Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/WGNZ1-WKoKyrIUUxr2KZCvVoa7A.roa
File: WGNZ1-WKoKyrIUUxr2KZCvVoa7A.roa (raw, json)
Hash identifier: xlpIUDj7KlK1DMSSaZG+fDkkljftI7QP3t7mrn1qjIM=
Subject key identifier: 58:63:59:D7:E5:8A:A0:AC:AB:21:45:31:AF:62:99:0A:F5:68:6B:B0
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 01900651FB87508F12D6208A15EE41274A67
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/WGNZ1-WKoKyrIUUxr2KZCvVoa7A.roa
Signing time: Tue 11 Jun 2024 08:02:34 +0000
ROA not before: Tue 11 Jun 2024 08:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.157.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
77.111.116.0/24 maxlen: 24
77.111.121.0/24 maxlen: 24
91.190.185.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 30 Oct 2024 07:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:51:fb:87:50:8f:12:d6:20:8a:15:ee:41:27:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jun 11 08:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586359d7e58aa0acab214531af62990af5686bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:e1:62:c8:b9:6c:c0:69:30:62:51:eb:49:
82:f1:5d:d4:03:41:b4:f0:83:8b:e6:4b:03:36:18:
be:26:20:49:82:1c:5a:6c:68:95:ed:28:d9:f2:21:
df:6b:56:ec:ca:7e:87:77:b9:50:56:21:fc:37:94:
31:ad:26:93:a1:58:76:84:f1:c3:02:74:d2:bb:23:
2e:be:b7:63:c5:f9:c5:be:c5:79:c3:76:1c:92:be:
b9:b9:61:c3:35:af:37:66:e3:45:e5:2f:3f:13:97:
9f:46:7d:ae:9f:63:82:a2:f9:f9:c4:ad:e1:85:3a:
dd:5c:3d:4d:ca:24:99:29:29:e2:a5:2a:d1:92:c0:
17:0a:c8:c7:3b:35:8a:e5:f2:a0:bb:84:4e:10:29:
8e:fa:60:cb:45:56:7f:83:04:09:df:f8:fe:62:59:
fc:e8:21:9d:d4:cc:e5:cd:03:7b:34:cc:ea:4a:b1:
04:9c:96:8b:81:85:2f:fe:b6:5a:5b:1b:b6:6f:2f:
c4:bb:a8:77:b2:b5:b8:ed:c1:be:6c:c8:bf:11:2e:
d4:ea:44:be:c4:a5:45:da:e1:88:4a:d7:78:a0:44:
0f:d5:d3:6a:ec:a0:53:22:87:03:e5:0a:ae:7c:08:
fa:8d:7e:3a:a1:59:27:d1:4e:ad:c8:9d:86:f5:7a:
12:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:63:59:D7:E5:8A:A0:AC:AB:21:45:31:AF:62:99:0A:F5:68:6B:B0
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/WGNZ1-WKoKyrIUUxr2KZCvVoa7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0-45.147.158.255
77.111.116.0/24
77.111.121.0/24
91.190.185.0/24
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
71:49:48:8f:83:f6:dd:b0:3d:c3:2f:c3:51:35:d3:14:e9:a2:
3a:97:82:25:73:20:4f:74:ce:f0:1e:5f:7d:64:c5:b2:a3:29:
ea:e2:0a:76:de:bf:2e:83:1e:71:b3:32:7b:35:cc:89:50:12:
79:32:62:49:69:40:04:a8:7b:2e:44:3a:a5:7a:c7:bd:a3:24:
0b:d1:6c:34:19:82:51:99:69:34:40:6d:09:53:a7:6e:a4:e0:
19:52:98:f1:41:ce:0e:d4:ac:e9:95:a6:b9:e8:cd:8c:62:36:
ae:11:ed:1a:9d:a7:e6:ae:45:4a:3b:57:ba:b7:f1:8e:48:dd:
00:83:ad:1c:53:12:18:f2:16:0d:b0:2e:7e:f2:de:e8:cb:c5:
56:c9:51:fd:63:9a:5f:38:ab:62:29:8c:72:81:33:f7:c0:35:
17:9e:ca:d4:bd:97:06:19:c5:a9:d8:d5:76:ba:9a:0f:a3:55:
84:65:0a:98:35:95:ef:0e:4c:cd:e4:fa:be:e7:b9:0d:a5:84:
1a:e4:10:97:48:50:4c:5d:c8:b4:3e:9b:0f:e6:23:de:12:89:
c0:5c:d1:83:74:34:d5:b1:2d:68:42:73:95:53:3a:8f:c8:2c:
49:f6:32:2f:de:4e:58:61:f1:06:e3:21:73:6f:a5:3f:11:1b:
9c:45:c5:33
-----BEGIN CERTIFICATE-----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Generated at Wed Oct 30 09:57:45 2024 by rpki-client on console-fra.rpki-client.org