Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Wmn0MODI2Xjk5YpcJhC960zlhUI.roa
File: Wmn0MODI2Xjk5YpcJhC960zlhUI.roa (raw, json)
Hash identifier: FX1jLbIbFyf9VEy6LS9r0X/e9SgAkuGcF1GwsTtwx6w=
Subject key identifier: 5A:69:F4:30:E0:C8:D9:78:E4:E5:8A:5C:26:10:BD:EB:4C:E5:85:42
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018E50793723FFD048A3227148CA7E3606B0
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Wmn0MODI2Xjk5YpcJhC960zlhUI.roa
Signing time: Mon 18 Mar 2024 07:31:45 +0000
ROA not before: Mon 18 Mar 2024 07:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23858
IP address blocks: 45.14.105.0/24 maxlen: 32
45.14.107.0/24 maxlen: 32
45.87.92.0/24 maxlen: 32
45.87.93.0/24 maxlen: 32
45.87.95.0/24 maxlen: 32
45.139.192.0/24 maxlen: 32
45.139.195.0/24 maxlen: 32
92.118.188.0/24 maxlen: 32
185.194.54.0/24 maxlen: 32
185.248.87.0/24 maxlen: 32
195.245.219.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Apr 2024 14:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:79:37:23:ff:d0:48:a3:22:71:48:ca:7e:36:06:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Mar 18 07:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a69f430e0c8d978e4e58a5c2610bdeb4ce58542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:56:47:eb:11:8e:fd:63:f1:5b:b8:b6:fd:02:
93:63:d3:25:de:b6:b3:8f:80:70:14:15:07:da:ea:
e7:b2:d1:7b:54:37:72:33:38:a9:95:bd:46:32:ae:
99:47:88:3d:03:41:ca:a9:ea:e7:be:57:5d:8e:29:
3d:59:d5:be:96:76:20:09:c7:5c:61:84:4d:fd:51:
3a:af:56:56:cd:65:b3:fd:ff:a2:10:a5:64:14:8d:
e8:4b:96:8e:ab:f1:4b:78:f7:76:62:f3:a8:75:d3:
63:79:89:f1:da:a1:f1:d9:bb:8f:cc:4a:ac:ff:9d:
94:1a:51:d4:ed:cc:00:24:b6:9a:e4:7d:fd:90:9b:
60:a4:e3:ab:b2:73:7f:c5:9c:1a:4a:4e:9c:f9:16:
66:1f:31:a8:3e:cb:09:7d:de:c7:8f:be:2d:49:ac:
f5:94:db:39:71:c1:12:8d:23:66:24:39:ae:f5:1a:
5f:1c:c0:ad:89:7a:db:e4:f2:07:2a:1e:6a:1b:b7:
92:cc:1e:07:45:84:51:5a:21:89:5b:19:01:3c:7c:
35:93:17:4b:96:25:91:86:be:f4:4e:ca:ea:d5:6c:
de:d2:ea:69:e1:6c:a7:ea:a1:72:b6:9e:8f:b0:ff:
09:b1:ba:4c:75:b2:91:28:c7:28:8e:b2:3a:d3:a3:
89:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:69:F4:30:E0:C8:D9:78:E4:E5:8A:5C:26:10:BD:EB:4C:E5:85:42
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Wmn0MODI2Xjk5YpcJhC960zlhUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.105.0/24
45.14.107.0/24
45.87.92.0/23
45.87.95.0/24
45.139.192.0/24
45.139.195.0/24
92.118.188.0/24
185.194.54.0/24
185.248.87.0/24
195.245.219.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e9:ad:a3:18:1f:7b:3c:a3:23:5f:24:41:27:a0:58:8a:52:
86:69:69:c9:9b:5c:f2:58:40:e8:80:0e:d2:ac:be:13:1a:23:
9b:3b:c7:d5:d8:c0:60:55:47:3f:35:11:97:cc:87:9d:9f:12:
9e:2c:6e:9d:bf:d6:83:1c:23:8a:ba:0f:6e:bc:5d:16:32:c2:
72:d8:12:9b:3d:e5:00:47:c2:a3:06:29:17:b2:e2:1b:96:5a:
e5:ab:86:7f:f4:49:7b:41:7b:03:62:0b:66:0a:f7:62:b4:2e:
a8:48:a3:9c:34:4d:f3:ec:0a:c5:2d:39:f1:ab:47:99:ca:f7:
09:8a:8b:e5:10:f6:5e:d7:ec:7a:e4:62:ac:3c:5f:c7:00:13:
45:15:c1:b9:80:47:48:c7:6e:7f:b7:c1:98:1a:29:cb:1c:89:
67:51:f5:f7:58:4f:3e:e2:c0:3b:d9:e0:1e:63:ad:af:a5:a2:
d3:0e:90:22:b3:25:06:8a:5b:96:68:0a:9c:9d:7e:69:c2:1d:
ad:ab:b2:5e:88:d5:63:0a:0e:b6:2d:1e:af:13:55:f3:91:19:
08:3d:9f:4c:46:e8:f8:ae:3c:04:a1:ee:c0:56:c9:b8:a1:23:
25:b1:85:b9:5b:7b:cb:8b:3f:e4:1c:b8:34:41:b3:1c:64:23:
1d:97:a4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org