Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wso1eeqTQvV5tvQdR83F2hnFaEA.roa
File: wso1eeqTQvV5tvQdR83F2hnFaEA.roa (raw, json)
Hash identifier: kvclv6JQroMySjuYQdfgsaAoiygtfwjIiiRu1MK/QvI=
Subject key identifier: C2:CA:35:79:EA:93:42:F5:79:B6:F4:1D:47:CD:C5:DA:19:C5:68:40
Certificate issuer: /CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Certificate serial: 0193B57BFE725BA713F0EA8AB3717C0476AF
Authority key identifier: C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wso1eeqTQvV5tvQdR83F2hnFaEA.roa
Signing time: Wed 11 Dec 2024 11:30:22 +0000
ROA not before: Wed 11 Dec 2024 11:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.66.10.0/24 maxlen: 24
45.88.76.0/24 maxlen: 24
45.88.105.0/24 maxlen: 24
45.91.200.0/24 maxlen: 24
45.91.201.0/24 maxlen: 24
45.91.202.0/24 maxlen: 24
45.132.107.0/24 maxlen: 24
77.83.175.0/24 maxlen: 24
91.211.248.0/24 maxlen: 24
91.211.249.0/24 maxlen: 24
91.211.250.0/24 maxlen: 24
92.119.114.0/24 maxlen: 24
95.215.204.0/24 maxlen: 24
95.215.207.0/24 maxlen: 24
185.203.240.0/24 maxlen: 24
185.203.241.0/24 maxlen: 24
185.209.20.0/24 maxlen: 24
185.209.21.0/24 maxlen: 24
185.219.81.0/24 maxlen: 24
185.219.83.0/24 maxlen: 24
185.224.132.0/24 maxlen: 24
185.231.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 12 Dec 2024 09:51:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:7b:fe:72:5b:a7:13:f0:ea:8a:b3:71:7c:04:76:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1d369e66cdbe30d7b3aff6081f20c17a98fdc5b
Validity
Not Before: Dec 11 11:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ca3579ea9342f579b6f41d47cdc5da19c56840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:83:a6:4a:78:38:40:8a:34:fd:c5:88:c4:92:
26:10:fe:26:8a:a9:a9:6c:a2:84:dd:dd:68:b6:bd:
2b:fc:8e:0f:1f:98:2c:1c:06:52:bf:b5:15:6b:8a:
79:83:cb:d6:57:8d:ef:4b:52:d2:6f:47:d9:0c:6d:
b0:f6:03:03:f0:51:ef:47:29:85:bc:3a:ad:ff:d6:
57:97:84:c1:2f:30:97:94:d8:f3:17:b0:12:82:a2:
44:9f:3f:aa:71:fe:5b:7f:0a:d4:7a:d7:42:65:66:
f8:be:ad:ea:01:d5:70:d8:42:27:d1:6e:5b:60:09:
47:59:f4:e8:fc:7a:72:ef:7c:c7:6a:68:9e:f8:cf:
7a:fc:13:c8:a7:45:59:9a:03:8e:9d:e1:97:da:cb:
d3:55:1c:f8:f8:e7:e0:f4:81:26:5f:44:39:dd:31:
5e:40:d8:8b:3d:f0:35:4e:9c:ae:5a:3d:77:1f:c3:
08:0c:4a:83:c9:fa:63:eb:b1:fd:7a:84:38:8f:5a:
fe:b6:f6:fe:ac:8b:c4:05:03:15:df:02:d0:79:5d:
19:be:a9:26:d6:c8:cf:32:5e:f7:db:8f:38:d2:d5:
d2:5a:73:dc:08:d3:19:da:0c:b1:65:1c:d4:e8:f8:
e9:a4:58:8c:9e:ec:53:a0:93:1d:ba:77:c5:6f:52:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CA:35:79:EA:93:42:F5:79:B6:F4:1D:47:CD:C5:DA:19:C5:68:40
X509v3 Authority Key Identifier:
keyid:C1:D3:69:E6:6C:DB:E3:0D:7B:3A:FF:60:81:F2:0C:17:A9:8F:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wso1eeqTQvV5tvQdR83F2hnFaEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/224351-3a47-4014-b395-a63479610968/1/wdNp5mzb4w17Ov9ggfIMF6mP3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.10.0/24
45.88.76.0/24
45.88.105.0/24
45.91.200.0-45.91.202.255
45.132.107.0/24
77.83.175.0/24
91.211.248.0-91.211.250.255
92.119.114.0/24
95.215.204.0/24
95.215.207.0/24
185.203.240.0/23
185.209.20.0/23
185.219.81.0/24
185.219.83.0/24
185.224.132.0/24
185.231.69.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:39:29:4c:68:75:0f:db:9c:e9:8c:de:5a:6c:48:ca:6b:86:
44:83:e3:6b:c8:26:7b:b2:97:91:3d:72:ee:97:83:96:96:12:
4b:ee:2d:fa:f0:f1:00:c2:8f:75:eb:6b:78:b5:10:b4:5b:6d:
18:6c:95:e2:4a:37:42:87:f6:6d:37:50:bb:62:d9:93:ef:60:
45:12:8e:b3:e5:7c:d2:55:d0:b9:41:79:e0:2e:ac:bb:73:2a:
ac:78:f8:8b:57:0b:25:c8:b3:7b:2b:7b:08:d5:71:60:7c:a3:
10:1b:29:ba:7c:f4:c4:5d:de:de:a6:f5:bc:d2:0d:d5:58:9d:
16:5f:21:a5:22:e4:e8:75:30:ad:21:3a:e0:2e:b3:a1:b7:b3:
16:6a:9e:cf:a5:79:8c:e0:82:de:42:eb:ed:32:02:a6:56:2e:
c7:97:1e:86:f2:77:86:ea:c5:02:45:34:f0:e1:80:78:ad:35:
10:32:dc:ca:82:70:b2:bb:c9:87:a6:5e:04:56:06:bf:bb:2e:
6b:63:3b:7f:9f:d5:e7:d8:20:cf:a5:1e:8d:86:ef:f7:44:02:
69:b1:f9:88:22:eb:f3:f4:35:d0:71:2c:71:81:25:77:7d:f6:
16:33:30:c2:d6:f3:3f:e0:ba:6f:18:88:79:20:20:11:67:38:
f5:b0:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:44:31 2025 by rpki-client