Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Wa5ZN-6Cru39D7pfczTgZTbmnW8.roa
File: Wa5ZN-6Cru39D7pfczTgZTbmnW8.roa (raw, json)
Hash identifier: wRngWegG3VJjifLYo0YDT06+iqwykUL4Xl7zPBeIwS4=
Subject key identifier: 59:AE:59:37:EE:82:AE:ED:FD:0F:BA:5F:73:34:E0:65:36:E6:9D:6F
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 01917A32EA569D9A25639E2307A608C6AB17
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Wa5ZN-6Cru39D7pfczTgZTbmnW8.roa
Signing time: Thu 22 Aug 2024 13:07:22 +0000
ROA not before: Thu 22 Aug 2024 13:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
51.179.192.0/18 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
217.142.64.0/18 maxlen: 24
217.168.248.0/21 maxlen: 24
2a05:87c0::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 29 Aug 2024 13:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:32:ea:56:9d:9a:25:63:9e:23:07:a6:08:c6:ab:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Aug 22 13:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ae5937ee82aeedfd0fba5f7334e06536e69d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c2:05:3c:c7:05:16:35:08:0c:f6:34:ac:4e:
49:8a:18:06:65:44:2a:a0:17:28:6b:cb:c6:77:cf:
4f:e3:b2:73:66:37:ad:e3:e4:cc:16:a6:35:9b:03:
1c:ef:7a:08:86:d7:5c:19:31:39:ed:86:54:a5:78:
97:59:f2:bd:c4:38:61:5f:4e:09:b7:d1:84:e5:9a:
88:65:d2:a1:8c:a3:68:c2:10:7f:72:83:8c:de:2b:
ec:14:2f:2e:f1:51:19:6d:ee:dd:15:73:24:02:60:
0c:50:e5:29:85:cf:fc:2d:6b:5d:7b:bb:43:5e:39:
87:99:cf:cd:90:61:9b:f1:d0:76:70:0f:7a:2b:ad:
8c:14:b6:41:1d:69:86:65:7b:4b:15:97:f8:99:7d:
ca:23:95:dd:76:56:fc:a6:fc:6e:c7:91:e9:37:fa:
35:db:b0:64:24:17:00:6b:8c:8c:f9:e9:e1:d3:80:
43:49:a5:8b:d2:ec:b9:ac:af:ab:73:5d:f6:00:33:
63:4a:f5:94:dd:ac:a3:75:98:85:0f:7b:e1:87:61:
1a:e3:2d:9f:6e:4d:f9:58:ae:c4:4a:e7:bc:f7:7f:
e1:ea:a9:96:ab:4b:8b:25:05:e0:27:87:03:d1:f2:
9e:da:ca:f1:89:33:a1:2a:d8:14:54:bc:30:c2:16:
e2:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AE:59:37:EE:82:AE:ED:FD:0F:BA:5F:73:34:E0:65:36:E6:9D:6F
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/Wa5ZN-6Cru39D7pfczTgZTbmnW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.224.0/24
37.48.229.0-37.48.230.255
51.179.192.0/18
62.64.128.0-62.64.139.255
62.64.144.0/20
185.102.148.0/22
188.74.64.0/19
217.142.64.0/18
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
26:4d:57:ac:f0:f7:b7:7d:c2:c7:fa:4b:35:05:ba:ca:1c:10:
fe:06:79:bd:8b:be:f6:02:55:fb:5e:7a:81:f9:cf:ff:4f:53:
e3:9f:eb:75:76:aa:0d:ba:4e:0d:91:25:8b:4d:2b:76:57:d9:
72:64:94:2c:73:67:c3:93:99:a1:44:75:01:48:90:be:18:8e:
e4:de:ad:00:fb:31:e1:87:56:10:ef:a8:b3:40:df:a8:da:4b:
32:f8:f6:1f:3a:8b:c6:cd:ff:f1:40:65:6c:4f:a6:de:8a:19:
f1:93:c3:2c:11:af:fc:e6:6a:4a:bb:8c:44:fb:35:2c:37:be:
7d:05:08:a8:36:e7:ad:9f:6e:10:ec:04:3e:3e:db:f0:b6:44:
f9:b8:6d:98:ea:09:1d:fe:24:25:e3:b2:f9:8b:91:58:28:bf:
d3:fe:8c:9f:91:0c:8b:66:4e:a2:15:1b:ae:8a:ee:23:13:50:
a6:aa:bc:e1:48:e6:19:cd:fe:c1:07:8f:f4:50:ac:04:fd:ec:
a8:bb:c8:cc:f1:7f:b6:d7:e3:3f:ce:3f:e4:6f:3a:aa:8e:c0:
fe:a1:32:bd:72:40:8c:8e:9a:0f:f3:b3:91:97:66:4d:67:c1:
49:47:f7:ea:a7:16:dd:c1:11:a1:fc:7c:d4:cf:07:a8:5f:45:
be:a7:66:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 14:50:21 2024 by rpki-client on console-fra.rpki-client.org