Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wif4iuq5--61drdb8vi0yRZzKbg.roa
File: wif4iuq5--61drdb8vi0yRZzKbg.roa (raw, json)
Hash identifier: 5HKFhSJxa1xUiBvQE6jf3oH31fl06Rnzjf4xxiyj8JQ=
Subject key identifier: C2:27:F8:8A:EA:B9:FB:EE:B5:76:B7:5B:F2:F8:B4:C9:16:73:29:B8
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018FA99EF43781E3D355BA214FFC6C883539
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wif4iuq5--61drdb8vi0yRZzKbg.roa
Signing time: Fri 24 May 2024 08:01:57 +0000
ROA not before: Fri 24 May 2024 08:01:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
185.36.140.0/23 maxlen: 24
185.36.141.0/24 maxlen: 24
185.36.142.0/23 maxlen: 24
185.225.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 11:08:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a9:9e:f4:37:81:e3:d3:55:ba:21:4f:fc:6c:88:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: May 24 08:01:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c227f88aeab9fbeeb576b75bf2f8b4c9167329b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:c8:04:d2:43:46:33:d9:48:16:ed:b8:8a:
9c:03:f2:24:80:17:f0:26:da:25:4c:af:82:e2:dc:
3f:03:6b:39:b8:70:95:bb:89:20:17:4f:5a:f4:48:
45:f9:35:6b:7e:6f:ab:07:94:92:60:f4:83:15:c0:
09:f1:b4:5d:e6:03:6f:b4:a1:35:85:f7:d7:3f:0a:
6d:13:77:85:02:83:0a:33:53:df:05:02:50:bf:be:
02:be:18:18:9d:fb:ce:50:3e:aa:15:f3:cb:6d:54:
0d:38:1f:93:fb:49:0b:03:61:ed:62:bf:26:b2:f5:
d5:ee:8f:fb:20:59:aa:ab:15:10:a4:7c:ae:82:99:
67:70:a1:1f:5c:6a:2b:89:7a:5a:d7:7f:1a:5c:f0:
a6:28:b0:6b:f1:aa:29:e6:bc:94:ec:78:46:e6:d0:
8b:c1:8f:3d:e4:67:02:bd:66:d2:7e:23:cf:85:5a:
ad:d0:b9:f2:e3:f7:a8:9c:ef:cc:fb:78:8c:25:2d:
17:f0:90:c9:dc:d5:a0:1b:6b:48:45:bb:24:9f:07:
bb:d3:34:c9:4d:9d:fc:1e:80:e0:30:9c:bf:a5:ba:
9a:b9:dd:05:8e:c2:57:e6:79:81:15:a8:2e:7d:e3:
f3:1e:6f:c9:1f:09:09:63:50:43:60:4e:8d:54:b0:
59:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:27:F8:8A:EA:B9:FB:EE:B5:76:B7:5B:F2:F8:B4:C9:16:73:29:B8
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wif4iuq5--61drdb8vi0yRZzKbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0/23
185.36.140.0/22
185.225.205.0/24
Signature Algorithm: sha256WithRSAEncryption
15:06:e6:1b:c3:d8:0d:20:a0:2f:ef:b1:b8:00:9c:75:de:46:
c0:cc:0c:31:b8:d9:9e:34:09:b1:02:36:0a:1d:b4:1e:9d:c7:
85:b7:18:7e:f3:dc:ac:6e:91:b8:b1:bd:8f:75:a9:31:1b:39:
2d:7c:e0:55:41:76:13:a6:56:14:bb:11:73:7f:2b:04:21:c8:
85:b0:de:a6:64:35:3e:84:ca:52:f1:04:8d:a0:4d:c0:1d:5c:
d6:50:06:d6:fc:36:e7:98:7b:1a:2c:aa:bf:7b:93:57:e0:21:
b7:7f:50:3f:d1:bf:56:bc:48:e7:f9:e8:89:ef:de:d2:4f:5e:
1b:90:33:57:a7:d7:31:b2:fa:67:55:63:90:6f:e4:a3:16:fa:
1c:30:a3:1a:b3:aa:1e:f5:a1:d9:d4:43:6f:c9:d8:95:d9:a2:
42:c0:63:35:72:70:4d:ef:f4:2c:f3:b8:8b:89:66:8f:df:c9:
2a:b9:d3:a4:3d:e5:87:02:25:c9:65:bd:68:b3:3f:70:43:f0:
6c:ee:94:8c:bc:67:d3:bd:b1:d6:b0:d2:26:96:81:24:52:0b:
65:df:52:dc:0e:60:96:5a:67:05:28:db:33:e7:91:85:d2:ce:
4e:39:89:90:69:89:c7:5e:45:c1:e5:4e:08:93:0a:ed:39:f3:
47:58:7c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 16:28:26 2024 by rpki-client on console-ams.rpki-client.org