Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/WyHuD0npsDH02-JWn29bJTKXKk8.roa
File: WyHuD0npsDH02-JWn29bJTKXKk8.roa (raw, json)
Hash identifier: E/ZcUlWPkyB/kNqfv4Hv1kgv0mkUkZkSmS3KcqFcpiA=
Subject key identifier: 5B:21:EE:0F:49:E9:B0:31:F4:DB:E2:56:9F:6F:5B:25:32:97:2A:4F
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 01856E8B40FBDA7BEC0E81C09E7F823D6482
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/WyHuD0npsDH02-JWn29bJTKXKk8.roa
Signing time: Sun 01 Jan 2023 18:14:57 +0000
ROA not before: Sun 01 Jan 2023 18:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48579
IP address blocks: 185.141.30.0/23 maxlen: 24
217.61.244.0/22 maxlen: 24
185.24.132.0/22 maxlen: 24
212.237.144.0/22 maxlen: 24
91.197.40.0/22 maxlen: 24
212.237.148.0/22 maxlen: 24
2a07:2180::/32 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Mar 2023 19:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:40:fb:da:7b:ec:0e:81:c0:9e:7f:82:3d:64:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jan 1 18:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b21ee0f49e9b031f4dbe2569f6f5b2532972a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:ce:1b:a6:5c:54:06:09:f5:b1:d1:07:1c:
3e:28:90:eb:d0:85:50:65:a1:2c:0d:11:18:d9:9b:
f0:8d:36:89:04:fc:44:ec:4c:8e:aa:ee:5f:6f:ff:
ba:57:be:4e:67:c2:7e:f9:df:76:08:cd:51:ad:7a:
c2:42:8f:47:2a:28:a3:56:94:70:47:30:d3:dd:82:
cd:e9:b5:00:9a:4a:d5:cd:8a:f7:70:c9:88:f9:33:
d8:fc:e4:0b:5f:ec:22:90:c6:56:23:b2:d2:29:23:
9c:89:cb:16:cc:2a:38:eb:71:a5:c2:05:ae:1f:c9:
23:cf:2d:29:76:77:7c:3e:c5:8c:26:f5:ee:c6:e7:
76:fd:ac:3a:38:1e:71:1f:db:f6:04:c0:4e:30:29:
72:03:69:20:cc:b9:25:13:76:59:f2:e7:c4:94:a2:
dc:f2:4f:b2:2b:6d:95:0a:79:b5:27:cb:91:84:e5:
6c:b4:8f:e2:25:54:a2:4c:c8:77:44:95:8a:61:24:
5e:73:52:4f:d0:b7:72:eb:5e:c2:67:1b:27:0d:4e:
7f:d7:c3:7c:d5:18:7e:85:63:c1:0f:bb:7a:07:5d:
c2:07:7d:72:d5:94:fd:d4:b3:cf:d2:12:84:19:bd:
9e:67:cd:d8:3c:03:59:fe:90:52:84:1c:e7:18:9b:
7f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:21:EE:0F:49:E9:B0:31:F4:DB:E2:56:9F:6F:5B:25:32:97:2A:4F
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/WyHuD0npsDH02-JWn29bJTKXKk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.40.0/22
185.24.132.0/22
185.141.30.0/23
212.237.144.0/21
217.61.244.0/22
IPv6:
2a07:2180::/32
Signature Algorithm: sha256WithRSAEncryption
88:2a:99:1a:1d:f1:a8:eb:6e:70:ff:15:7d:a4:a6:aa:5c:cf:
8c:a4:94:a4:af:e5:d5:4e:f5:4e:1a:dd:df:77:97:59:ee:1c:
62:27:53:c1:6d:a2:27:5f:44:a4:f7:d9:26:62:6e:2f:ce:06:
58:27:5d:4b:b9:29:dd:6b:2e:a2:c8:16:ec:79:90:e8:e3:50:
29:ad:2d:0f:5e:2a:1d:a1:e6:86:f7:83:7e:f1:ea:7c:e6:f3:
00:8b:20:29:e1:ed:62:04:31:37:70:af:ce:aa:3a:0f:07:ee:
19:59:6d:b1:56:13:af:3f:c2:8f:0e:6d:14:44:d0:70:00:55:
e2:3e:5e:c1:a3:73:fa:82:9d:7c:a0:2d:2d:ba:d9:74:2b:41:
9e:6c:9a:07:2f:2a:43:fe:a2:2f:9d:42:8c:30:88:9d:20:9c:
f4:9c:78:35:73:61:c4:d8:47:9c:b7:51:23:c8:5b:b2:3d:58:
4e:54:57:ee:e4:d4:ab:d5:28:33:24:dd:5b:53:1d:12:ba:56:
22:d2:bf:96:40:0a:0c:eb:a7:48:ff:f9:e5:ca:6e:4a:05:de:
7e:41:7e:b9:a9:d8:1c:01:99:ff:86:48:44:50:1b:a4:87:41:
7d:e4:ed:60:bf:3c:d4:52:89:6e:4d:f1:2a:30:b9:f5:e4:65:
eb:07:0d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:54 2024 by rpki-client on console-ams.rpki-client.org