Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/wTyFyXcdF79iII395m4imCgmZGs.roa
File: wTyFyXcdF79iII395m4imCgmZGs.roa (raw, json)
Hash identifier: R2sXWiwhXEXteg7+8azboGBdzTMOHjYAAg+o3C5j7H4=
Subject key identifier: C1:3C:85:C9:77:1D:17:BF:62:20:8D:FD:E6:6E:22:98:28:26:64:6B
Certificate issuer: /CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Certificate serial: 0191B6B3CDC401CD35999A49E1AA79060C8C
Authority key identifier: 50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/wTyFyXcdF79iII395m4imCgmZGs.roa
Signing time: Tue 03 Sep 2024 07:05:22 +0000
ROA not before: Tue 03 Sep 2024 07:05:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41722
IP address blocks: 91.142.80.0/24 maxlen: 24
91.142.81.0/24 maxlen: 24
91.142.82.0/24 maxlen: 24
91.142.83.0/24 maxlen: 24
91.142.84.0/24 maxlen: 24
91.142.85.0/24 maxlen: 24
91.142.86.0/24 maxlen: 24
91.142.87.0/24 maxlen: 24
91.142.88.0/24 maxlen: 24
91.142.89.0/24 maxlen: 24
91.142.90.0/24 maxlen: 24
91.142.91.0/24 maxlen: 24
91.142.92.0/24 maxlen: 24
91.142.93.0/24 maxlen: 24
91.142.94.0/24 maxlen: 24
91.142.95.0/24 maxlen: 24
178.249.68.0/24 maxlen: 24
178.249.69.0/24 maxlen: 24
178.249.70.0/24 maxlen: 24
178.249.71.0/24 maxlen: 24
178.250.152.0/24 maxlen: 24
178.250.153.0/24 maxlen: 24
178.250.154.0/24 maxlen: 24
178.250.155.0/24 maxlen: 24
185.53.20.0/24 maxlen: 24
185.53.21.0/24 maxlen: 24
185.53.22.0/24 maxlen: 24
185.53.23.0/24 maxlen: 24
185.73.212.0/24 maxlen: 24
185.73.213.0/24 maxlen: 24
185.73.214.0/24 maxlen: 24
185.73.215.0/24 maxlen: 24
185.147.80.0/24 maxlen: 24
185.147.81.0/24 maxlen: 24
185.147.82.0/24 maxlen: 24
185.147.83.0/24 maxlen: 24
185.162.92.0/24 maxlen: 24
185.162.93.0/24 maxlen: 24
185.162.94.0/23 maxlen: 23
185.162.94.0/24 maxlen: 24
185.162.95.0/24 maxlen: 24
185.174.165.0/24 maxlen: 24
185.174.166.0/24 maxlen: 24
185.174.167.0/24 maxlen: 24
2a03:21c0::/32 maxlen: 32
2a07:a500::/32 maxlen: 32
2a07:a501::/32 maxlen: 32
2a07:a502::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 23 Sep 2024 06:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b6:b3:cd:c4:01:cd:35:99:9a:49:e1:aa:79:06:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50f2d6b21660fad1f60e2df9d0bd7c6ccf95c311
Validity
Not Before: Sep 3 07:05:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c13c85c9771d17bf62208dfde66e22982826646b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:48:ff:d7:37:76:65:17:75:56:f5:23:d9:7a:
18:d1:d5:3d:8e:1b:39:95:33:c6:65:1f:1e:c0:aa:
d0:c4:7b:ae:46:2d:a1:36:17:4e:a2:3a:cd:b5:3e:
f0:88:a4:06:c1:46:a0:69:42:75:fd:46:3f:de:f7:
60:ec:00:bd:8d:e6:2b:d1:56:8d:37:09:4d:1a:02:
0b:5c:7c:f7:97:6e:e5:ff:65:8a:e8:b9:26:5d:3d:
fd:64:1b:a9:56:88:70:a3:f5:5b:2c:18:1e:cb:cd:
a7:2c:7d:68:ff:9b:f6:be:32:5a:3d:dc:c2:51:79:
87:e2:c3:fb:80:d5:ae:ce:af:c0:03:f7:d1:a1:19:
ce:b7:e8:6f:13:ec:59:30:af:36:d4:1c:79:90:6d:
a9:4e:e7:20:4c:41:70:94:b3:50:47:13:e0:ff:80:
ac:5b:eb:3e:d1:52:ba:78:db:c2:47:52:67:f1:de:
31:88:91:41:5e:01:aa:57:6a:76:03:30:18:26:5a:
a0:2f:c6:ff:1c:7b:5f:85:3e:91:9a:51:fa:51:56:
60:62:09:19:e3:59:75:4d:c9:a8:f9:2d:95:54:57:
71:53:0f:f0:c3:21:6f:03:83:c9:c0:30:38:b2:64:
d1:be:0e:71:94:e0:be:51:3b:38:6f:30:a9:f8:07:
a4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3C:85:C9:77:1D:17:BF:62:20:8D:FD:E6:6E:22:98:28:26:64:6B
X509v3 Authority Key Identifier:
keyid:50:F2:D6:B2:16:60:FA:D1:F6:0E:2D:F9:D0:BD:7C:6C:CF:95:C3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UPLWshZg-tH2Di350L18bM-VwxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/wTyFyXcdF79iII395m4imCgmZGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/d0edd5-6087-4be1-b36f-ab3dd5dc6709/1/UPLWshZg-tH2Di350L18bM-VwxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.80.0/20
178.249.68.0/22
178.250.152.0/22
185.53.20.0/22
185.73.212.0/22
185.147.80.0/22
185.162.92.0/22
185.174.165.0-185.174.167.255
IPv6:
2a03:21c0::/32
2a07:a500::-2a07:a502:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
60:cf:90:cb:bd:15:d6:eb:d6:a2:33:72:c8:98:ad:ff:b7:0e:
b0:38:da:2b:c4:ac:e4:56:67:b6:20:ac:d1:dd:2f:ef:5b:62:
41:d6:e5:95:d9:d2:59:f3:01:5d:3c:96:cc:41:a0:56:94:60:
fd:d7:ca:05:12:1b:d5:e1:48:8a:45:dd:37:1a:9a:eb:f6:4d:
f2:fb:69:dd:a3:7c:17:c6:40:79:01:71:7b:58:f1:5d:c9:33:
22:2f:d0:9b:dc:78:23:ab:a5:4d:6a:e6:76:67:ef:bb:5f:b6:
67:5b:a6:98:81:58:98:38:62:cc:61:93:59:94:ca:11:16:6f:
7e:25:bf:de:d2:23:f6:8b:f4:8f:b0:c0:83:03:c4:9b:cd:d0:
c0:17:16:70:eb:c9:08:a8:5b:ec:19:c0:12:ee:f3:93:45:c4:
30:ba:62:7a:3c:a1:14:0a:f8:a8:cc:97:d1:e6:3c:54:56:b4:
72:da:9a:63:37:24:f1:ee:ea:2c:9d:d0:ec:9a:b0:e9:99:aa:
ae:39:ab:78:73:c2:33:01:74:18:19:61:da:02:1c:e9:52:3e:
6b:96:e5:05:da:3e:dd:61:e4:cb:76:c2:55:c8:ce:76:73:24:
f2:ab:31:4c:6a:5e:b5:0e:8d:5b:e2:7d:ce:f8:a1:5f:2b:d8:
67:22:eb:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:17:50 2025 by rpki-client