Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W4X2Dari_E8jJ8ZNb8oskLuYiYw.roa
File: W4X2Dari_E8jJ8ZNb8oskLuYiYw.roa (raw, json)
Hash identifier: FwkW1K+aI7Rcxoxc05/KOb3wnuU9jw0VL87FXaerI8U=
Subject key identifier: 5B:85:F6:0D:AA:E2:FC:4F:23:27:C6:4D:6F:CA:2C:90:BB:98:89:8C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D04BCD8ACB3F7CECEB405B88EB5B58625
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W4X2Dari_E8jJ8ZNb8oskLuYiYw.roa
Signing time: Sat 13 Jan 2024 21:31:41 +0000
ROA not before: Sat 13 Jan 2024 21:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a10:cc40:cc46::/48 maxlen: 48
2a06:de01:400::/48 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 15 Jan 2024 18:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:04:bc:d8:ac:b3:f7:ce:ce:b4:05:b8:8e:b5:b5:86:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 13 21:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b85f60daae2fc4f2327c64d6fca2c90bb98898c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:84:f8:d7:61:53:ee:e7:fb:52:f0:97:4d:
b1:75:20:58:88:94:7e:d5:87:58:1e:ff:d1:6c:a1:
20:9f:80:e7:46:05:de:f9:97:58:11:2a:13:c6:5c:
2a:c7:ba:8e:9b:ca:50:b2:b5:85:ae:0b:51:fb:63:
e9:97:79:d5:2d:e6:0c:eb:c0:65:3a:08:fd:fb:be:
05:7d:2e:3d:8a:51:5d:1e:b2:dc:85:0c:48:e8:4e:
54:cd:28:f7:bf:45:ff:57:76:83:67:8a:76:bc:da:
a6:d1:8e:3c:0f:95:9b:e8:25:c2:82:a3:0e:1c:6a:
6c:ed:9f:de:aa:a3:3b:b6:b1:0f:02:46:dc:61:79:
48:21:2d:6a:32:83:7c:bd:ae:41:03:ae:76:95:b2:
d9:e1:76:38:fa:b2:75:84:1e:2b:38:37:7b:eb:d9:
9b:cb:c2:01:23:6e:26:28:1c:d7:88:25:8c:c2:47:
b6:04:a3:6b:f0:46:ad:da:69:b8:62:43:a9:76:18:
46:42:9f:52:cc:c7:4a:c6:b3:1a:84:6e:52:6f:af:
89:59:97:9e:88:3b:33:d3:bf:8e:18:32:1a:f8:7f:
e0:f7:2d:d1:08:ed:65:9a:fe:e1:06:71:43:89:66:
c8:60:4e:a0:66:83:b9:fd:c6:9c:74:c3:e9:00:f2:
f5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:85:F6:0D:AA:E2:FC:4F:23:27:C6:4D:6F:CA:2C:90:BB:98:89:8C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/W4X2Dari_E8jJ8ZNb8oskLuYiYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a06:de01:400::/48
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:cc40:cc46::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
9b:a9:e7:c6:02:ce:ef:ba:fd:47:a1:aa:dd:ff:ad:c4:ae:82:
d1:b9:9c:0f:d9:50:ce:6a:15:0a:5a:72:4c:bc:31:c4:78:fd:
d3:73:09:d1:43:c6:ce:7f:0e:37:68:0b:69:e6:83:80:a7:23:
2c:91:12:e7:bd:2c:47:cc:4b:a8:20:df:62:4c:14:52:8d:37:
5f:3e:28:94:b8:d2:ee:db:ba:1e:40:62:a3:87:a9:2a:f7:d5:
8f:04:37:dc:41:2b:a4:b1:63:5e:04:7c:0d:6c:ae:22:ae:89:
53:c8:af:e0:b9:a1:05:d6:7f:7c:ce:32:8d:3f:e6:d2:6d:24:
3b:5d:69:06:b3:06:38:d3:3b:36:cb:5c:f0:e0:e4:9d:5c:6f:
aa:c9:07:49:a9:5d:5a:c6:20:bf:ab:00:e1:da:55:96:47:d7:
b6:67:f3:e4:87:14:01:f1:d3:68:6b:34:5c:c6:ff:0f:80:de:
48:ed:86:bc:e5:76:61:a5:3d:5b:dd:18:1c:af:39:16:80:fd:
a9:da:59:dd:da:65:f0:78:a7:07:07:bc:27:03:24:c5:a9:8a:
33:5f:49:e4:91:c1:fe:71:19:30:07:90:fe:50:6f:38:a6:51:
cf:95:c6:f1:59:6d:f1:de:a6:da:43:d7:c2:fc:e4:69:c3:a0:
0b:57:fc:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 22:50:42 2024 by rpki-client on console-fra.rpki-client.org