Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/Wo1UlPVn0EKYAe7353HUXu26UpE.roa
File: Wo1UlPVn0EKYAe7353HUXu26UpE.roa (raw, json)
Hash identifier: wZjQGaWZZWZrTHChNNBBknEQ5Op5yNzQy+103qP2ZwU=
Subject key identifier: 5A:8D:54:94:F5:67:D0:42:98:01:EE:F7:E7:71:D4:5E:ED:BA:52:91
Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Certificate serial: 019404FA485FC5EEE6D8860734B1BB1A4AB8
Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/Wo1UlPVn0EKYAe7353HUXu26UpE.roa
Signing time: Thu 26 Dec 2024 21:58:18 +0000
ROA not before: Thu 26 Dec 2024 21:58:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49468
IP address blocks: 45.13.36.0/24 maxlen: 24
45.13.215.0/24 maxlen: 24
45.129.12.0/24 maxlen: 24
45.134.49.0/24 maxlen: 24
45.148.8.0/24 maxlen: 24
193.29.12.0/24 maxlen: 24
193.32.160.0/24 maxlen: 24
193.32.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:04:fa:48:5f:c5:ee:e6:d8:86:07:34:b1:bb:1a:4a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf
Validity
Not Before: Dec 26 21:58:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a8d5494f567d0429801eef7e771d45eedba5291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:a3:cf:6a:b7:1c:79:46:54:fc:75:06:fb:
bb:c3:9e:54:ae:d4:55:e7:3e:dc:cb:4b:11:d8:46:
ec:10:4e:84:fc:46:86:85:ab:2b:50:d4:82:4b:84:
5c:ea:b6:19:48:42:d0:70:fb:58:00:ff:80:79:be:
24:3f:de:6f:dc:8c:68:8d:31:94:5d:12:2c:61:a2:
4a:0c:50:e7:64:df:8f:10:46:8d:25:c8:8b:d7:87:
1f:cd:68:42:f6:e2:15:01:0f:fb:cf:80:f8:ae:4d:
78:76:04:a8:4a:e7:25:0f:c5:2b:4f:27:c7:df:3c:
82:c7:29:aa:99:71:7e:af:c5:41:4f:cc:25:43:17:
1c:1c:ae:48:be:d1:14:22:f6:d1:3f:83:8e:4c:57:
69:96:1b:2b:87:3d:35:74:40:58:78:3c:f1:a3:d7:
a7:1c:38:86:de:90:e1:f8:2e:06:d0:45:b2:22:02:
cd:e4:d2:c7:f0:86:8f:41:ce:ec:6f:fa:70:19:1b:
c2:a1:95:1f:77:26:c3:82:80:a0:69:5d:2a:16:78:
70:e4:74:a5:0d:5a:19:a3:7a:ca:5b:34:03:96:b7:
e1:2e:5b:83:18:a9:fc:10:bf:1a:0d:76:33:fa:fb:
5e:b5:c5:a5:22:ad:1f:2f:b3:df:9e:3b:46:97:19:
5a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:54:94:F5:67:D0:42:98:01:EE:F7:E7:71:D4:5E:ED:BA:52:91
X509v3 Authority Key Identifier:
keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/Wo1UlPVn0EKYAe7353HUXu26UpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.36.0/24
45.13.215.0/24
45.129.12.0/24
45.134.49.0/24
45.148.8.0/24
193.29.12.0/24
193.32.160.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:4b:f1:81:0b:af:84:37:99:e7:64:b2:37:b8:ab:62:e9:cb:
79:cc:f4:d5:4c:98:0d:f8:3f:f6:b8:c9:9c:2c:16:3c:66:26:
b0:f8:68:b8:eb:ee:1f:29:6c:4b:59:ff:cf:dc:e4:86:cc:c7:
87:11:47:92:e4:69:80:cc:77:04:a3:f3:da:ee:c2:bb:30:99:
80:9e:0f:75:9a:05:f8:fe:6d:7d:37:b2:22:63:bf:c9:cc:87:
ed:e3:cc:78:a4:19:8f:5e:fc:d4:53:7d:7a:ae:b2:85:01:0f:
59:c6:4a:55:11:d3:6a:22:3f:8a:62:43:77:64:17:ff:4c:d3:
22:86:33:89:6c:4c:6b:d6:b8:00:0a:eb:d7:83:1d:14:2b:83:
db:37:88:1b:ab:bd:a9:7a:db:a0:22:5f:8f:a5:57:50:cb:14:
3c:cf:2d:59:7e:c6:1a:99:1a:2c:a4:c0:0d:75:61:25:d9:a3:
20:ef:aa:24:77:83:ce:5a:64:41:49:11:d5:71:31:39:ec:f4:
ef:8b:a5:87:14:f4:90:be:1b:da:d2:e9:48:56:17:9b:43:76:
00:31:f7:7f:b1:1c:b7:88:5a:f6:06:00:06:f0:71:6f:63:e0:
b8:b4:c1:01:a8:99:63:d0:21:eb:7c:7a:ad:96:77:21:6e:d7:
5c:43:0c:40
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQE+khfxe7m2IYHNLG7Gkq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk
NTJiYmYwHhcNMjQxMjI2MjE1ODE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YThkNTQ5NGY1NjdkMDQyOTgwMWVlZjdlNzcxZDQ1ZWVkYmE1MjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Kijz2q3HHlGVPx1Bvu7w55UrtRV
5z7cy0sR2EbsEE6E/EaGhasrUNSCS4Rc6rYZSELQcPtYAP+Aeb4kP95v3IxojTGU
XRIsYaJKDFDnZN+PEEaNJciL14cfzWhC9uIVAQ/7z4D4rk14dgSoSuclD8UrTyfH
3zyCxymqmXF+r8VBT8wlQxccHK5IvtEUIvbRP4OOTFdplhsrhz01dEBYeDzxo9en
HDiG3pDh+C4G0EWyIgLN5NLH8IaPQc7sb/pwGRvCoZUfdybDgoCgaV0qFnhw5HSl
DVoZo3rKWzQDlrfhLluDGKn8EL8aDXYz+vtetcWlIq0fL7PfnjtGlxlapwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFFqNVJT1Z9BCmAHu9+dx1F7tulKRMB8GA1UdIwQY
MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt
NDZlZTU3OGEwYmZlLzEvV28xVWxQVm4wRUtZQWU3MzUzSFVYdTI2VXBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl
LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQALQ0kAwQA
LQ3XAwQALYEMAwQALYYxAwQALZQIAwQAwR0MAwQBwSCgMA0GCSqGSIb3DQEBCwUA
A4IBAQB7S/GBC6+EN5nnZLI3uKti6ct5zPTVTJgN+D/2uMmcLBY8Ziaw+Gi46+4f
KWxLWf/P3OSGzMeHEUeS5GmAzHcEo/Pa7sK7MJmAng91mgX4/m19N7IiY7/JzIft
48x4pBmPXvzUU316rrKFAQ9ZxkpVEdNqIj+KYkN3ZBf/TNMihjOJbExr1rgACuvX
gx0UK4PbN4gbq72petugIl+PpVdQyxQ8zy1ZfsYamRospMANdWEl2aMg76okd4PO
WmRBSRHVcTE57PTvi6WHFPSQvhva0ulIVhebQ3YAMfd/sRy3iFr2BgAG8HFvY+C4
tMEBqJlj0CHrfHqtlnchbtdcQwxA
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:42:30 2025 by rpki-client