Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WDg0rQ0J9E44DB0ZRilG5O5jBNY.roa
File: WDg0rQ0J9E44DB0ZRilG5O5jBNY.roa (raw, json)
Hash identifier: DJTTMME86DhSCO3bV2LHSaL0dQqHFtW0pNrw+fGF++s=
Subject key identifier: 58:38:34:AD:0D:09:F4:4E:38:0C:1D:19:46:29:46:E4:EE:63:04:D6
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CDCD753F23296829CD1C1DCA2E8A1D47C
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WDg0rQ0J9E44DB0ZRilG5O5jBNY.roa
Signing time: Sat 06 Jan 2024 03:35:48 +0000
ROA not before: Sat 06 Jan 2024 03:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207252
IP address blocks: 45.133.75.0/24 maxlen: 24
37.221.95.0/24 maxlen: 24
45.84.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Aug 2024 08:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:dc:d7:53:f2:32:96:82:9c:d1:c1:dc:a2:e8:a1:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 6 03:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583834ad0d09f44e380c1d19462946e4ee6304d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:2f:6b:71:e9:8f:44:1e:2c:4e:f3:0c:25:3d:
f1:02:f6:fe:16:59:5b:0d:ae:32:04:81:16:6a:9f:
ae:49:e4:b9:d5:2a:9d:4a:44:43:c8:e9:56:05:26:
72:ae:13:54:45:8f:ec:0f:cc:75:37:d9:1e:64:03:
10:50:66:fe:1a:03:dd:d9:bd:47:d2:40:29:7a:9e:
c4:ef:58:cf:b4:7f:61:98:65:1f:4a:4e:96:64:a2:
68:5c:9f:6e:b3:4e:d4:3a:00:ad:30:df:c5:11:75:
6b:ce:a7:df:0b:06:ba:ff:0d:b7:b0:0b:70:b6:1b:
36:0b:84:21:d5:ec:1f:04:02:6b:30:31:0b:6e:7d:
9f:3c:7f:be:06:95:59:72:74:3f:ca:a3:5a:b3:02:
06:19:8c:cd:ef:fb:a5:fc:17:62:af:a1:3c:94:29:
55:42:17:42:12:23:a7:13:18:90:18:71:84:90:e8:
ab:58:ea:31:fb:77:f5:30:63:21:a7:22:d9:45:f9:
2e:b9:08:1f:38:58:a9:a4:c9:7c:c5:35:ab:8c:a0:
9d:e4:fd:d4:cc:b3:d5:2c:59:8f:2d:0b:24:70:81:
37:71:53:25:3f:61:16:bd:40:2f:96:64:0d:26:24:
07:d0:4a:7d:46:5b:9a:05:4b:ba:23:fb:e6:3d:58:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:38:34:AD:0D:09:F4:4E:38:0C:1D:19:46:29:46:E4:EE:63:04:D6
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WDg0rQ0J9E44DB0ZRilG5O5jBNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.95.0/24
45.84.197.0/24
45.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
36:49:ea:ce:38:9a:73:82:f5:7e:8f:ea:af:51:d2:c7:9a:99:
dd:ca:40:37:32:6c:2d:d1:56:a1:d6:10:dd:bf:06:0c:0d:71:
3c:51:f3:d7:66:be:da:22:df:cf:bf:d7:b8:b0:3b:ba:c2:72:
b2:ef:74:04:ec:c3:cc:d5:4a:7c:ef:5b:ee:7e:2f:a6:b5:bc:
ed:83:30:3b:82:91:a2:d4:1c:85:a2:d7:a0:67:1b:0c:62:bf:
1f:56:d4:a2:f3:ee:8f:f8:71:1b:46:f9:06:03:55:fd:43:41:
49:18:a8:3c:a1:18:43:72:14:d6:14:db:fd:c8:7d:c1:c0:ca:
db:e9:07:b2:2d:1c:5f:de:cc:21:92:fc:78:b5:34:bc:fa:b0:
12:ed:ec:39:37:d2:8e:75:c1:ee:8f:3b:64:e4:c9:cf:31:a4:
ca:fe:f4:95:1c:fe:79:02:14:a3:64:33:fc:d2:24:c2:ab:80:
b1:10:fe:b6:85:52:bd:6a:f0:39:d3:f4:f3:b1:15:60:ae:45:
e4:19:b6:7d:cd:4d:c8:83:21:fb:98:47:72:e0:f0:bc:5c:f3:
0b:ff:69:56:ba:62:92:9f:dc:fe:f0:ce:6c:c8:0a:e8:ba:73:
c8:11:7c:ee:d6:2e:7f:7a:9c:a4:86:0a:ba:45:1d:37:37:92:
1c:79:a6:67
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzc11PyMpaCnNHB3KLoodR8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTA2MDMzNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODM4MzRhZDBkMDlmNDRlMzgwYzFkMTk0NjI5NDZlNGVlNjMwNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgC9rcemPRB4sTvMMJT3xAvb+Fllb
Da4yBIEWap+uSeS51SqdSkRDyOlWBSZyrhNURY/sD8x1N9keZAMQUGb+GgPd2b1H
0kApep7E71jPtH9hmGUfSk6WZKJoXJ9us07UOgCtMN/FEXVrzqffCwa6/w23sAtw
ths2C4Qh1ewfBAJrMDELbn2fPH++BpVZcnQ/yqNaswIGGYzN7/ul/Bdir6E8lClV
QhdCEiOnExiQGHGEkOirWOox+3f1MGMhpyLZRfkuuQgfOFippMl8xTWrjKCd5P3U
zLPVLFmPLQskcIE3cVMlP2EWvUAvlmQNJiQH0Ep9RluaBUu6I/vmPVjnQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFg4NK0NCfROOAwdGUYpRuTuYwTWMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvV0RnMHJRMEo5RTQ0REIwWlJpbEc1TzVqQk5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJd1fAwQA
LVTFAwQALYVLMA0GCSqGSIb3DQEBCwUAA4IBAQA2SerOOJpzgvV+j+qvUdLHmpnd
ykA3Mmwt0Vah1hDdvwYMDXE8UfPXZr7aIt/Pv9e4sDu6wnKy73QE7MPM1Up871vu
fi+mtbztgzA7gpGi1ByFotegZxsMYr8fVtSi8+6P+HEbRvkGA1X9Q0FJGKg8oRhD
chTWFNv9yH3BwMrb6QeyLRxf3swhkvx4tTS8+rAS7ew5N9KOdcHujztk5MnPMaTK
/vSVHP55AhSjZDP80iTCq4CxEP62hVK9avA50/TzsRVgrkXkGbZ9zU3IgyH7mEdy
4PC8XPML/2lWumKSn9z+8M5syArounPIEXzu1i5/epykhgq6RR03N5IceaZn
-----END CERTIFICATE-----
Generated at Thu Aug 1 10:17:14 2024 by rpki-client on console-fra.rpki-client.org