Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa
File: WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa (raw, json)
Hash identifier: g8MVYqqsBQMkk71Uag9Ngo1CMGiDd38IncMxboydX9E=
Subject key identifier: 5A:22:CB:20:61:34:3C:6C:3E:32:EE:0C:BF:02:A2:87:88:39:CD:6A
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0190540A3994CE857B168CD3AE9E70F3C4B1
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa
Signing time: Wed 26 Jun 2024 10:14:34 +0000
ROA not before: Wed 26 Jun 2024 10:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.141.168.0/23 maxlen: 24
185.81.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 14:35:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:0a:39:94:ce:85:7b:16:8c:d3:ae:9e:70:f3:c4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jun 26 10:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a22cb2061343c6c3e32ee0cbf02a2878839cd6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:9d:c1:54:ce:fc:bc:57:f1:3d:9f:25:17:
9b:5c:15:16:9f:57:c6:33:c4:df:aa:95:7f:b0:f2:
f6:62:96:1e:89:91:5b:37:84:69:66:2a:ca:92:b1:
79:eb:35:8d:ba:ed:89:aa:08:27:b6:4a:24:97:e1:
3c:57:51:ca:80:36:9d:5d:80:1d:72:1a:8b:c2:d3:
31:a0:51:20:86:a2:0f:fc:32:89:d0:e1:a0:97:45:
5b:24:45:e0:34:a3:76:de:1e:33:00:81:cf:ac:93:
65:de:2d:6a:47:7e:b6:fa:cb:3c:28:af:1c:d9:7a:
d4:44:51:c2:cc:fc:5f:a6:f8:5b:69:c5:ad:33:ed:
01:78:91:ac:25:92:78:8f:b1:64:a2:35:7b:f1:4b:
88:ef:c1:05:91:59:bf:fe:39:e4:1c:d3:bb:ad:8b:
03:dd:27:ae:5a:bc:36:b6:c9:eb:64:df:f5:11:db:
3f:d5:09:d4:1c:5a:96:54:67:60:64:36:96:21:af:
89:1e:c2:d1:6c:53:a3:5f:30:4e:91:85:6e:20:b0:
de:9e:96:c1:70:0e:7c:96:b1:82:74:f9:66:68:6a:
86:9e:d2:70:8c:54:5e:41:d4:0b:12:3a:69:b5:73:
6c:cc:6c:54:4f:72:75:b4:f2:cc:02:c0:1e:d5:33:
e6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:22:CB:20:61:34:3C:6C:3E:32:EE:0C:BF:02:A2:87:88:39:CD:6A
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/WiLLIGE0PGw-Mu4MvwKih4g5zWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.168.0/23
185.81.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:6c:d0:7e:97:68:ab:1c:99:fe:60:68:7d:2a:7f:2a:83:34:
2e:76:39:70:23:b0:60:8e:be:f6:02:52:a9:1a:6a:1d:81:5f:
ed:07:f9:81:56:e6:08:41:ea:bc:80:43:b2:1e:93:0f:2b:92:
08:64:9f:0a:99:f9:81:7c:dd:66:3f:e0:c9:b3:20:0e:fc:ae:
4b:77:f5:7f:c5:d4:48:90:97:93:93:4f:ff:fe:1b:5c:e3:57:
51:3c:4e:fb:88:3d:dc:ef:50:73:76:99:92:29:50:2a:b7:c1:
b9:cf:ba:46:2d:87:ef:5e:0e:9a:28:16:6e:3d:00:cb:33:8f:
94:b6:89:3e:f0:76:a8:4e:d5:e7:39:e7:47:b5:1a:2d:52:f9:
e5:94:0b:c4:c5:42:35:c6:42:91:e7:20:20:88:4d:b3:7a:89:
c9:74:1a:0c:c3:94:30:17:f5:6a:e4:44:f7:dd:0a:90:4c:16:
1c:10:d8:2d:65:20:22:ca:9d:15:53:b3:bf:6d:0c:ef:c2:a1:
ea:47:8f:19:61:7b:55:a7:dd:94:ea:dd:bb:7f:03:ad:92:ff:
f5:47:b3:5c:ad:9f:71:87:24:28:3e:b7:df:25:be:cc:f3:43:
0d:4d:ca:e9:b8:14:29:3b:26:5c:65:f7:4d:49:e2:04:fd:af:
29:d9:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 16:11:29 2024 by rpki-client on console-fra.rpki-client.org