Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/wneWyjfgqbYhebIgktOaFNJK1us.roa
File: wneWyjfgqbYhebIgktOaFNJK1us.roa (raw, json)
Hash identifier: dMO0T1M82Fm81YTa6UreSTvt0Xff9XWy+2O//UAfWtA=
Subject key identifier: C2:77:96:CA:37:E0:A9:B6:21:79:B2:20:92:D3:9A:14:D2:4A:D6:EB
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018F4BC3D768ED02DCFB1CCE7C8E4A5E9EEC
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/wneWyjfgqbYhebIgktOaFNJK1us.roa
Signing time: Mon 06 May 2024 02:37:56 +0000
ROA not before: Mon 06 May 2024 02:37:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149457
IP address blocks: 45.134.145.0/24 maxlen: 24
85.92.114.0/24 maxlen: 24
103.100.168.0/24 maxlen: 24
185.233.17.0/24 maxlen: 24
185.233.18.0/24 maxlen: 24
193.107.218.0/24 maxlen: 24
194.76.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 01:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:4b:c3:d7:68:ed:02:dc:fb:1c:ce:7c:8e:4a:5e:9e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: May 6 02:37:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27796ca37e0a9b62179b22092d39a14d24ad6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b5:02:81:cb:f7:a7:50:8d:44:ae:94:b1:6d:
5a:c1:60:a2:81:aa:89:e4:4c:35:73:f2:d9:1a:51:
c2:f7:86:cd:9f:3c:8e:dc:a8:e1:5e:41:83:2c:7d:
a4:3e:c1:e8:c9:e8:ba:e9:cd:2c:00:46:bc:e1:91:
cd:cf:60:06:59:7a:31:f2:19:e6:7f:10:56:c5:37:
b8:d1:55:12:a1:07:6b:b0:9b:f3:bd:84:b8:e0:75:
2a:56:6f:5e:20:62:53:be:59:f0:29:75:c1:25:b3:
60:0a:04:bf:bc:0d:fa:33:09:22:55:f8:47:05:2a:
4c:a0:53:d6:25:7f:d3:28:71:d2:53:0b:7f:ac:e8:
73:9a:0c:19:c0:bd:5e:a7:fa:96:8d:1b:46:8d:76:
00:1b:72:db:4c:64:b5:e2:51:52:6f:24:e5:2b:b9:
5f:89:e8:2c:68:d5:c1:d4:c2:5f:41:b4:f9:1b:3f:
b1:54:10:8c:27:2c:2e:2e:20:8a:f8:eb:69:e8:c1:
64:a7:bb:f7:1e:1e:5e:50:dc:af:f8:a1:40:2a:ad:
96:d4:fa:68:80:fc:dc:0f:46:07:ab:d4:1c:d7:5e:
30:f5:80:b2:cf:0a:10:8e:b4:6b:69:5e:2e:93:a0:
2a:ed:d9:42:5b:a9:0d:bc:05:19:4e:74:1d:e4:cf:
81:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:77:96:CA:37:E0:A9:B6:21:79:B2:20:92:D3:9A:14:D2:4A:D6:EB
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/wneWyjfgqbYhebIgktOaFNJK1us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.145.0/24
85.92.114.0/24
103.100.168.0/24
185.233.17.0-185.233.18.255
193.107.218.0/24
194.76.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:54:46:ab:ca:fb:75:a8:3b:49:7c:88:bf:71:e2:a9:ca:ea:
ef:d8:cb:c7:72:4c:fe:37:a0:f8:4f:6d:82:5f:7b:59:42:c1:
f0:c3:c0:8e:4b:6a:58:fc:ac:13:0d:53:be:23:3d:bf:02:59:
4e:41:fe:1d:76:ea:23:b2:ea:e7:2b:1a:f0:71:68:12:64:9e:
90:c7:f1:82:5c:2c:69:c8:0c:d8:c7:d8:6b:4f:7f:fb:f4:f6:
ab:e9:e5:b3:07:22:51:2a:a0:ae:84:98:4a:50:37:62:9d:0a:
e2:d4:f0:35:8d:ac:1e:a2:22:58:bc:26:3c:4d:a9:87:3d:ef:
d1:2f:3b:11:83:8f:f7:e7:5e:1d:cd:38:5a:5f:21:eb:43:0c:
27:7e:a0:0a:64:3c:9e:b5:c8:f6:3c:bf:49:14:9d:a2:bb:63:
e2:ca:9d:ad:a8:b1:e0:2e:70:25:49:06:98:c5:80:87:ec:ef:
4f:52:4e:f1:fa:a8:87:5e:41:c3:77:e3:81:7e:8a:65:8f:cb:
29:f3:3a:d1:69:1f:d2:3a:68:ee:8d:b2:22:80:6b:e2:f3:6d:
10:cc:13:43:c4:9f:b1:68:50:93:3b:60:df:f1:ac:be:7d:da:
a9:7d:30:9d:d7:eb:c1:b9:57:bd:21:19:11:9a:93:e2:cf:04:
be:0d:50:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 18 04:17:36 2024 by rpki-client on console-ams.rpki-client.org