Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/W_4djyOxL9RHYR13p0BBKW2-6Aw.roa
File: W_4djyOxL9RHYR13p0BBKW2-6Aw.roa (raw, json)
Hash identifier: WRecAk2YzwuidoiWkmp4RuAFzvmSO1Fv1dDIVdYICy4=
Subject key identifier: 5B:FE:1D:8F:23:B1:2F:D4:47:61:1D:77:A7:40:41:29:6D:BE:E8:0C
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018CC500B2680E0F5EC953848B247530256C
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/W_4djyOxL9RHYR13p0BBKW2-6Aw.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
91.190.185.0/24 maxlen: 24
91.190.188.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Mar 2024 20:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b2:68:0e:0f:5e:c9:53:84:8b:24:75:30:25:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bfe1d8f23b12fd447611d77a74041296dbee80c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:14:db:46:f6:98:80:4f:37:1f:2f:0a:7f:
58:02:de:90:aa:b6:64:c8:7c:05:0e:5a:ba:ba:c5:
c4:62:dd:81:9e:2c:e0:c2:1a:63:4d:e1:26:d0:07:
6d:27:9a:5b:5b:4d:25:c8:fe:4f:34:30:11:27:2a:
df:38:01:a0:71:39:10:20:c5:04:00:d8:03:62:7a:
94:01:71:e8:26:75:95:35:aa:d6:f3:82:9b:4f:22:
92:0e:44:21:1f:0c:2d:fd:1c:32:d5:a9:c8:16:02:
55:fc:c2:75:35:69:83:ec:90:8e:46:08:69:75:45:
36:72:b4:d6:f1:19:99:4c:af:02:f5:ab:72:42:f1:
c7:07:10:74:78:17:9a:19:42:9c:2d:f5:98:3f:26:
bf:1f:e7:0a:c1:e5:a9:18:20:d6:6d:a8:03:d9:23:
14:00:0f:dd:9d:3f:de:1d:fa:5b:2e:15:d9:fa:e5:
d4:ef:00:7a:6b:53:51:a3:9f:17:84:56:b4:90:e9:
f3:97:85:a3:43:f1:a8:ff:58:28:d0:2c:d4:25:11:
2a:df:86:29:fa:d0:fb:c7:31:3d:61:fe:5e:c2:5d:
96:b3:87:84:47:86:2d:10:74:75:ed:96:18:d2:9b:
a2:4e:df:35:6b:f5:d8:aa:e4:70:d3:b3:de:f6:1d:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:1D:8F:23:B1:2F:D4:47:61:1D:77:A7:40:41:29:6D:BE:E8:0C
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/W_4djyOxL9RHYR13p0BBKW2-6Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0/24
45.147.158.0/24
91.190.185.0/24
91.190.188.0/24
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
37:66:02:f2:eb:d0:f9:47:15:2d:c3:9b:3a:9f:3a:6e:75:17:
31:f0:63:af:8b:6d:cd:d4:41:03:0e:7f:be:7f:f7:11:17:62:
00:f6:63:17:10:60:0a:bc:b9:5d:de:74:99:27:cb:36:ef:a2:
74:14:70:d9:e4:ba:00:9f:05:ad:20:18:0a:f7:89:fa:ea:d4:
98:8a:bb:40:a0:8c:44:cf:44:22:8f:95:1a:26:b1:97:57:a9:
f2:a1:05:1f:6c:d7:d5:bf:65:71:57:c4:b8:6e:95:b3:cd:2d:
67:7f:07:7c:5f:1b:c2:98:93:1b:9f:b6:84:4b:ed:1c:23:a5:
67:da:09:60:ec:c7:f7:fe:e4:68:4f:52:16:96:2e:69:07:8e:
45:c6:a5:15:52:07:f8:45:f2:ca:b3:19:38:a5:91:e4:d8:64:
1d:b3:cd:a4:a3:f3:0b:b3:80:13:32:3d:59:88:92:51:06:c0:
4b:50:aa:4b:36:f9:a8:68:9c:be:d8:39:7c:77:a6:a8:eb:ad:
b0:db:9a:5e:34:3d:af:a6:b2:a4:98:51:bf:22:2a:70:f8:06:
f0:82:cc:fa:6c:b6:9b:b4:45:2f:23:07:22:b9:a5:31:10:f1:
f4:a1:65:57:8c:7f:08:9e:71:8a:64:78:ca:54:30:12:8d:8d:
f2:0a:18:90
-----BEGIN CERTIFICATE-----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Generated at Sun Mar 24 20:38:54 2024 by rpki-client on console-ams.rpki-client.org