Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Wlb1CYPV7Z9Ww2oeG9BEjagxt10.roa
File: Wlb1CYPV7Z9Ww2oeG9BEjagxt10.roa (raw, json)
Hash identifier: CrxXvQdil88zxtH+taP63smDjzuGfVCRiW9mzTOgQ6s=
Subject key identifier: 5A:56:F5:09:83:D5:ED:9F:56:C3:6A:1E:1B:D0:44:8D:A8:31:B7:5D
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 0191FE6309DA92421A8E2B44545467B2EC50
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Wlb1CYPV7Z9Ww2oeG9BEjagxt10.roa
Signing time: Tue 17 Sep 2024 05:09:48 +0000
ROA not before: Tue 17 Sep 2024 05:09:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55410
IP address blocks: 45.85.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:63:09:da:92:42:1a:8e:2b:44:54:54:67:b2:ec:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Sep 17 05:09:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a56f50983d5ed9f56c36a1e1bd0448da831b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5e:07:af:b9:44:4f:f7:11:31:7f:15:31:4a:
cd:db:6e:1f:b3:69:89:b3:8d:aa:39:b7:b1:14:1f:
28:2f:03:93:6d:5b:e6:2e:98:ed:ae:b4:bd:1a:2c:
b0:b5:ac:21:09:42:a6:de:13:c9:50:a7:b2:3f:61:
d1:af:fb:24:09:5c:7a:78:7f:40:44:20:d4:37:a8:
4f:f4:d5:d1:8d:14:a6:6a:fb:1d:79:48:32:c6:61:
5d:cb:2f:e3:5c:67:bb:53:d6:90:db:81:7e:63:48:
7b:fd:aa:ae:5c:40:02:34:53:49:77:1f:05:59:cc:
8f:1b:1b:cc:bb:2a:4e:d6:5c:24:72:c9:ed:14:77:
70:7c:b5:16:1f:ea:e3:c9:88:90:78:8e:70:c4:bf:
19:52:41:c5:3f:76:d0:a5:8c:d5:0b:09:3c:8d:cd:
24:e7:60:a4:14:bf:6c:e3:4d:2b:6b:52:05:1c:bc:
6f:90:6f:48:13:9e:9e:06:be:ea:6d:09:9e:b3:b3:
be:81:07:69:54:c9:05:d0:cd:81:06:5b:30:1c:30:
89:cc:b3:0b:d9:22:c6:a2:bf:6c:0b:eb:6c:45:08:
4c:e1:d1:30:98:e7:94:8c:3e:8c:1c:d7:45:13:9e:
69:c6:52:e9:b6:e8:2a:83:10:2f:94:57:6b:84:26:
1e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:56:F5:09:83:D5:ED:9F:56:C3:6A:1E:1B:D0:44:8D:A8:31:B7:5D
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/Wlb1CYPV7Z9Ww2oeG9BEjagxt10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.190.0/24
Signature Algorithm: sha256WithRSAEncryption
17:0d:85:4d:34:7f:0e:d2:ff:54:50:21:9f:17:26:14:23:0e:
32:f7:69:16:2f:10:63:f4:cf:14:85:ca:23:b7:1b:a9:f5:0a:
72:e7:02:18:70:43:aa:82:ba:68:92:17:51:6f:1a:98:6a:e5:
6e:b9:d3:81:60:35:60:36:fd:b6:12:a6:ee:ca:70:94:1d:50:
ac:39:1f:df:e5:a8:88:1d:b9:88:e5:58:2f:59:e2:72:39:92:
79:b3:3b:7c:3a:b1:39:c6:52:40:10:9c:2f:ca:40:38:d6:45:
53:50:c8:ec:e3:0b:0f:15:ac:5f:fe:6d:3f:c5:a0:1b:db:61:
9a:08:64:4c:94:6a:cf:01:a3:7e:11:3d:11:58:10:3f:20:16:
0b:e4:d9:c6:f8:84:90:7f:51:45:13:94:fe:6c:8e:12:39:ff:
9a:b2:ac:10:4b:b8:0f:ab:86:de:a4:3c:40:2d:16:0d:55:12:
c5:9b:39:32:50:e9:4f:f9:53:4d:bf:e5:ef:1b:7e:a1:34:34:
26:d9:3e:99:84:ec:3c:db:f2:bd:5e:5c:10:0a:53:ac:0b:e6:
76:42:f6:41:8f:5f:90:8d:17:cd:98:5b:c2:ac:a4:84:1d:82:
e4:90:da:b0:37:a8:11:14:24:52:78:32:26:ff:46:4a:5b:2e:
c6:28:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:30 2025 by rpki-client