Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/wlhFkvdXZZr4xT9-JVwgu75iWAc.roa
File: wlhFkvdXZZr4xT9-JVwgu75iWAc.roa (raw, json)
Hash identifier: WRT+2sxKRHgiel4b3mA7V5nKqDGA2GMbnn9FP13RitM=
Subject key identifier: C2:58:45:92:F7:57:65:9A:F8:C5:3F:7E:25:5C:20:BB:BE:62:58:07
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 0194266C3762E1F64427E7A599A50D8D4DA5
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/wlhFkvdXZZr4xT9-JVwgu75iWAc.roa
Signing time: Thu 02 Jan 2025 09:50:13 +0000
ROA not before: Thu 02 Jan 2025 09:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 43.226.0.0/23 maxlen: 23
46.17.217.0/24 maxlen: 24
63.251.117.0/24 maxlen: 24
64.95.150.0/23 maxlen: 23
64.225.244.0/23 maxlen: 23
91.198.19.0/24 maxlen: 24
91.246.38.0/24 maxlen: 24
103.94.60.0/22 maxlen: 22
103.199.80.0/24 maxlen: 24
104.225.253.0/24 maxlen: 24
117.18.104.0/24 maxlen: 24
123.100.227.0/24 maxlen: 24
148.222.40.0/22 maxlen: 22
167.234.38.0/24 maxlen: 24
198.49.103.0/24 maxlen: 24
202.2.60.0/22 maxlen: 22
203.27.201.0/24 maxlen: 24
216.183.120.0/24 maxlen: 24
216.203.15.0/24 maxlen: 24
217.11.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 17 Jan 2025 01:15:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:37:62:e1:f6:44:27:e7:a5:99:a5:0d:8d:4d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c2584592f757659af8c53f7e255c20bbbe625807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:d4:dd:37:4b:e9:2a:6d:12:fa:b9:4e:f6:
5f:fe:4c:e9:05:be:96:4a:2b:4b:57:80:bf:fa:e1:
18:77:69:df:2e:bf:71:a7:9d:a2:32:42:e8:80:d4:
d4:4f:3c:49:c3:98:8d:8e:75:4d:58:96:8b:4d:ce:
2c:c2:96:8b:5c:4a:e2:c9:08:2b:40:d6:d5:81:59:
4f:69:be:47:b8:a2:71:d7:56:3e:34:a0:72:fb:d6:
f4:87:72:6e:8c:47:4c:13:13:bb:3f:6b:09:e1:ff:
c7:e3:7e:d5:a3:fd:9a:94:d2:8e:7e:f7:f4:1c:1c:
00:0a:4b:f8:94:b9:5f:2c:60:fa:8e:f9:16:10:b8:
74:b0:a2:c6:c6:dc:3e:be:9e:be:83:f8:b7:4e:f0:
ae:99:db:37:2d:73:54:57:0e:0d:56:65:6b:02:84:
44:26:01:ea:5f:90:78:a7:32:9f:fa:8b:8c:e6:e4:
02:64:c5:99:8e:23:15:69:af:d0:7b:8b:72:54:9e:
d7:24:be:56:8a:2c:ef:88:3d:e1:44:d3:42:dc:e6:
f2:cd:ed:18:0d:76:9a:30:9c:71:31:dd:17:b6:9c:
6a:b4:67:a8:86:88:93:52:1d:9f:36:ba:05:d0:ee:
d6:f6:3e:81:54:8e:0d:3c:b0:14:bb:3f:0d:9d:35:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:45:92:F7:57:65:9A:F8:C5:3F:7E:25:5C:20:BB:BE:62:58:07
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/wlhFkvdXZZr4xT9-JVwgu75iWAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.0.0/23
46.17.217.0/24
63.251.117.0/24
64.95.150.0/23
64.225.244.0/23
91.198.19.0/24
91.246.38.0/24
103.94.60.0/22
103.199.80.0/24
104.225.253.0/24
117.18.104.0/24
123.100.227.0/24
148.222.40.0/22
167.234.38.0/24
198.49.103.0/24
202.2.60.0/22
203.27.201.0/24
216.183.120.0/24
216.203.15.0/24
217.11.174.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:c7:9d:f6:41:da:e2:bb:2c:cc:75:d8:b9:19:eb:6a:58:5d:
2b:39:c7:65:d4:56:83:e5:88:0e:46:16:dc:4b:b7:e1:3f:3b:
35:46:31:4b:2d:a9:c9:40:fc:5c:25:1f:81:df:65:07:8f:d7:
48:b8:5a:ef:0f:18:10:6e:8b:4e:0c:3e:7e:59:54:01:af:92:
9d:58:87:dd:b3:0a:1c:34:7b:1c:8c:4f:63:61:1a:87:72:7b:
fd:a1:e2:8c:c4:01:06:68:7d:76:a9:c2:1e:76:b7:15:c0:2e:
b6:70:5c:26:44:17:23:cb:5d:b1:b1:00:d8:01:4f:b3:53:29:
4c:18:57:c2:74:1b:dc:3c:f3:be:e5:44:16:16:05:3d:7e:9a:
46:14:38:53:45:50:90:9f:5c:ae:e7:29:61:49:1a:82:e1:f7:
6e:47:38:9e:92:06:eb:89:db:fc:7c:40:ca:87:76:3e:ae:e8:
7a:8e:ce:71:9a:53:52:cb:cb:e8:2e:3b:1a:fa:c2:4a:6a:d3:
87:7e:8b:43:b1:a4:5a:87:4b:0e:ce:48:99:13:59:2a:0f:6e:
f6:4a:77:f5:07:1a:a5:e5:d2:71:c8:69:a5:22:ef:20:f7:5c:
90:a1:b0:90:02:cc:82:60:ac:c4:67:8b:56:af:1d:32:e2:27:
6f:46:45:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:11:37 2025 by rpki-client