:10:e1:91:cf:99:a3:1c:93:
35:7d:e6:4d:67:7c:66:b0:c0:39:a8:d3:0e:e4:37:
eb:f6:63:51:3d:12:c5:67:ce:11:37:33:2b:7d:32:
fb:14:8e:88:80:4b:03:b8:12:91:7b:30:38:d8:9a:
6a:60:ee:98:10:22:f8:1e:39:b1:96:eb:00:a3:09:
fe:8f:eb:21:2a:e0:ef:67:e3:03:ae:76:28:0b:f2:
6f:c1:fb:b5:2a:38:e3:af:3c:f7:e0:e0:62:6b:5e:
01:28:49:89:07:4a:4e:5a:06:d7:7b:ec:77:bc:29:
34:e5:69:6b:d5:5c:2c:e0:12:d6:56:f3:44:2e:b6:
d7:bb:e6:f5:10:71:f9:87:33:a1:91:64:33:41:55:
c4:80:c5:cd:8f:c9:c2:da:3a:2e:d9:b7:fd:cc:3a:
28:72:5f:18:92:ad:ce:a4:29:b0:c4:83:c6:13:7d:
09:c4:4c:b7:50:29:e5:95:dd:9b:bd:a6:1c:39:70:
6e:ca:e5:b1:98:69:e7:f6:e9:48:d5:0e:42:cd:06:
ba:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0F:44:53:06:31:3C:33:B7:9F:67:35:24:04:6B:B4:12:6C:0B:60
X509v3 Authority Key Identifier:
keyid:EE:A0:2B:19:7D:BA:F7:DE:B7:4E:0A:27:D9:D4:EC:D3:FA:E1:E8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qArGX269963Tgon2dTs0_rh6O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/Wg9EUwYxPDO3n2c1JARrtBJsC2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/971b11-280e-4ced-b99c-bbccab913b5d/1/7qArGX269963Tgon2dTs0_rh6O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.247.170.0-104.247.180.255
104.247.182.0/24
185.73.128.0/22
185.137.215.0/24
IPv6:
2a03:a5a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
6e:b0:b7:a2:3b:fc:c2:54:c3:fa:96:54:75:f5:aa:19:07:5f:
c9:d0:2f:bb:aa:0c:a7:71:9e:49:32:16:5e:dd:11:5b:fa:77:
36:13:c1:4b:fe:05:93:91:dd:25:81:a9:19:2c:53:fa:8c:47:
06:ba:93:a4:00:4b:52:df:bb:ba:50:b6:3c:9d:67:51:ab:e3:
f2:46:a0:d6:8a:70:01:1e:45:89:ef:cd:2a:dc:f7:45:01:29:
b9:53:db:a8:4c:45:d5:45:1a:98:99:f7:df:8f:f7:36:c5:c2:
c2:ec:1b:1a:ce:f0:6a:58:d6:d0:32:c0:de:b7:bb:0e:44:be:
98:cd:f9:1d:0d:27:1a:76:1c:94:d0:1c:fc:29:56:34:cd:fa:
01:f3:bf:d4:5e:fb:51:14:e7:ed:82:78:ed:7d:b6:6b:05:85:
db:92:34:b6:39:1f:16:bf:62:8c:2d:96:68:0b:5f:4c:24:39:
f6:58:14:cb:ed:85:0f:93:cd:f9:8f:ff:3b:0d:e0:59:c0:47:
49:ab:1f:bc:38:b2:b1:19:1c:67:26:00:0e:74:50:43:aa:4f:
77:2b:85:06:9d:6b:36:56:3c:bc:6e:13:48:cf:24:6f:b3:52:
48:56:a7:bc:fb:55:8b:cc:7f:af:86:61:de:ed:15:19:71:a8:
d2:c3:6e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:08 2024 by rpki-client on console-fra.rpki-client.org