Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WWru5rlotN62wmQcnz7t3oa3f4Y.roa
File: WWru5rlotN62wmQcnz7t3oa3f4Y.roa (raw, json)
Hash identifier: 68wD8sfN2V1ivXItu+MRwil0sG1qO8w1fTxQEeFpJpw=
Subject key identifier: 59:6A:EE:E6:B9:68:B4:DE:B6:C2:64:1C:9F:3E:ED:DE:86:B7:7F:86
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191C5085295EA27B1F5AA110B40D103F16A
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WWru5rlotN62wmQcnz7t3oa3f4Y.roa
Signing time: Fri 06 Sep 2024 01:52:22 +0000
ROA not before: Fri 06 Sep 2024 01:52:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.156.222.0/24 maxlen: 24
185.233.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 13:04:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c5:08:52:95:ea:27:b1:f5:aa:11:0b:40:d1:03:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 6 01:52:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=596aeee6b968b4deb6c2641c9f3eedde86b77f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:da:b6:24:ee:53:a9:43:00:42:c8:c0:de:
10:8c:b7:9a:be:e3:3e:13:1a:72:05:f7:76:4e:bd:
f4:bb:4f:15:af:f2:7d:0e:09:a6:f9:44:eb:13:6d:
90:46:3c:d2:42:af:df:43:78:64:dd:9b:58:ce:00:
2c:6e:67:e4:63:66:1b:d8:2e:c4:b3:5a:3e:09:be:
09:25:8e:61:34:ce:39:ef:d9:25:65:7f:17:a5:80:
d8:6c:db:72:64:24:4e:2c:82:7f:4c:a4:bd:3c:df:
f3:53:b3:a0:3c:37:2b:f0:98:a7:d9:4a:8a:cb:de:
a7:3f:84:c2:fd:12:ad:34:8b:8d:e7:8a:23:81:e5:
c3:f0:ae:44:ff:7d:5d:81:25:4a:9f:6c:1b:08:9a:
a7:de:b1:dc:8d:b7:cd:88:b3:a5:57:3b:3e:0c:c7:
54:e0:70:a8:76:0e:7f:c5:af:97:b1:c5:2f:7c:43:
51:70:cd:fc:33:d2:0f:f2:de:78:7c:63:0b:db:48:
af:58:ab:75:7b:82:86:6c:d6:ff:83:ed:dc:59:83:
12:11:ce:0c:fa:84:8a:d0:b2:b1:1c:90:f3:12:9e:
1f:98:4e:b9:bc:95:27:8c:8e:83:e6:62:32:2a:0a:
2c:c6:e0:01:9e:9f:e1:0b:ba:a5:c6:7f:36:8e:c5:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6A:EE:E6:B9:68:B4:DE:B6:C2:64:1C:9F:3E:ED:DE:86:B7:7F:86
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/WWru5rlotN62wmQcnz7t3oa3f4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.222.0/24
185.233.17.0/24
Signature Algorithm: sha256WithRSAEncryption
62:a9:ae:33:4c:3d:4c:c5:91:e3:72:92:35:6f:c9:bb:2d:c2:
19:eb:ee:36:3c:d8:2b:e4:7e:1a:fb:a0:d6:61:dc:0d:62:2b:
ba:5d:ea:5f:c4:5a:d3:15:06:c5:42:e8:12:73:8b:06:80:f8:
73:21:de:3b:fa:70:e2:d7:42:a0:38:a1:fe:60:d7:2a:da:77:
2f:c5:83:b6:77:26:45:71:62:f6:32:5c:3c:40:fc:e8:42:fa:
51:f9:01:b9:00:27:54:92:80:24:bf:8b:e2:7b:5a:61:3c:34:
1c:bd:af:ed:4e:26:a6:e6:64:fc:f6:02:c1:e4:51:72:c9:77:
b4:03:18:9f:d8:49:0a:a5:e9:77:26:60:2c:9d:aa:62:92:bd:
2b:eb:96:e6:97:2d:8a:bf:fa:7b:ae:4f:ac:13:00:65:e2:73:
f6:66:94:a5:89:43:32:f9:1c:51:53:df:47:88:eb:97:fe:88:
33:9a:b0:8c:ec:3a:10:2b:46:67:01:75:50:02:60:e7:c1:44:
d9:e5:6b:a9:b0:7c:ac:81:41:e9:70:b1:e8:0b:8a:77:b8:63:
c4:90:45:29:3a:b3:2d:d7:17:9c:b5:e9:97:6b:37:d0:10:c7:
0b:84:a4:44:24:b4:87:00:76:69:ba:fc:a6:65:1c:a0:3d:53:
57:2d:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 9 15:05:14 2024 by rpki-client on console-ams.rpki-client.org