Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WhZb7-NOiV0uLR4ra18YsZiKnO0.roa
File: WhZb7-NOiV0uLR4ra18YsZiKnO0.roa (raw, json)
Hash identifier: 07YpJIhgRWz8AWQKR0QZBf3I/IbK++L3Oyvg8AADPqg=
Subject key identifier: 5A:16:5B:EF:E3:4E:89:5D:2E:2D:1E:2B:6B:5F:18:B1:98:8A:9C:ED
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018F91FD413698CC5FDE51F7E912BC87F00E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WhZb7-NOiV0uLR4ra18YsZiKnO0.roa
Signing time: Sun 19 May 2024 17:54:04 +0000
ROA not before: Sun 19 May 2024 17:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.181.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.177.51.0/24 maxlen: 24
185.198.234.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 May 2024 22:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:91:fd:41:36:98:cc:5f:de:51:f7:e9:12:bc:87:f0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 19 17:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a165befe34e895d2e2d1e2b6b5f18b1988a9ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:f8:34:be:07:af:ea:5c:bb:e7:ab:4b:61:
a3:53:ec:bf:8a:84:bd:e0:52:79:c2:1d:24:8e:2e:
9a:18:ab:7a:37:71:da:fd:fc:48:95:a8:7b:c0:e9:
4b:0c:94:be:00:f7:d5:63:9c:14:49:02:5c:fd:ea:
d7:26:fc:50:0f:ec:d3:66:f3:9c:ca:a4:8b:28:28:
1a:80:8a:c9:77:96:79:43:26:7c:ee:4d:53:21:b3:
8e:8f:7e:53:5c:ab:25:50:ce:39:9c:a8:d1:c5:2f:
61:63:49:6f:2e:88:cd:07:2e:ba:cd:9d:df:98:a7:
87:db:f5:a2:95:f7:26:91:72:90:91:10:5a:de:6d:
4e:e9:5b:c8:63:4f:a9:93:76:84:b3:12:dc:2f:92:
64:1c:a8:08:e0:f6:a3:37:12:0a:3d:89:d6:35:cf:
6e:97:48:8d:a5:6f:23:15:48:e5:f0:87:dc:03:0b:
11:83:3d:b2:09:2d:e7:57:c7:6c:0b:a3:11:83:48:
68:33:18:95:6b:d8:8e:ec:6b:e5:b9:52:9b:a5:05:
60:ac:23:f7:5f:ef:1f:16:47:43:a4:62:42:81:e2:
f2:41:7f:51:e8:26:e6:65:3e:a1:9e:22:18:16:39:
0a:54:67:6c:24:1c:37:a9:f4:f1:82:73:c6:5e:40:
0e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:16:5B:EF:E3:4E:89:5D:2E:2D:1E:2B:6B:5F:18:B1:98:8A:9C:ED
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/WhZb7-NOiV0uLR4ra18YsZiKnO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.181.0-45.135.183.255
86.107.50.0/24
89.34.106.0/24
92.114.32.0/24
93.114.183.0/24
94.177.51.0/24
185.198.234.0/24
188.64.142.0/24
188.208.103.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:ec:c1:b3:15:7e:4d:42:1b:37:05:2b:62:62:09:9b:f5:37:
24:10:d5:c1:91:76:33:47:25:8b:04:68:89:17:6c:42:3f:5f:
d8:38:17:4f:4e:10:0a:6f:6c:84:6c:05:8a:1c:02:8b:48:87:
2f:31:a4:b0:a4:fc:2f:b9:bd:fb:3b:b8:f2:5b:50:3b:f6:f6:
b6:4a:05:be:0f:cd:aa:35:99:64:af:61:8a:e2:49:45:49:c7:
06:52:f2:9a:5b:9d:d6:23:39:85:23:ff:83:a1:56:a2:8c:2b:
f8:f4:7f:76:a0:5f:fa:25:65:76:ab:fa:bf:89:46:21:ab:e5:
77:e5:5b:76:a9:0d:d0:f2:6d:7c:2e:2d:98:c4:4e:7e:1d:71:
6a:77:25:8d:a4:78:84:d8:8c:a8:9d:d9:62:29:bb:a8:54:33:
8d:ce:54:7f:3e:91:db:a9:fa:8b:1a:2b:7e:c4:d2:a9:ae:28:
da:a0:d9:84:8d:55:db:b3:81:33:98:d3:c0:ef:ef:c0:6b:f8:
5d:e0:03:d9:25:7a:0b:14:d9:6b:90:20:be:5a:9a:37:e7:b9:
e8:26:5f:15:bd:ef:40:ea:9f:9f:ab:d9:8a:69:55:08:85:61:
6e:4d:a6:1c:5d:73:0d:45:f6:21:13:6f:d8:83:5c:1b:97:46:
75:5b:ad:9a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org