Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Wm-txAoWY3mVOBvMkUs0k7zRA98.roa
File: Wm-txAoWY3mVOBvMkUs0k7zRA98.roa (raw, json)
Hash identifier: Mlvcod4nsWZFpq3zdXYi/1mX1AD65c12OGATnyXeaOI=
Subject key identifier: 5A:6F:AD:C4:0A:16:63:79:95:38:1B:CC:91:4B:34:93:BC:D1:03:DF
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01916EFBD21A3663692B720A1DCDB6BD96A7
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Wm-txAoWY3mVOBvMkUs0k7zRA98.roa
Signing time: Tue 20 Aug 2024 08:51:22 +0000
ROA not before: Tue 20 Aug 2024 08:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41313
IP address blocks: 46.35.160.0/19 maxlen: 24
79.110.120.0/21 maxlen: 24
79.110.124.0/24 maxlen: 24
80.95.16.0/21 maxlen: 24
80.95.22.0/24 maxlen: 24
93.152.235.0/24 maxlen: 24
93.175.244.0/23 maxlen: 24
95.158.128.0/18 maxlen: 24
151.252.192.0/20 maxlen: 24
185.18.228.0/22 maxlen: 24
185.40.164.0/22 maxlen: 24
212.21.128.0/19 maxlen: 24
2a00:e200::/32 maxlen: 48
2a00:e200:107::/48 maxlen: 48
2a0d:3b40::/29 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Sep 2024 17:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6e:fb:d2:1a:36:63:69:2b:72:0a:1d:cd:b6:bd:96:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Aug 20 08:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a6fadc40a16637995381bcc914b3493bcd103df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:17:c8:4d:14:03:ef:26:f4:e3:31:30:8a:5d:
5b:92:07:cd:41:75:fd:cb:39:69:01:d4:68:f4:d5:
f4:07:3f:3c:cf:78:9a:e8:98:7e:2c:2c:cf:1a:e4:
d5:cc:21:0f:0d:c1:c3:b4:98:2c:31:6b:50:6b:f5:
bc:0f:02:5b:38:94:04:9e:33:0b:5e:2e:2f:41:c3:
b1:43:81:8e:3c:13:19:30:55:9d:3e:60:70:bc:50:
6b:00:d2:97:1f:d5:6b:51:88:de:d7:47:d2:72:75:
a0:e7:17:1b:5e:e8:dc:b2:1c:a1:b4:c1:7d:7c:cf:
c0:a6:3f:08:bc:4c:47:8a:15:bc:6d:84:8f:b6:23:
f6:94:61:9f:2e:f6:1b:08:33:a9:5d:6b:55:3e:a4:
b0:30:f7:32:19:53:8e:9a:e0:50:07:99:96:fe:d2:
59:bf:61:0b:21:ef:49:d6:3c:f9:3b:96:fb:8b:18:
d1:aa:d6:f9:db:23:a5:57:94:9a:79:48:e5:c1:0f:
05:f0:f3:66:0a:80:1a:55:6e:76:f3:52:ca:cd:be:
bc:cb:27:1e:c4:69:1e:25:ed:ea:43:ac:69:0e:c5:
10:61:5d:93:77:12:cc:b1:44:4b:23:87:37:3e:07:
8b:69:7c:54:c1:a0:d2:17:01:c4:1f:f0:a7:00:2b:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6F:AD:C4:0A:16:63:79:95:38:1B:CC:91:4B:34:93:BC:D1:03:DF
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/Wm-txAoWY3mVOBvMkUs0k7zRA98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.160.0/19
79.110.120.0/21
80.95.16.0/21
93.152.235.0/24
93.175.244.0/23
95.158.128.0/18
151.252.192.0/20
185.18.228.0/22
185.40.164.0/22
212.21.128.0/19
IPv6:
2a00:e200::/32
2a0d:3b40::/29
Signature Algorithm: sha256WithRSAEncryption
7a:4f:45:54:8a:c5:ac:cb:67:13:71:4d:f1:09:b6:51:81:82:
50:5e:41:a6:74:84:7c:d0:e6:8e:8b:8c:9a:0a:e6:9d:42:de:
cd:2b:1b:0d:e3:58:0d:c5:56:b9:7b:b9:4e:bf:13:44:7d:60:
c7:b9:56:7f:c0:75:b4:04:c5:5a:96:fd:7d:36:18:c1:8c:d8:
c2:d6:0a:b8:8a:d9:a0:1b:08:cb:75:b1:94:04:8e:c3:7d:8b:
f6:aa:2f:0f:7a:77:bc:c7:5a:83:44:4f:3f:c9:0d:e4:25:af:
2f:37:18:2c:da:99:49:05:e1:e4:be:15:7e:34:5a:8d:f8:80:
ab:e9:f1:32:82:ff:99:8e:cb:fc:a4:6c:e1:61:2a:6f:0c:13:
f6:8c:e1:bf:0d:60:a5:06:ef:d5:b5:f3:cb:ce:dc:57:fe:ee:
75:aa:ef:06:04:57:92:fb:8f:53:a2:29:55:61:14:28:b5:a1:
7d:86:be:8a:41:da:8e:f7:ec:68:45:70:4b:fa:7b:a9:b3:29:
dd:14:a4:27:67:b1:f6:58:6c:71:a3:21:e3:46:aa:cb:da:87:
0b:03:28:bd:0a:29:f6:fe:b9:65:8c:ea:19:bc:d0:96:d3:de:
21:d9:bd:63:74:3d:37:8c:d0:cf:1a:06:12:a5:85:f7:6e:b5:
66:78:ac:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 19:23:10 2024 by rpki-client on console-fra.rpki-client.org