Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/WrG176JARKx2lNeRwEYFMnF7INo.roa
File: WrG176JARKx2lNeRwEYFMnF7INo.roa (raw, json)
Hash identifier: BBN4/FpILNKTyaQtDtbGJgtX6V27XRqAI2rdFu/9S2Y=
Subject key identifier: 5A:B1:B5:EF:A2:40:44:AC:76:94:D7:91:C0:46:05:32:71:7B:20:DA
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018F56BAD814A059977372F5173967B43942
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/WrG176JARKx2lNeRwEYFMnF7INo.roa
Signing time: Wed 08 May 2024 05:43:56 +0000
ROA not before: Wed 08 May 2024 05:43:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 45.129.242.0/24 maxlen: 24
91.230.47.0/24 maxlen: 24
185.131.207.0/24 maxlen: 24
185.148.68.0/24 maxlen: 24
185.148.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 06:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:56:ba:d8:14:a0:59:97:73:72:f5:17:39:67:b4:39:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: May 8 05:43:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ab1b5efa24044ac7694d791c0460532717b20da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:78:81:33:8f:15:e7:83:d3:2d:78:4f:c4:b4:
1b:55:56:c4:9a:ae:04:40:e1:72:bf:01:73:e5:5a:
99:8c:9e:74:8f:98:f0:23:70:42:b9:ec:5e:08:c6:
e8:94:01:a5:66:c5:f1:36:32:10:25:f0:43:5a:fe:
da:1e:03:90:5b:50:59:dd:d3:93:6a:be:7c:1d:8b:
a8:a2:5e:b4:43:8c:d0:62:d9:19:54:37:44:0d:ac:
78:a3:77:11:85:7b:b9:24:1b:ff:fe:ff:98:1e:eb:
4c:59:3f:32:12:d1:61:50:82:30:49:da:bd:90:cf:
81:bc:c9:8a:c7:53:e5:35:bf:26:7e:83:9b:30:dc:
0b:d9:d3:cd:0c:7a:cc:88:88:4c:75:70:21:e5:37:
fc:08:2f:c0:f3:2b:20:57:a7:92:5e:8d:30:74:c5:
68:9b:ba:2c:49:95:15:ed:52:f4:75:d6:94:ae:78:
32:23:64:10:b8:9b:7e:37:0b:e6:ea:bf:a8:54:c1:
1e:36:78:d7:e4:0a:8b:f9:98:d0:b7:22:52:e1:15:
32:4f:75:70:a9:41:7a:44:6a:05:3a:c7:2d:c8:3d:
1a:dd:33:f6:4b:59:52:fa:b8:f1:ce:fa:b3:e1:11:
f2:bc:ee:5b:1c:18:9d:a5:67:2d:77:d3:7c:8e:a5:
fa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B1:B5:EF:A2:40:44:AC:76:94:D7:91:C0:46:05:32:71:7B:20:DA
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/WrG176JARKx2lNeRwEYFMnF7INo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.242.0/24
91.230.47.0/24
185.131.207.0/24
185.148.68.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:bf:7f:eb:cf:e9:56:a0:ae:90:f8:71:9f:db:ac:99:94:37:
a8:e3:d5:7d:c7:20:79:32:e0:c8:99:1c:06:ae:f9:11:57:4a:
ea:eb:fd:50:84:91:03:1e:35:fb:b6:2e:88:f0:d7:92:fb:0d:
62:ef:7b:cf:81:0c:fd:a5:f6:e9:76:d0:11:a6:29:15:b4:33:
c1:91:00:10:cb:7b:ee:21:08:73:ad:13:ba:16:73:a1:b8:70:
ca:58:29:89:3b:64:a7:8d:2a:38:51:fb:9a:9c:8d:d1:4d:f4:
34:68:6d:b6:16:66:4b:6a:ef:b4:36:11:ac:ad:2a:44:11:8b:
55:e9:a5:b6:ef:9a:30:cf:19:a6:07:af:84:56:b4:10:f1:62:
9e:08:4c:88:05:d0:67:1b:da:1c:b8:12:12:52:68:fc:5a:b9:
50:f4:81:62:f4:06:90:c3:c9:cd:99:69:55:79:07:3a:ae:6f:
2e:dc:c6:c6:dd:00:25:f2:24:cb:74:1e:f6:80:7b:2d:0b:17:
1c:6f:87:cf:e4:dc:f0:82:21:c4:f5:1a:da:4e:60:1e:90:23:
5f:7e:63:b6:ce:b7:90:0d:d6:c4:f9:96:0f:50:0c:0d:ae:d5:
3e:b0:8f:2f:f7:c4:ba:0a:ff:25:e0:f0:7f:e8:65:2b:88:47:
35:f0:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:37 2024 by rpki-client on console-fra.rpki-client.org