Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WoErycFgUXVvh3ATtyQKmAxI3GE.roa
File: WoErycFgUXVvh3ATtyQKmAxI3GE.roa (raw, json)
Hash identifier: oQBSt4zPl4Q7YNOt47kqjzeeQsrbe9N+dDExT6rfXoE=
Subject key identifier: 5A:81:2B:C9:C1:60:51:75:6F:87:70:13:B7:24:0A:98:0C:48:DC:61
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01942220387223751AB3A23A00A816971D58
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WoErycFgUXVvh3ATtyQKmAxI3GE.roa
Signing time: Wed 01 Jan 2025 13:48:44 +0000
ROA not before: Wed 01 Jan 2025 13:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209854
IP address blocks: 45.135.184.0/24 maxlen: 24
45.144.227.0/24 maxlen: 24
62.197.144.0/24 maxlen: 24
62.197.145.0/24 maxlen: 24
62.197.146.0/24 maxlen: 24
62.197.147.0/24 maxlen: 24
62.197.148.0/24 maxlen: 24
62.197.149.0/24 maxlen: 24
62.197.150.0/24 maxlen: 24
62.197.151.0/24 maxlen: 24
62.197.152.0/24 maxlen: 24
62.197.153.0/24 maxlen: 24
62.197.154.0/23 maxlen: 24
62.197.156.0/23 maxlen: 24
62.197.158.0/24 maxlen: 24
62.197.159.0/24 maxlen: 24
91.190.101.0/24 maxlen: 24
92.62.120.0/24 maxlen: 24
92.62.121.0/24 maxlen: 24
92.62.122.0/23 maxlen: 24
185.244.139.0/24 maxlen: 24
193.218.35.0/24 maxlen: 24
194.169.168.0/24 maxlen: 24
194.169.169.0/24 maxlen: 24
194.169.170.0/23 maxlen: 24
212.119.32.0/23 maxlen: 24
212.119.34.0/24 maxlen: 24
213.109.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 29 Jan 2025 19:05:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:38:72:23:75:1a:b3:a2:3a:00:a8:16:97:1d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 13:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a812bc9c16051756f877013b7240a980c48dc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:cd:f2:44:71:79:15:77:c3:45:0d:83:60:
84:18:18:c0:ca:6b:59:9b:6f:5a:f0:d6:2c:24:95:
f6:75:a6:92:4d:d5:75:31:39:5d:fa:74:ff:c9:55:
db:e7:ef:07:9f:23:81:36:77:82:b9:3d:b9:8d:94:
a4:93:39:b6:f3:83:a5:d6:58:f9:fd:cb:c5:1f:51:
85:c4:a8:e3:39:53:06:01:33:7a:8d:5e:e2:3e:5d:
3c:d2:39:0d:18:6e:ff:f0:99:aa:09:10:0c:a5:b9:
28:7e:47:84:9c:99:f5:5a:a5:3c:82:a0:ee:8d:96:
5f:35:f6:d0:a8:b5:28:6c:29:d5:d5:6c:b9:71:b9:
68:12:b8:e3:77:b6:d1:dc:1c:37:a6:11:da:69:e3:
8a:08:f6:9e:78:2c:28:a6:30:bc:42:f6:a7:57:d2:
b0:00:2d:98:0a:ee:86:e0:3a:23:02:94:9f:ba:0b:
50:c4:61:03:85:d4:5d:d1:c5:2e:9d:92:b2:14:6b:
a4:6a:b3:72:3c:cc:07:51:5e:3c:90:c1:2f:f3:e1:
b0:06:b2:1c:a8:00:e1:b5:45:3d:7f:2e:19:92:fe:
63:a2:5e:0b:95:70:73:c1:b5:8d:a7:d7:0c:19:a8:
18:60:f6:31:d5:79:31:83:94:04:a6:3c:b2:29:72:
3e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:81:2B:C9:C1:60:51:75:6F:87:70:13:B7:24:0A:98:0C:48:DC:61
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WoErycFgUXVvh3ATtyQKmAxI3GE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.184.0/24
45.144.227.0/24
62.197.144.0/20
91.190.101.0/24
92.62.120.0/22
185.244.139.0/24
193.218.35.0/24
194.169.168.0/22
212.119.32.0-212.119.34.255
213.109.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:d4:57:46:d8:af:ff:b0:66:11:64:d6:7d:c4:c5:b2:b4:19:
51:b4:56:62:20:66:01:a7:c2:32:5d:2e:c6:e6:e6:6f:03:c8:
7a:43:92:cb:a2:d3:d6:79:48:a0:69:de:af:9e:ea:30:9b:63:
77:90:cc:b2:d4:fa:2a:a3:b8:28:b6:fd:d4:c8:3c:8b:71:04:
5b:09:24:00:c6:ce:49:e2:6d:c1:53:68:76:a4:29:b8:8c:e5:
04:91:04:16:81:c6:32:d3:4d:80:d9:ed:2b:a7:ed:a3:94:7d:
1c:13:62:5f:af:64:4e:d6:17:ab:49:4c:4a:7a:b5:01:2b:43:
48:3e:f5:39:6d:79:c5:55:8d:f2:94:e5:7e:d5:8c:61:ad:03:
c9:21:ba:c8:84:fc:e1:d8:52:3d:26:b1:98:33:03:e8:b3:25:
65:80:32:5b:3b:60:aa:4e:cb:fb:96:ae:25:42:8a:80:78:b3:
1f:45:d0:ae:b2:78:a4:ab:bf:d7:89:37:f3:ce:ed:73:5f:79:
06:87:71:26:19:22:5d:e9:c5:d7:d8:3c:a9:d3:a6:aa:84:5e:
46:50:ae:6d:79:be:dc:fc:d5:b2:37:6c:28:6a:98:fd:8b:af:
3b:ae:f0:bd:b2:12:fe:d9:5a:d3:66:67:11:f2:df:a8:b4:4a:
f7:c1:01:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 5 07:46:50 2025 by rpki-client