Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vwn68mVUnYL5W0gH-8Bi6_vu4KA.roa
File: vwn68mVUnYL5W0gH-8Bi6_vu4KA.roa (raw, json)
Hash identifier: 6m8ig6jyoX/GmKUUvTTVQ+2MK4dDNatsLX++8pL/OpM=
Subject key identifier: BF:09:FA:F2:65:54:9D:82:F9:5B:48:07:FB:C0:62:EB:FB:EE:E0:A0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019355CA223034F50245F552C21AF3E4F9F0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vwn68mVUnYL5W0gH-8Bi6_vu4KA.roa
Signing time: Fri 22 Nov 2024 21:32:10 +0000
ROA not before: Fri 22 Nov 2024 21:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44948
IP address blocks: 45.131.184.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 12:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:55:ca:22:30:34:f5:02:45:f5:52:c2:1a:f3:e4:f9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 22 21:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf09faf265549d82f95b4807fbc062ebfbeee0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:64:fb:a5:8b:e6:f1:70:d0:24:97:1f:33:de:
5d:a9:a5:b8:c8:78:6b:b6:81:33:67:c8:79:3b:52:
23:36:c2:03:0f:d8:73:ec:ac:05:50:03:b4:4b:c0:
db:d4:79:e0:ba:cc:ef:63:92:d7:b6:5b:51:4d:59:
16:c9:2e:8a:30:70:45:3c:80:9f:51:c2:ed:ff:5e:
86:d0:54:87:6d:da:bd:5e:e2:ee:c9:6b:a8:22:56:
ad:9d:d4:fe:05:9f:06:4a:6f:d0:fc:84:9c:27:d6:
b9:7f:88:22:74:86:96:87:e4:42:b5:5d:52:68:a9:
c5:91:47:c9:43:4c:09:78:74:5f:e5:9c:ff:f7:75:
d1:b7:06:90:c0:08:72:84:1e:71:11:bc:e9:b8:68:
f1:dc:41:fa:9c:f9:e5:6e:53:59:76:48:30:32:01:
7e:8d:f9:4d:f8:5f:44:29:23:6c:20:d8:2f:45:69:
4b:c2:ae:27:68:2e:f2:bf:c5:d2:cd:fd:f6:ab:ee:
73:08:5a:d6:bf:c3:51:74:58:4d:1d:2c:26:92:ed:
2d:7d:0e:8f:33:1f:33:ef:9f:91:e6:68:e0:69:37:
a6:1b:6f:d6:4a:bd:6d:a8:a0:fe:42:03:0f:be:fa:
fe:32:a6:33:b1:c9:fb:14:11:8a:43:ea:44:ad:b2:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:09:FA:F2:65:54:9D:82:F9:5B:48:07:FB:C0:62:EB:FB:EE:E0:A0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vwn68mVUnYL5W0gH-8Bi6_vu4KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
97:e3:e0:92:3d:c9:3b:13:f7:6f:c6:99:45:a6:f5:69:06:09:
76:3b:2e:a0:5d:bc:49:0f:62:b3:c4:6b:47:f1:c2:e1:1e:73:
c2:f4:05:bb:1b:45:6b:93:1e:a7:94:5c:60:6d:25:52:0a:eb:
b7:52:36:bf:cc:37:15:57:3f:b1:82:8c:69:db:a4:e9:66:b1:
fb:1c:15:ca:a1:74:3c:8a:a7:91:88:50:a7:cb:34:84:6b:2b:
6b:67:d0:e0:1b:08:c9:0f:14:fb:c1:21:86:23:87:9e:72:7b:
09:18:17:7a:f1:05:84:1a:c0:4e:1e:1f:aa:17:d0:97:88:ce:
04:b7:66:da:37:26:29:e3:e3:68:92:c8:8a:52:5a:7c:f6:14:
26:96:01:59:bc:c5:e2:76:1b:9c:05:3b:5b:f1:c3:42:ca:f5:
e0:06:8e:12:fb:59:7d:30:61:8b:1e:01:2f:5c:19:e5:44:c9:
ba:01:f9:ff:78:9f:73:77:f0:05:d1:c9:f7:7a:53:6f:75:21:
ce:f7:05:ba:f2:8e:2c:b3:1a:1a:76:90:d2:e7:82:3c:7d:f9:
b0:85:2e:a0:42:5f:ec:d9:92:bc:1e:d2:c7:02:12:73:e9:af:
5d:7a:b2:4b:78:5d:42:f3:12:31:bc:76:29:90:b3:d0:24:60:
ed:67:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:40:38 2025 by rpki-client