Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/WnLvc9i7fHnSu_0P_wQi-81wD-c.roa
File: WnLvc9i7fHnSu_0P_wQi-81wD-c.roa (raw, json)
Hash identifier: G/Wpa1rZfeTxSoKaHnIaP5wH5gxu4yruWCQR4dZlkzU=
Subject key identifier: 5A:72:EF:73:D8:BB:7C:79:D2:BB:FD:0F:FF:04:22:FB:CD:70:0F:E7
Certificate issuer: /CN=8dd003af04774dd3e39730497989a3a171516252
Certificate serial: 018CC8012E59E7C10B3B2FB880BE31DAE58F
Authority key identifier: 8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/WnLvc9i7fHnSu_0P_wQi-81wD-c.roa
Signing time: Tue 02 Jan 2024 02:29:29 +0000
ROA not before: Tue 02 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211649
IP address blocks: 185.251.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2e:59:e7:c1:0b:3b:2f:b8:80:be:31:da:e5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dd003af04774dd3e39730497989a3a171516252
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a72ef73d8bb7c79d2bbfd0fff0422fbcd700fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:42:5e:62:c1:ef:56:b1:84:65:62:09:15:9e:
1c:dd:fa:a1:3f:51:54:1f:d8:f4:da:46:9d:58:bf:
5f:45:d4:34:91:6b:b4:4d:f9:e2:fb:98:fa:58:2e:
a9:33:b9:7f:e3:d3:ba:d9:25:4f:39:a7:a2:08:c3:
00:1a:bc:72:b8:77:d1:64:23:14:84:00:55:86:9c:
c2:57:7a:09:35:4a:8f:e7:14:68:1d:c3:0b:19:27:
68:d4:99:0b:1b:a5:c6:82:d3:ae:ee:d2:3f:e9:66:
89:83:d0:16:32:d2:dc:6a:87:93:bf:ba:c9:bf:7f:
81:6c:18:88:dd:be:11:33:42:86:c1:5e:62:a6:3a:
26:56:0a:7c:07:7d:9b:0c:b8:a5:26:c4:9d:20:49:
5e:dd:77:d1:53:db:e9:f4:38:fa:6c:8b:a7:8c:0f:
d1:a2:bd:4c:66:08:23:a2:c2:a8:53:ff:12:3e:cd:
e6:9b:2a:b8:f7:a8:7b:8c:1f:77:b7:ee:2b:17:57:
d8:fc:09:94:37:8f:6a:96:34:88:d3:39:c4:e9:5d:
5f:a0:5a:e8:db:f5:a4:bd:d6:d3:c8:02:b9:86:28:
f8:0f:0d:4b:1a:fa:9e:f5:f5:11:08:a1:f5:17:66:
c4:24:3d:b6:ec:dd:81:3d:27:fd:c8:fe:28:0b:c3:
34:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:72:EF:73:D8:BB:7C:79:D2:BB:FD:0F:FF:04:22:FB:CD:70:0F:E7
X509v3 Authority Key Identifier:
keyid:8D:D0:03:AF:04:77:4D:D3:E3:97:30:49:79:89:A3:A1:71:51:62:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jdADrwR3TdPjlzBJeYmjoXFRYlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/WnLvc9i7fHnSu_0P_wQi-81wD-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/1af6ea-c736-4c20-a83c-67cd2b459aae/1/jdADrwR3TdPjlzBJeYmjoXFRYlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.71.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:01:a0:5c:d4:de:6b:1d:42:f5:41:ef:f8:13:bd:f6:71:89:
72:8a:f0:00:6b:4f:97:df:7a:cd:95:21:fc:03:4f:8c:f7:20:
7c:0d:12:bb:d3:4f:06:1e:20:38:2a:2b:e6:17:ac:1e:ed:e7:
3a:88:72:a8:04:8e:a4:fb:08:16:f2:bd:c9:2e:aa:dc:76:bb:
43:44:07:85:5b:5e:02:a0:62:ae:88:63:f1:3e:21:35:c2:0a:
80:ec:ec:38:b2:c6:30:91:26:05:c1:39:e9:0c:b1:17:d5:4e:
c1:e0:85:d2:8e:dd:30:b0:82:f6:77:fe:00:90:af:c2:c7:72:
b3:02:5e:1b:a3:69:36:6c:04:c3:1b:46:e9:d1:89:39:ff:96:
7c:c2:b9:50:90:98:e3:62:24:14:bf:6a:bd:c7:ad:06:4d:0d:
5e:0e:79:49:0f:c8:de:14:5a:e9:4e:2b:b6:fa:cc:12:87:b7:
4f:60:1a:97:12:d1:70:c8:25:0a:7e:be:c7:d3:d8:c1:27:74:
20:96:27:17:dd:9f:eb:6a:da:32:89:da:b3:a0:20:40:5b:84:
f1:0a:48:20:e9:18:77:b8:89:b4:13:7e:02:02:6b:7a:96:48:
65:ce:13:c2:8c:12:6e:83:62:96:fd:98:3a:1a:1d:00:22:1b:
84:49:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:08:47 2025 by rpki-client