Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ww15ncHUTwuiM5BLzqivgWXoLpE.roa
File: ww15ncHUTwuiM5BLzqivgWXoLpE.roa (raw, json)
Hash identifier: UT99s7d/QaKVN4OVN3uJbculcOzxxHUQj3N/rLrhHQA=
Subject key identifier: C3:0D:79:9D:C1:D4:4F:0B:A2:33:90:4B:CE:A8:AF:81:65:E8:2E:91
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFA81020FCA800BC8B8E7BB72266D4
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ww15ncHUTwuiM5BLzqivgWXoLpE.roa
Signing time: Tue 02 Jan 2024 06:32:29 +0000
ROA not before: Tue 02 Jan 2024 06:32:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142578
IP address blocks: 85.92.113.0/24 maxlen: 24
45.134.146.0/24 maxlen: 24
45.134.147.0/24 maxlen: 24
45.93.18.0/24 maxlen: 24
45.93.19.0/24 maxlen: 24
193.107.219.0/24 maxlen: 24
193.107.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 09:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a8:10:20:fc:a8:00:bc:8b:8e:7b:b7:22:66:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c30d799dc1d44f0ba233904bcea8af8165e82e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ca:1a:05:17:a4:af:f4:29:14:ad:cd:06:a1:
eb:d4:9e:fe:b2:ce:d5:35:53:a4:3c:b4:84:06:02:
15:0d:e9:4d:6d:02:08:41:b7:b3:27:31:9b:9d:be:
3e:78:99:72:0f:48:84:7e:86:b7:68:21:70:80:a6:
be:8b:2d:7f:14:33:f4:1f:38:a2:a3:c3:c3:6b:1e:
05:9a:05:a0:b8:c4:5f:14:c0:85:a9:4b:c7:99:2a:
fa:2c:46:e5:40:29:e6:83:90:91:fb:43:d9:87:52:
c7:a1:b4:a7:a5:43:63:a3:fa:24:2e:88:d6:26:c1:
5e:f6:fb:52:6f:fa:68:61:cc:31:04:bc:4c:d3:d5:
84:55:fb:96:77:13:21:35:3a:e3:c9:3d:6e:94:0f:
e3:5d:72:9b:84:e0:9f:27:d5:26:0e:32:b7:81:9a:
19:99:2e:b5:61:fd:60:dc:94:6a:e6:e8:62:10:96:
f7:e0:f6:c6:4b:39:59:ce:bb:bf:7a:aa:af:c9:aa:
7f:24:e3:62:1c:0c:85:92:18:42:e7:f0:f6:7f:a8:
62:b9:6d:55:1c:b4:2d:c8:b8:66:1a:37:8f:80:3e:
9d:8f:90:8f:27:54:4b:d1:6f:c8:45:1d:97:4b:e6:
e4:bd:2c:38:54:c8:12:60:49:0e:58:23:db:66:b4:
fe:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:79:9D:C1:D4:4F:0B:A2:33:90:4B:CE:A8:AF:81:65:E8:2E:91
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/ww15ncHUTwuiM5BLzqivgWXoLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.18.0/23
45.134.146.0/23
85.92.113.0/24
193.107.217.0/24
193.107.219.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7c:4a:22:34:35:12:4f:e4:0e:a5:9b:b8:fb:84:14:33:3f:
9c:68:62:5d:b7:a4:86:93:f6:b0:e3:09:c2:5f:50:6d:02:8b:
23:7e:8a:be:52:fb:c4:59:4e:66:79:48:8b:34:8c:01:91:ea:
41:05:35:30:81:57:67:a9:44:a1:9c:ba:5c:fb:5a:ff:e4:bd:
0e:97:da:41:76:c5:73:af:c4:86:d0:32:5c:9a:29:1a:cd:6e:
97:07:9e:d0:2e:a1:8c:be:22:b2:d5:a6:d8:a3:fa:cc:93:e1:
d4:7e:16:4f:f0:97:33:15:ea:f8:e6:29:d7:94:f8:12:9d:ef:
e8:cd:75:e2:f3:86:30:ec:1b:7a:cb:f3:a4:9f:3a:46:80:48:
8f:59:a9:db:cb:0b:ad:26:09:95:80:32:f6:84:00:15:5c:ee:
8e:64:a7:cd:b2:ee:01:30:ae:85:16:16:2d:66:e3:ec:3d:fb:
f0:3c:77:e3:72:43:c7:66:f7:62:15:cc:e9:8a:ca:d9:2a:cd:
90:30:1b:fc:97:2b:ba:9c:c4:ee:d9:68:ec:f3:b4:a1:24:d6:
d0:db:8c:47:cc:19:26:ea:b0:64:45:79:37:b2:82:92:fc:73:
58:25:1e:12:56:70:8b:9a:2a:2b:1b:b4:15:f3:a3:d1:1b:87:
a7:cd:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:14 2025 by rpki-client