Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HWYylLjjz8bxHl-ZWfYJiewhv3w.roa
File: HWYylLjjz8bxHl-ZWfYJiewhv3w.roa (raw, json)
Hash identifier: kqaRkJX6VCWh2cmn+lt7CMbLzO4w0TiVwX3JCQdSl+k=
Subject key identifier: 1D:66:32:94:B8:E3:CF:C6:F1:1E:5F:99:59:F6:09:89:EC:21:BF:7C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01929AEDECF2AFAF853F0FB3F82965C5CD5D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HWYylLjjz8bxHl-ZWfYJiewhv3w.roa
Signing time: Thu 17 Oct 2024 14:42:16 +0000
ROA not before: Thu 17 Oct 2024 14:42:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.13.190.0/24 maxlen: 24
45.94.170.0/24 maxlen: 24
91.223.110.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 19:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9a:ed:ec:f2:af:af:85:3f:0f:b3:f8:29:65:c5:cd:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 17 14:42:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d663294b8e3cfc6f11e5f9959f60989ec21bf7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:97:7e:77:06:aa:09:e1:44:ca:5f:05:2c:
05:ff:b5:95:7d:b4:8f:4f:8f:99:29:65:72:27:93:
60:b3:50:27:a3:22:f3:9c:2b:c2:0a:92:68:d7:2c:
aa:b4:f9:fe:5d:18:f5:2c:3f:38:d9:1e:e5:fa:f3:
d6:b5:55:a3:a1:5a:3b:88:c1:fa:12:41:67:7b:56:
93:83:0b:38:3c:b5:7c:7c:05:34:cc:b6:72:ea:1f:
a5:2b:1e:ad:9a:fc:6e:61:6b:bd:eb:53:78:c2:78:
cf:b8:27:1e:ee:90:70:9d:13:ed:2e:cb:d0:e7:36:
17:48:b9:3a:68:e6:ca:70:ef:fe:09:78:6b:67:ae:
03:a8:b8:dc:f6:8c:e8:0f:2d:16:10:ce:f3:ad:54:
af:74:e0:41:8c:b7:be:97:ec:2d:e2:13:88:00:1e:
b7:4f:87:81:80:04:3d:65:7c:c0:e1:d5:f4:98:74:
9e:09:4e:98:3e:35:7c:e3:ef:e4:c7:ab:c7:28:d4:
44:e0:b7:ed:16:b6:69:9c:d4:58:86:66:e6:01:b6:
78:9f:82:86:4f:17:72:c1:d4:a1:9b:82:1b:f2:88:
ca:1d:f4:ad:e5:ac:ed:44:9f:e0:5b:1d:94:5e:30:
86:e1:5b:c5:8a:b9:37:ea:8d:a7:48:6c:22:4b:cc:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:32:94:B8:E3:CF:C6:F1:1E:5F:99:59:F6:09:89:EC:21:BF:7C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HWYylLjjz8bxHl-ZWfYJiewhv3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.13.190.0/24
45.94.170.0/24
91.223.110.0/24
195.211.188.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:5c:2a:67:1d:b1:6a:d5:b4:b9:3a:4d:81:2a:a3:c0:6a:b5:
2b:ed:14:25:f9:1f:7f:d9:31:c2:25:b7:b8:83:c4:2f:17:7c:
af:c1:69:ed:f7:2e:fe:48:71:67:f9:30:93:f6:ce:4f:aa:2d:
bf:c9:20:77:3a:1f:99:d3:e3:62:fa:1a:3b:9f:61:4a:46:5a:
53:53:f4:34:9d:07:88:7a:ff:40:8b:7f:be:4d:fa:86:fd:e3:
e5:fe:d4:f5:28:75:57:04:bb:40:1d:3b:73:12:66:59:cd:0e:
f1:1f:dd:1c:e7:f2:5e:3e:01:b4:02:72:a0:17:73:f8:b2:6d:
40:b3:f7:05:e3:f2:a1:ff:c6:52:8d:13:a0:4b:56:d9:d7:65:
cc:c1:f3:5f:24:bf:c5:fe:d0:45:be:a9:70:77:0e:9b:0a:ff:
20:8a:eb:db:4b:c1:e6:30:6d:11:05:46:cc:7f:67:e0:a7:d0:
7e:71:06:a7:10:68:9d:5b:71:d4:da:3e:44:8e:67:3e:d1:a8:
eb:14:4d:e5:84:44:fe:b7:00:44:5e:5a:0d:a0:bd:97:f3:6a:
1d:87:53:f4:3c:2c:2d:03:03:37:9d:9d:44:ce:a6:1b:a0:02:
cc:42:fd:3c:0b:df:62:8d:fb:13:c4:69:96:3a:5f:be:ba:0c:
b9:02:0b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 30 21:37:28 2024 by rpki-client on console-fra.rpki-client.org