Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/wXOm8gOVNr7mOJK_iAvgVN11pkw.roa
File: wXOm8gOVNr7mOJK_iAvgVN11pkw.roa (raw, json)
Hash identifier: t8Ugs+kOyluyuizTYg536SsqW77YbXEQ8irv1gfm91U=
Subject key identifier: C1:73:A6:F2:03:95:36:BE:E6:38:92:BF:88:0B:E0:54:DD:75:A6:4C
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018CC26D4451CC52346336767B23992CFA03
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/wXOm8gOVNr7mOJK_iAvgVN11pkw.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211642
IP address blocks: 185.219.42.0/24 maxlen: 24
185.219.43.0/24 maxlen: 24
185.219.40.0/24 maxlen: 24
185.219.41.0/24 maxlen: 24
45.128.206.0/24 maxlen: 24
45.128.204.0/24 maxlen: 24
185.240.102.0/24 maxlen: 24
45.128.207.0/24 maxlen: 24
5.253.60.0/24 maxlen: 24
5.253.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Feb 2024 04:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:44:51:cc:52:34:63:36:76:7b:23:99:2c:fa:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c173a6f2039536bee63892bf880be054dd75a64c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:d4:f8:bc:9c:e0:99:d4:86:de:1b:c0:7b:
4a:fd:25:a1:11:4d:be:18:fd:dc:18:ad:8d:67:bd:
7e:01:35:48:25:c5:02:e5:7d:73:da:d4:a5:ce:d6:
0a:c9:64:4a:1f:b7:a5:5d:ab:f0:b1:11:d0:ad:1b:
6c:79:fd:da:6c:f7:28:80:db:12:5a:cd:88:61:a6:
48:99:6a:c1:39:1a:07:e7:e4:e3:f2:aa:42:86:7d:
1e:59:e9:48:dc:84:6c:82:96:e6:f8:e6:96:1e:ac:
b5:d7:e6:00:a4:f5:ad:97:aa:78:db:2c:0a:30:b8:
5c:35:ae:14:1b:ce:ee:b8:c0:86:73:00:2c:77:c5:
dc:55:36:17:d3:42:e0:df:be:7d:ca:b0:64:7c:62:
9a:be:43:eb:c9:9e:97:85:cc:5b:af:b5:b7:91:08:
2b:1a:19:22:40:18:aa:dd:bc:d1:e4:3a:99:64:42:
0b:c6:43:74:00:37:f5:ec:6d:74:11:6f:74:1d:56:
d5:cd:aa:b6:3c:be:68:df:6f:24:da:f9:1a:ea:c9:
99:98:f3:ae:33:74:bb:b3:08:e8:e9:c5:61:be:1b:
2e:d0:0e:39:37:2e:30:3e:dd:21:90:84:64:1e:b8:
6a:18:e0:41:00:6c:46:9e:e3:db:43:fd:63:92:0f:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:73:A6:F2:03:95:36:BE:E6:38:92:BF:88:0B:E0:54:DD:75:A6:4C
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/wXOm8gOVNr7mOJK_iAvgVN11pkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.60.0/23
45.128.204.0/24
45.128.206.0/23
185.219.40.0/22
185.240.102.0/24
Signature Algorithm: sha256WithRSAEncryption
04:43:3d:95:f4:d9:48:01:0d:6b:a0:e3:3a:8b:e2:a4:0b:37:
35:30:2a:94:1f:17:b4:a9:cb:be:55:6c:18:cc:4e:65:c7:8c:
8b:e3:e6:21:e6:56:c6:78:01:05:46:54:a2:77:dc:bc:17:90:
d1:79:ae:7b:22:9c:e2:88:03:30:1b:16:fc:a0:0d:37:65:8f:
ff:5c:2d:09:55:33:6c:56:2c:73:88:bf:3e:fd:52:ca:d0:84:
8f:54:61:55:08:22:65:2a:2f:2e:92:e5:df:fd:cb:c1:f0:af:
fb:4f:23:72:18:94:20:9e:25:9a:2d:ff:1b:02:d5:cd:bb:cb:
ce:36:ab:07:01:ef:75:19:5e:ef:20:19:d2:94:ea:7e:bb:c7:
96:fb:73:0e:83:0a:17:44:1d:87:5e:1a:1d:94:77:16:c0:a2:
fb:69:b4:5b:1f:ed:21:52:c2:4b:b2:81:b2:8f:40:cc:65:6b:
aa:db:0d:6a:b3:88:67:3b:56:8c:a1:d6:40:0b:9e:b3:99:4b:
3c:62:08:61:f7:5f:d6:c2:6b:d4:86:9a:25:74:f9:8c:25:a1:
79:c0:ed:81:01:f9:39:65:73:dc:fd:aa:7e:11:88:3d:23:bc:
48:c3:ef:58:d0:c4:a0:a2:c1:17:d3:ec:a7:44:d5:ea:b3:64:
d6:2f:35:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org