Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WcpofpN4gPYXDNYUNfuXiu31sb8.roa
File: WcpofpN4gPYXDNYUNfuXiu31sb8.roa (raw, json)
Hash identifier: jXkEMho8l74kRjTvNCqzt1TC2N5Je6Pl5yTxqvfIHPQ=
Subject key identifier: 59:CA:68:7E:93:78:80:F6:17:0C:D6:14:35:FB:97:8A:ED:F5:B1:BF
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01875C4D4EB1EDD7B397D03F454D0C2CF7DD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WcpofpN4gPYXDNYUNfuXiu31sb8.roa
Signing time: Fri 07 Apr 2023 15:19:42 +0000
ROA not before: Fri 07 Apr 2023 15:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205090
IP address blocks: 185.112.102.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.233.83.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
185.233.200.0/24 maxlen: 24
185.232.169.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
2a09:5302:ffff::/48 maxlen: 48
2a09:5302::/32 maxlen: 32
2a0d:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 25 Sep 2023 08:46:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5c:4d:4e:b1:ed:d7:b3:97:d0:3f:45:4d:0c:2c:f7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 7 15:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59ca687e937880f6170cd61435fb978aedf5b1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:4c:e1:08:43:a0:ac:7a:4e:81:25:0f:67:
15:d9:0e:fc:5b:ed:2e:47:4b:0b:ca:3b:93:f8:96:
8e:fe:78:95:49:c8:7d:42:e5:21:93:87:6f:29:b9:
46:ce:8c:96:f7:6c:05:84:ae:3d:4b:d2:8b:2c:ec:
ae:5f:7d:0b:e8:bd:85:21:da:20:5e:58:68:dc:b3:
4f:73:7b:a2:22:5f:4e:67:14:c8:b4:47:d4:36:3a:
8e:95:99:07:7f:4e:f0:6b:63:a3:b1:41:02:22:65:
83:68:a1:20:62:99:10:59:14:99:24:2b:b9:35:2a:
11:e4:56:ed:90:d5:a5:a2:43:e7:00:4f:9e:1f:7c:
c0:74:cd:33:a0:f5:50:65:62:91:ec:30:37:a3:86:
c2:e7:c3:bd:c4:88:4b:74:6f:e4:76:ef:56:79:02:
02:fb:27:f5:37:e9:9a:cf:9c:4e:b0:34:32:0e:d4:
66:3c:11:91:24:ff:37:14:70:76:d7:0c:14:3a:3d:
1e:b1:69:1b:18:ac:2b:ae:d2:0f:71:eb:2b:e6:d4:
8e:9c:95:2f:1c:34:c7:a0:80:ef:4b:9b:e3:3e:44:
90:f8:98:fb:a3:d5:59:f7:2e:6a:f8:ba:55:61:a3:
9a:3a:b8:ab:a1:96:da:94:43:94:54:65:22:14:f9:
48:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CA:68:7E:93:78:80:F6:17:0C:D6:14:35:FB:97:8A:ED:F5:B1:BF
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WcpofpN4gPYXDNYUNfuXiu31sb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
185.232.169.0/24
185.233.83.0/24
185.233.200.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
2a0d:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
a4:e3:6c:6b:73:aa:b3:00:8d:d3:2e:06:59:ed:66:27:dd:6d:
e5:e2:cd:d2:c5:6e:81:43:f0:81:37:34:68:81:78:c3:5c:c0:
b6:40:62:76:fc:b7:cc:bf:c3:29:8e:e5:71:fd:e5:15:cc:24:
f3:7c:ad:a1:15:6f:cd:22:54:bc:74:71:16:0f:42:d7:08:9e:
f5:9a:c2:17:86:e0:8c:85:3f:6d:46:5b:fe:16:c7:9f:73:f3:
bf:81:c5:cb:57:d2:ca:2f:3b:7e:41:19:b8:62:17:80:79:0f:
30:76:1d:67:cf:05:79:99:14:d4:76:f3:dc:83:64:cd:0c:37:
04:96:22:70:34:a2:45:46:ba:93:4f:bd:27:f9:30:80:7c:7f:
cc:b6:47:bf:fc:77:dd:a7:75:98:a3:bf:f4:57:bd:26:27:c5:
b4:b1:84:3e:81:4c:48:17:75:53:c6:2d:ab:b7:78:50:59:be:
5f:4a:85:ee:41:3c:ec:26:15:ac:83:bb:ef:3d:7d:f6:3f:6a:
c3:d2:35:df:3e:11:ce:bb:af:2e:c2:1e:84:27:4f:85:64:d5:
b7:92:4f:8d:fa:86:47:89:b3:93:de:d0:db:1d:d1:5a:dd:f3:
32:08:eb:d4:15:8c:78:2d:cd:9c:38:5a:5e:f3:c1:a0:29:de:
1b:c2:58:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org