Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Ww-HGz8DaNTEkcIce9ym0I_rOeA.roa
File: Ww-HGz8DaNTEkcIce9ym0I_rOeA.roa (raw, json)
Hash identifier: jNNxfQFFewdiFBAaOdS8EvqifrtmNYJMexogZCV8vIs=
Subject key identifier: 5B:0F:87:1B:3F:03:68:D4:C4:91:C2:1C:7B:DC:A6:D0:8F:EB:39:E0
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CC348EF8B87000107D9355882E98F3003
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Ww-HGz8DaNTEkcIce9ym0I_rOeA.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 148.222.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:ef:8b:87:00:01:07:d9:35:58:82:e9:8f:30:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b0f871b3f0368d4c491c21c7bdca6d08feb39e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:84:34:8d:fd:a0:3b:89:63:e8:b6:00:f5:
c6:d1:a0:79:d8:b9:56:ac:77:42:84:58:9b:a9:c7:
2a:0e:c4:25:17:b4:d8:1f:e6:e5:69:4b:00:58:08:
e5:13:eb:4f:51:27:e9:01:ca:1a:62:cb:f1:af:af:
1d:68:29:bf:c4:eb:f2:78:ca:32:f2:7a:1c:c6:9c:
99:d6:6a:e4:01:4e:32:d5:b2:ae:06:9b:b6:64:35:
75:8d:50:98:bb:cf:42:e2:f5:24:54:01:c1:3c:2f:
85:72:40:68:13:0c:f3:19:06:94:0e:d0:f1:f0:b4:
be:00:8f:03:1b:04:34:a9:a3:ec:b0:ff:2b:3a:15:
40:a5:6f:91:dc:54:b3:1c:5b:43:ba:f8:4a:31:50:
c3:c3:2d:43:7a:25:ab:5e:db:78:a4:c8:b3:75:06:
3a:dd:56:10:12:15:6e:97:20:6d:19:a6:42:44:be:
c9:0a:15:71:60:b6:c6:c7:82:a1:47:7f:88:fb:8f:
07:c0:e4:7d:bc:a6:b9:fa:60:4c:f5:17:1a:2b:3a:
73:45:77:88:f1:df:95:fd:d2:6d:6a:78:ac:a7:73:
5a:8e:98:b7:4f:ec:ee:51:c2:c4:cd:bf:8f:ac:9a:
15:bf:69:cc:04:4f:fb:76:4f:45:28:30:2c:38:e1:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0F:87:1B:3F:03:68:D4:C4:91:C2:1C:7B:DC:A6:D0:8F:EB:39:E0
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/Ww-HGz8DaNTEkcIce9ym0I_rOeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.222.244.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:7a:f2:d7:76:24:29:24:2e:15:60:2e:5c:8b:4f:c4:5b:66:
24:ef:b9:34:b2:82:19:7b:07:76:d5:7e:56:98:45:60:51:20:
5a:ee:c3:3f:69:39:91:00:ff:29:7f:46:2d:fe:91:cd:28:89:
08:32:a4:83:0e:db:cb:4f:f3:2c:02:66:f7:1f:05:7d:1d:23:
dd:64:91:c2:3a:7f:e8:b5:a5:3a:a6:2e:41:32:47:4b:d1:8d:
2a:0d:b9:6c:15:d5:14:61:e9:ab:99:9f:be:8a:a8:20:90:2a:
98:82:73:f6:0a:ec:e7:3f:c9:e5:cb:d1:2c:d2:b1:2c:9e:60:
76:7e:22:27:2e:e7:ce:53:cb:dc:87:01:7b:06:ff:c0:14:d9:
07:8b:bb:16:e7:75:1f:9d:24:0c:c9:77:3c:a1:7a:b1:35:1c:
43:5c:d8:d5:00:79:b0:ed:d6:ac:e9:fb:16:99:e9:dc:6a:8f:
93:14:11:bf:38:2f:08:d6:73:43:30:7b:69:3a:2d:84:d9:9a:
32:fe:a5:84:5b:ef:a1:76:c8:c5:b6:59:82:9c:75:f2:28:78:
2c:29:b4:21:ca:de:57:32:3e:d2:bd:1c:43:d0:95:12:f3:a5:
ff:d5:29:ab:25:39:b2:41:d9:fc:ec:f8:3f:01:fc:28:4f:69:
ff:06:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:26 2025 by rpki-client