Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/WyS_Sohvki429wtI_LvdfvSTS2A.roa
File: WyS_Sohvki429wtI_LvdfvSTS2A.roa (raw, json)
Hash identifier: 0V3mgmOnDr7l1SJVTz3GigjxwvpOq2vNPBAuGPPIGnw=
Subject key identifier: 5B:24:BF:4A:88:6F:92:2E:36:F7:0B:48:FC:BB:DD:7E:F4:93:4B:60
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 0193BA92CB52B1BFCD391F413D6F8BD0E5AB
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/WyS_Sohvki429wtI_LvdfvSTS2A.roa
Signing time: Thu 12 Dec 2024 11:13:22 +0000
ROA not before: Thu 12 Dec 2024 11:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198440
IP address blocks: 37.48.224.0/24 maxlen: 24
37.48.229.0/24 maxlen: 24
37.48.230.0/24 maxlen: 24
62.64.128.0/21 maxlen: 24
62.64.136.0/22 maxlen: 24
62.64.144.0/20 maxlen: 24
185.102.148.0/22 maxlen: 24
188.74.64.0/19 maxlen: 24
188.74.70.0/23 maxlen: 23
188.74.72.0/23 maxlen: 23
188.74.74.0/23 maxlen: 23
188.74.76.0/23 maxlen: 23
188.74.80.0/22 maxlen: 22
188.74.84.0/22 maxlen: 22
217.168.248.0/21 maxlen: 24
2a05:87c0::/29 maxlen: 48
2a05:87c3:1000::/36 maxlen: 36
2a05:87c3:2000::/36 maxlen: 36
2a05:87c3:3000::/36 maxlen: 36
2a05:87c3:7000::/36 maxlen: 36
2a05:87c3:8000::/36 maxlen: 36
2a05:87c3:9000::/36 maxlen: 36
2a05:87c7:1000::/36 maxlen: 36
2a05:87c7:2000::/36 maxlen: 36
2a05:87c7:3000::/36 maxlen: 36
2a05:87c7:7000::/36 maxlen: 36
2a05:87c7:8000::/36 maxlen: 36
2a05:87c7:9000::/36 maxlen: 36
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:92:cb:52:b1:bf:cd:39:1f:41:3d:6f:8b:d0:e5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Dec 12 11:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b24bf4a886f922e36f70b48fcbbdd7ef4934b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:60:fa:21:38:79:86:32:8e:71:4e:66:66:
7f:07:28:38:f9:02:28:b2:ad:c2:ae:f2:a2:70:9f:
e8:76:c5:e5:31:ca:26:06:88:48:ea:d2:ad:05:a7:
3c:aa:e0:8c:3a:fb:3f:7d:a0:8e:04:4c:57:cb:eb:
23:ee:9a:a2:6e:f8:9a:70:7f:29:f9:95:17:f2:df:
dc:c1:2c:df:67:65:99:b5:b8:34:36:3e:a0:ec:36:
a9:15:a3:6c:ce:85:64:50:64:e4:6f:a0:97:ee:11:
f1:6d:f9:c9:74:9c:8d:d1:42:41:94:2c:b5:5b:8e:
46:f5:d5:9e:ac:c1:60:1c:b8:48:6e:24:a0:81:e0:
6b:3f:b8:30:c2:bd:f5:74:29:a2:ed:3a:f5:b3:89:
44:6c:3f:d2:f8:39:6d:5b:ec:10:b7:87:74:57:ba:
a9:96:f7:ce:43:3c:59:66:c2:27:fa:18:18:62:29:
f5:04:3f:de:32:a8:a8:6f:c1:c9:4d:d8:0c:7a:21:
3f:80:c2:ac:9f:ed:38:6c:01:a0:3b:9e:d8:8d:81:
6e:a4:55:d2:52:8c:9e:57:7a:61:00:47:d6:51:4c:
9c:1b:78:04:a1:86:3f:68:2e:e8:a0:c8:9e:ec:03:
36:89:f8:fe:05:c0:d7:5c:ad:27:ac:53:fe:39:83:
2b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:24:BF:4A:88:6F:92:2E:36:F7:0B:48:FC:BB:DD:7E:F4:93:4B:60
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/WyS_Sohvki429wtI_LvdfvSTS2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.48.224.0/24
37.48.229.0-37.48.230.255
62.64.128.0-62.64.139.255
62.64.144.0/20
185.102.148.0/22
188.74.64.0/19
217.168.248.0/21
IPv6:
2a05:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
6f:17:b6:a4:8e:34:d6:a6:15:4f:e8:a9:bc:33:53:8f:c2:0a:
2d:1c:72:88:fe:38:e1:55:8a:59:c2:b9:66:1d:a8:2d:7f:6b:
e4:93:69:e4:7a:97:b9:eb:bf:20:57:2a:8f:b4:bc:95:f2:c4:
e0:e9:f1:79:d9:ec:ee:75:38:2f:c1:f8:cf:19:3a:bb:a3:26:
8f:cf:7c:4f:bf:86:8f:e9:dc:33:e8:b3:13:29:0b:f6:ce:48:
74:e9:76:7c:9f:0c:97:5e:48:b8:f3:ab:d0:39:f3:cc:38:b8:
2c:2b:92:eb:90:b8:3a:6a:2f:a1:09:10:ac:34:66:73:ce:d2:
45:f3:52:3f:9c:d7:b1:c6:7a:b4:6b:cd:80:b1:d3:fd:a9:02:
19:c1:72:df:51:69:6e:f0:27:fd:7c:d9:9f:a6:61:65:17:1b:
0f:0a:24:bf:9f:f8:15:38:75:2a:91:87:2a:9e:e6:78:34:1a:
da:50:f8:8b:76:21:7f:70:f9:c6:31:1c:cd:fa:93:c8:48:8a:
e8:ab:d8:e8:06:bc:19:d1:23:7b:02:a1:42:e5:c7:b8:f7:d1:
85:39:57:d0:1a:9a:3f:f0:d3:59:af:7e:3c:e5:25:c2:3f:a7:
ca:90:cf:d5:13:1e:d8:a6:c0:9f:b7:43:8b:81:17:a6:22:72:
18:2f:af:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:37 2025 by rpki-client