Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Wa2Zt6Gq9cppxIAx4LP6my-lTyA.roa
File: Wa2Zt6Gq9cppxIAx4LP6my-lTyA.roa (raw, json)
Hash identifier: 6u+iyedXVVuoizwbFi5TQzXTyE4yz2ue1WjZ1OzZ2Cw=
Subject key identifier: 59:AD:99:B7:A1:AA:F5:CA:69:C4:80:31:E0:B3:FA:9B:2F:A5:4F:20
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 018CC94E13161E6C7BE6C9A6D92AB634A612
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Wa2Zt6Gq9cppxIAx4LP6my-lTyA.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59592
IP address blocks: 185.14.92.0/22 maxlen: 22
94.154.51.0/24 maxlen: 24
94.154.48.0/21 maxlen: 24
94.154.49.0/24 maxlen: 24
94.154.54.0/24 maxlen: 24
94.154.53.0/24 maxlen: 24
94.154.52.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
176.100.37.0/24 maxlen: 24
176.100.36.0/24 maxlen: 24
176.100.33.0/24 maxlen: 24
176.100.32.0/24 maxlen: 24
176.100.35.0/24 maxlen: 24
176.100.34.0/24 maxlen: 24
37.114.38.0/24 maxlen: 24
37.114.32.0/19 maxlen: 24
37.114.36.0/24 maxlen: 24
37.114.35.0/24 maxlen: 24
37.114.39.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
2a00:ccc2::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 17 May 2024 20:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:13:16:1e:6c:7b:e6:c9:a6:d9:2a:b6:34:a6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ad99b7a1aaf5ca69c48031e0b3fa9b2fa54f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d1:8d:e8:a8:36:76:00:62:49:70:b9:8d:d9:
0d:4c:ba:4a:d6:45:7a:ea:69:f5:05:1e:90:e8:f8:
f4:c8:0e:dd:c2:e0:2d:79:2a:fd:a7:dc:cf:91:4a:
0b:c0:f7:46:42:37:b2:36:fc:76:04:2d:65:80:e8:
56:da:8b:c9:03:08:a9:85:2f:50:c2:85:3c:21:5d:
00:47:0c:a8:6d:44:6a:8e:cd:bf:f6:06:08:de:38:
40:dc:5a:6b:36:ab:5c:a3:de:74:38:05:b0:a5:db:
33:44:91:3b:b4:fd:3c:b2:7e:89:89:ed:55:6e:04:
59:1c:6f:10:b4:4d:b6:8d:c8:ac:0e:2f:c7:af:76:
c2:7e:dc:fe:b5:69:e7:6f:1c:f2:48:7c:e7:11:17:
c6:90:29:e5:99:47:aa:43:75:38:ac:dd:55:55:c0:
99:73:db:16:ba:14:65:89:b2:55:f6:98:67:73:75:
ec:7b:d4:d0:50:f0:02:1d:3e:1d:83:6c:b5:40:95:
c2:92:f9:fe:a7:f7:6c:95:d4:d5:c9:84:12:b9:35:
f9:da:5d:f4:c0:6e:db:86:55:1e:19:6a:f7:38:c1:
8e:9e:00:7f:88:8a:75:09:4d:52:a4:f4:8a:47:63:
1e:11:3f:12:1c:dd:d8:c7:f8:4e:2b:81:5f:26:77:
4c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AD:99:B7:A1:AA:F5:CA:69:C4:80:31:E0:B3:FA:9B:2F:A5:4F:20
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Wa2Zt6Gq9cppxIAx4LP6my-lTyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/19
43.251.160.0/23
94.154.48.0/21
176.100.32.0-176.100.37.255
185.14.92.0/22
IPv6:
2a00:ccc2::/32
Signature Algorithm: sha256WithRSAEncryption
b1:91:24:6d:82:7f:ed:4f:6f:c8:e4:13:cf:15:85:bd:b0:68:
f2:e4:35:21:27:63:d1:a8:7d:9f:52:ab:ee:7c:61:62:f5:6a:
f1:ef:84:88:67:fe:15:5b:3b:b6:fe:96:4a:4e:49:3c:cd:8e:
5c:27:66:03:06:d2:70:ba:94:a6:7a:4c:6a:ff:92:1c:1b:3f:
c5:a4:36:42:c2:38:7a:df:9b:f0:3f:f3:e7:f0:8e:b8:35:a7:
94:33:d9:f4:c5:96:f7:b7:27:a8:dc:d3:08:61:70:cf:e5:03:
9a:e4:45:36:a3:48:f2:44:69:56:aa:67:0e:33:92:1e:80:e3:
b4:dc:f5:78:2f:9e:78:11:17:09:5c:c6:bb:7e:e6:bc:ab:8c:
65:67:90:a9:35:33:2f:64:16:22:eb:95:8e:6d:e4:0a:c6:ca:
05:57:bb:3c:9f:08:6f:50:4e:32:1c:ee:13:52:61:a5:fe:3d:
17:b5:f2:6f:69:2f:90:73:1d:a4:59:3f:e1:cc:28:e1:eb:d5:
47:e0:b1:00:8b:14:63:63:e1:a6:eb:19:fe:9d:c5:fe:53:c7:
8d:ce:b8:6c:d7:64:23:f0:ce:f7:0b:a9:0c:50:f7:57:75:e8:
7f:30:4b:5b:f5:c0:49:21:84:1f:ec:dc:d7:eb:d1:80:a4:80:
20:7b:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org