Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/w70-irwlmtkwUlByTVe5liAbK3U.roa
File: w70-irwlmtkwUlByTVe5liAbK3U.roa (raw, json)
Hash identifier: fR40o96A0orLFs55MffgefSijGg0MpJwsaZjzpvSIl4=
Subject key identifier: C3:BD:3E:8A:BC:25:9A:D9:30:52:50:72:4D:57:B9:96:20:1B:2B:75
Certificate issuer: /CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Certificate serial: 018CC500500E79BABA8F45761AB666C16DE7
Authority key identifier: 47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/w70-irwlmtkwUlByTVe5liAbK3U.roa
Signing time: Mon 01 Jan 2024 12:29:41 +0000
ROA not before: Mon 01 Jan 2024 12:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47178
IP address blocks: 93.188.112.0/21 maxlen: 21
185.99.225.0/24 maxlen: 24
185.99.224.0/22 maxlen: 22
185.99.226.0/24 maxlen: 24
185.99.224.0/24 maxlen: 24
185.99.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:50:0e:79:ba:ba:8f:45:76:1a:b6:66:c1:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4789c5dc0dd544fc02b7e67e5f1bac456aabfe61
Validity
Not Before: Jan 1 12:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3bd3e8abc259ad9305250724d57b996201b2b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:35:0e:ac:7d:16:a4:c3:d1:29:da:eb:f2:
fe:10:01:ff:61:48:cc:c0:98:6c:37:47:43:68:66:
80:58:b8:e1:82:68:4d:a7:fd:5b:74:a0:fd:98:88:
9e:b8:4a:ca:a7:93:88:5b:4e:ab:7e:6a:2c:c6:3f:
47:b0:3a:8d:d9:fb:42:1a:e3:9b:87:cb:83:99:63:
fb:f7:65:05:1f:82:5e:d0:1e:ce:cb:ba:d6:c5:18:
8f:5e:73:e6:94:86:cd:f2:1c:23:e1:6b:2f:b2:91:
2c:d3:68:11:d8:9d:b5:80:49:fb:61:96:63:15:04:
60:2d:87:fe:1b:61:c0:2b:8e:4e:06:d4:e7:b2:d5:
f5:c2:b0:c0:e7:ce:9b:15:f9:3c:23:44:8d:52:3b:
92:b2:c4:03:36:f1:94:8b:38:08:69:2c:78:a2:59:
c2:1b:a4:43:78:15:99:7e:fd:84:fd:49:0e:12:08:
08:2a:b5:22:b7:19:2c:a0:f6:f5:45:5e:8c:6f:58:
a9:b2:74:86:53:43:31:4b:4f:ec:09:06:39:bb:eb:
26:b4:3d:ab:3b:98:26:bc:28:24:0d:99:23:2b:f5:
c1:66:d9:a9:91:d9:af:2a:88:45:30:e6:14:47:96:
86:78:02:35:af:ea:4b:cc:61:58:ae:bb:28:71:65:
7c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BD:3E:8A:BC:25:9A:D9:30:52:50:72:4D:57:B9:96:20:1B:2B:75
X509v3 Authority Key Identifier:
keyid:47:89:C5:DC:0D:D5:44:FC:02:B7:E6:7E:5F:1B:AC:45:6A:AB:FE:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4nF3A3VRPwCt-Z-XxusRWqr_mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/w70-irwlmtkwUlByTVe5liAbK3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/89542a-587d-4c27-a523-6a1b9c1c6924/1/R4nF3A3VRPwCt-Z-XxusRWqr_mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.112.0/21
185.99.224.0/22
Signature Algorithm: sha256WithRSAEncryption
07:2a:9f:27:63:e1:d7:d1:fa:ff:2f:4c:76:4e:7b:20:25:e5:
ee:bb:92:76:d7:75:17:b9:48:f4:bb:51:63:b3:36:86:68:f7:
87:20:2d:0a:b9:54:43:c8:93:60:e8:92:ad:f9:5f:15:78:d5:
3d:a7:ab:5a:6b:0d:b2:6a:ab:1f:a3:d5:d8:20:80:71:b0:23:
00:cf:70:5d:9e:24:fb:90:0b:70:af:f0:55:aa:ce:d1:e4:6b:
d4:f4:e2:1e:db:d6:66:20:7e:7b:b2:1c:8c:80:ad:44:39:16:
f8:11:59:66:e1:dc:d7:bc:b3:e8:e1:c4:53:48:ab:0c:0e:ed:
a1:16:e5:23:cb:ac:fa:5c:92:db:88:25:86:b9:36:9e:91:7f:
9c:ec:6f:51:3b:5c:c9:f6:18:b5:3c:40:98:f3:26:d0:59:55:
38:34:97:74:86:ea:fb:18:ee:2b:90:bb:f3:8b:82:6d:94:19:
50:3c:53:6e:18:77:d2:09:24:58:0d:65:7b:55:b1:d2:20:4f:
c4:8d:e4:a6:ae:ad:bd:51:57:30:61:4b:f2:52:3a:c3:eb:ae:
84:59:36:00:48:ea:a4:0c:31:77:8f:a6:55:a0:52:99:f2:d1:
48:15:2f:c1:c4:69:f4:02:98:5c:8f:3b:5c:28:bc:19:14:b5:
7a:41:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:01 2025 by rpki-client