Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/XwreDvLXEOBPQs-Wn6gC2X5GLsc.roa
File: XwreDvLXEOBPQs-Wn6gC2X5GLsc.roa (raw, json)
Hash identifier: MTWtyo+ISN0UlSNUCHiZzskKkVFh4LtkXI7pbrJQeuE=
Subject key identifier: 5F:0A:DE:0E:F2:D7:10:E0:4F:42:CF:96:9F:A8:02:D9:7E:46:2E:C7
Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Certificate serial: 018D21C01024E6E0F5DF65F5097952DF835C
Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/XwreDvLXEOBPQs-Wn6gC2X5GLsc.roa
Signing time: Fri 19 Jan 2024 12:44:11 +0000
ROA not before: Fri 19 Jan 2024 12:44:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203847
IP address blocks: 45.142.15.0/24 maxlen: 24
185.122.44.0/22 maxlen: 22
185.206.52.0/23 maxlen: 23
193.162.128.0/24 maxlen: 24
2a01:57e0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 22 Feb 2024 08:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:21:c0:10:24:e6:e0:f5:df:65:f5:09:79:52:df:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e
Validity
Not Before: Jan 19 12:44:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f0ade0ef2d710e04f42cf969fa802d97e462ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:2b:af:1f:78:60:ef:35:f8:18:fb:bb:c3:
74:e0:b8:d0:cd:ef:ac:81:cf:6c:14:03:76:db:da:
41:1e:d6:f8:e7:67:d2:2e:a7:ee:79:c1:87:8e:96:
c4:db:2d:e8:3b:28:b9:a9:bc:67:11:a9:d4:61:0d:
32:e4:5f:7a:26:a6:35:a2:8a:eb:76:84:ac:22:e1:
99:e7:4e:67:b8:ad:42:3b:58:0a:2e:3b:2c:ff:e4:
41:b2:c9:2b:c5:ee:47:ad:12:83:9c:6b:33:e5:b1:
3d:c6:e0:e5:25:ba:24:02:0f:3f:9a:3f:7b:fb:bb:
61:dd:7b:d9:41:1d:38:c4:f3:1f:2e:ed:de:35:e4:
59:24:67:04:41:5f:28:6b:9b:b7:3d:95:64:20:d0:
86:2b:24:c3:5c:0c:af:a8:21:30:ca:15:68:d8:b5:
7b:2b:91:25:f3:5f:ed:91:05:b0:4d:6d:63:fb:fe:
16:cd:66:86:95:09:5b:c1:6a:86:eb:0a:33:a3:60:
f4:20:bd:e5:4e:07:97:0c:8d:2a:4d:24:6c:4b:34:
06:67:84:ec:76:34:a5:f1:6a:ca:ea:f1:7b:81:62:
26:8c:6d:7f:e5:d7:fc:01:e9:b4:27:94:ca:2a:75:
68:34:87:a5:de:d2:91:2f:6e:9b:a2:04:e7:e2:b2:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:DE:0E:F2:D7:10:E0:4F:42:CF:96:9F:A8:02:D9:7E:46:2E:C7
X509v3 Authority Key Identifier:
keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/XwreDvLXEOBPQs-Wn6gC2X5GLsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.15.0/24
185.122.44.0/22
185.206.52.0/23
193.162.128.0/24
IPv6:
2a01:57e0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:94:3d:0a:68:5a:4c:86:27:f3:9e:40:49:77:0b:8f:77:c1:
3b:02:0e:8b:c7:48:42:09:31:06:84:54:dd:8e:67:ed:69:3c:
c3:e1:64:19:d0:2a:01:72:a0:fb:13:e2:68:c9:c9:cc:c9:b7:
cd:70:b3:8e:fb:9a:3e:7b:78:27:7f:f4:2f:23:a2:d4:80:54:
57:e4:b3:36:9e:8b:ea:b5:6f:70:75:55:f8:6d:3c:b0:20:0c:
41:5f:1a:a9:5f:78:5c:7c:db:d4:3a:43:be:8c:ae:ec:3d:3a:
43:fb:c1:a0:61:d8:f6:6c:6e:93:bf:dd:55:4e:ed:33:c9:73:
87:29:36:02:6b:9c:86:f0:92:97:95:1e:a6:af:59:cf:05:b1:
0d:64:89:75:b7:b1:de:d2:29:ad:44:ea:d4:e3:c4:0c:1f:a1:
8c:14:e8:f4:14:c7:c8:05:ed:55:77:ba:93:f7:1b:b6:bd:ed:
40:56:dc:18:66:d2:e0:ee:a4:47:f2:35:17:66:15:9e:16:4e:
07:ff:6e:43:b1:48:12:56:63:14:9d:a9:22:20:e4:7a:38:99:
99:05:99:d3:61:66:e5:e9:5d:24:61:06:d0:39:d1:80:4a:d7:
51:37:34:4d:d3:7f:c7:f4:b5:ff:b0:c3:06:a8:ca:48:d4:30:
8f:f5:51:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:55 2025 by rpki-client