Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wMbNOoVuAAfOnCv7audGe2eYisA.roa
File: wMbNOoVuAAfOnCv7audGe2eYisA.roa (raw, json)
Hash identifier: 01LtLvrgoSvRoI3YU8h8l/yOXPpepM2yS3ti0z/wVV0=
Subject key identifier: C0:C6:CD:3A:85:6E:00:07:CE:9C:2B:FB:6A:E7:46:7B:67:98:8A:C0
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 019424454C59597FA775641E1A97B06CF051
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wMbNOoVuAAfOnCv7audGe2eYisA.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 45.155.254.0/24 maxlen: 24
185.226.181.0/24 maxlen: 24
185.250.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 Jan 2025 19:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4c:59:59:7f:a7:75:64:1e:1a:97:b0:6c:f0:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c0c6cd3a856e0007ce9c2bfb6ae7467b67988ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d9:40:d8:9d:07:3c:aa:35:30:1c:5b:2e:2a:
e8:48:d3:f6:8e:ee:aa:1c:df:e7:d4:5c:41:e5:08:
70:24:42:2c:8c:15:b1:39:a9:6c:9a:73:8f:d4:56:
f1:28:05:e8:44:15:07:23:b5:08:64:ab:64:8a:93:
11:c8:f1:98:5a:37:62:93:27:12:db:2d:b3:49:e0:
21:07:6e:69:a2:81:eb:01:d2:f0:28:be:de:bc:a4:
32:b0:be:15:b1:f2:3e:0d:03:ba:8a:0c:d4:f3:a1:
ff:84:ea:05:e9:0f:39:2b:17:61:98:b6:25:da:20:
5f:22:c6:b3:24:bd:3e:4a:32:ec:92:c8:1b:33:e9:
f6:2c:5f:58:8c:b9:45:f1:da:7c:25:37:ea:6a:a0:
85:70:cd:35:dd:e0:ac:a7:3a:e2:24:7b:53:01:bd:
22:fe:04:63:86:12:73:3e:46:9c:9e:92:9a:f1:91:
d7:c6:5f:07:eb:99:8a:cf:ef:4b:f1:87:11:41:9f:
75:4a:20:0d:37:b4:8f:e9:4d:1a:a2:61:af:bd:bc:
de:ec:aa:50:1a:8d:79:82:79:81:1d:89:07:e8:18:
bd:38:b8:7a:17:be:a1:5f:c0:e9:f9:9e:72:f1:7c:
e5:26:5c:c8:88:85:66:47:0a:69:b7:34:69:41:13:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C6:CD:3A:85:6E:00:07:CE:9C:2B:FB:6A:E7:46:7B:67:98:8A:C0
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/wMbNOoVuAAfOnCv7audGe2eYisA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.254.0/24
185.226.181.0/24
185.250.26.0/24
Signature Algorithm: sha256WithRSAEncryption
91:92:d7:c5:ca:4c:14:03:fe:02:2e:de:09:94:52:8b:24:9e:
4e:35:ec:f2:b4:90:51:c9:97:d2:45:69:7b:c7:66:47:d3:f1:
d7:ca:2c:f5:8e:ca:82:03:0b:e1:72:7d:6b:8b:9b:21:7a:dc:
b7:83:fa:45:64:24:3f:40:34:4e:05:a8:af:52:6d:c1:0b:a3:
bd:09:0a:bb:33:17:99:07:e3:46:c3:c7:a9:ad:a4:b4:00:a9:
48:34:f2:71:24:62:ce:bb:17:dd:20:09:83:11:53:16:5f:6a:
c6:ea:3c:7d:96:cc:cd:e5:bb:7e:58:23:ce:80:ce:cc:7b:e0:
38:85:f9:27:54:1a:1c:1f:c7:c8:74:d1:48:58:ae:88:18:c1:
6e:e9:17:85:f4:b6:f4:47:7f:31:ef:b2:fa:58:aa:db:5a:e7:
b1:ca:c8:72:d7:e4:d2:ca:2f:68:b4:6b:f0:8a:5f:8f:b4:db:
43:a3:9f:06:86:58:ef:55:9e:07:20:df:92:59:37:05:4e:1c:
0a:bb:e9:02:36:64:c2:e8:b3:fc:44:24:0d:5b:45:dd:c2:b2:
3c:1f:f6:19:5f:47:29:19:1d:62:07:0f:a1:52:09:f3:34:0d:
d0:1b:2b:3a:2b:4b:59:aa:99:11:05:5e:64:59:21:ad:bd:29:
89:51:44:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 19:04:52 2025 by rpki-client