Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WrqbphiXAMu7NS3XE1g3EjU1LpI.roa
File: WrqbphiXAMu7NS3XE1g3EjU1LpI.roa (raw, json)
Hash identifier: Ic1NxVczOPF3cuYBA/hPd32jJoaKsbigsUb/EccJjwA=
Subject key identifier: 5A:BA:9B:A6:18:97:00:CB:BB:35:2D:D7:13:58:37:12:35:35:2E:92
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019427489B6FDA357B1ADCD6B20B097D4589
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WrqbphiXAMu7NS3XE1g3EjU1LpI.roa
Signing time: Thu 02 Jan 2025 13:50:57 +0000
ROA not before: Thu 02 Jan 2025 13:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204174
IP address blocks: 45.92.218.0/23 maxlen: 23
45.92.218.0/24 maxlen: 24
45.92.219.0/24 maxlen: 24
45.134.38.0/24 maxlen: 24
45.152.162.0/23 maxlen: 23
45.152.162.0/24 maxlen: 24
45.152.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 12 Jan 2025 09:45:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:9b:6f:da:35:7b:1a:dc:d6:b2:0b:09:7d:45:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 13:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aba9ba6189700cbbb352dd71358371235352e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:cb:9d:27:0e:09:31:5c:01:9b:53:d6:e7:
0c:6d:3d:28:eb:5b:e1:1b:02:28:c8:4d:df:9c:a1:
96:00:d9:63:b4:20:88:75:4f:b7:e1:72:26:06:fb:
15:e2:78:7f:30:2b:f2:18:b3:13:67:e9:d7:cc:be:
0b:d9:66:58:20:e8:bf:a0:6a:d7:0c:85:ae:35:42:
26:7a:7b:1e:a8:19:3b:7f:2c:d0:7a:e2:50:7a:cf:
03:48:7c:c6:fd:4e:5d:c2:be:01:f6:5e:a6:90:58:
48:d5:4c:37:0f:8f:35:d5:2f:eb:6c:ae:b4:8a:1c:
52:d1:e6:4c:fd:c7:c4:03:a2:9d:c4:0a:40:0e:13:
b5:a3:20:6f:0c:73:e8:82:0a:51:00:58:f2:87:81:
11:6d:2e:7d:ce:e5:4d:58:9b:3b:a4:6d:be:f7:f6:
20:95:22:9e:f7:63:e3:04:c6:f1:1c:81:93:33:58:
00:09:20:43:66:48:1b:ba:aa:4a:73:86:4f:03:15:
fa:4e:e4:60:12:a8:a8:7a:f8:91:7d:45:33:3a:47:
8b:f7:bd:dc:6e:c5:0d:68:14:08:90:85:c5:4b:b0:
f5:e0:9d:c9:d2:97:f8:1f:75:3d:dc:4e:ff:dd:36:
7b:db:68:6b:c1:b6:d3:01:a2:fe:75:38:0f:ea:b0:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BA:9B:A6:18:97:00:CB:BB:35:2D:D7:13:58:37:12:35:35:2E:92
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WrqbphiXAMu7NS3XE1g3EjU1LpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.218.0/23
45.134.38.0/24
45.152.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:bc:e9:18:6b:bc:ef:5e:03:da:30:e9:df:c4:42:aa:44:a7:
97:b4:41:3a:5a:5a:16:27:a3:56:6e:3e:f8:7a:ba:5c:f6:16:
37:7e:85:03:2b:b7:64:a0:2f:e6:fe:04:5f:ed:70:2b:c1:e9:
96:5a:5b:eb:34:65:b5:92:f4:2e:78:71:6e:5f:13:64:ff:ff:
70:11:fe:e5:5a:1a:cc:a0:b9:31:44:87:5d:5b:14:5c:f5:f1:
cd:c3:2b:cb:63:c7:83:4e:dd:62:a7:e7:f9:ae:49:c7:42:09:
32:c9:8d:8a:b4:ac:13:b6:2d:89:79:aa:d6:46:9e:14:31:41:
aa:a0:1e:b0:84:90:29:59:6f:1a:c3:dd:31:f4:47:89:46:71:
8e:bc:74:67:ea:09:57:42:9e:c5:6c:e8:7f:4f:40:5d:c3:3c:
30:7f:69:e7:4f:79:e9:9b:bb:6e:63:00:12:68:78:c5:bf:8f:
41:d3:03:ea:57:ab:b8:dd:94:93:08:b3:7c:4b:90:94:e9:a0:
68:4a:06:ca:2f:7b:59:9f:40:e0:70:51:a5:dd:50:2a:c2:40:
42:95:0b:60:58:63:6e:69:c4:19:b3:8f:e1:f1:72:ac:05:dc:
8b:80:81:40:e5:1c:61:33:af:d6:69:ef:ee:fa:11:20:2e:dd:
cd:f3:c7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:10 2025 by rpki-client