Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/WWgBaykZq7AIpRDRF379gMuC0ZA.roa
File: WWgBaykZq7AIpRDRF379gMuC0ZA.roa (raw, json)
Hash identifier: UNgt4Y0z2Zft4Ou7+jfyg76pu5a6Ex7tZADoIYl2h4E=
Subject key identifier: 59:68:01:6B:29:19:AB:B0:08:A5:10:D1:17:7E:FD:80:CB:82:D1:90
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 01856EB92480CA6CD255973BAC861F3644A3
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/WWgBaykZq7AIpRDRF379gMuC0ZA.roa
Signing time: Sun 01 Jan 2023 19:05:05 +0000
ROA not before: Sun 01 Jan 2023 19:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197143
IP address blocks: 185.33.130.0/24 maxlen: 24
185.33.129.0/24 maxlen: 24
185.33.131.0/24 maxlen: 24
185.33.128.0/24 maxlen: 24
185.218.218.0/24 maxlen: 24
185.218.217.0/24 maxlen: 24
185.218.219.0/24 maxlen: 24
185.218.216.0/24 maxlen: 24
46.245.163.0/24 maxlen: 24
46.245.162.0/24 maxlen: 24
46.245.165.0/24 maxlen: 24
46.245.164.0/24 maxlen: 24
46.245.166.0/24 maxlen: 24
46.245.161.0/24 maxlen: 24
46.245.160.0/24 maxlen: 24
46.245.167.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b9:24:80:ca:6c:d2:55:97:3b:ac:86:1f:36:44:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jan 1 19:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5968016b2919abb008a510d1177efd80cb82d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:7e:ec:06:c3:2f:f8:82:c2:25:f5:07:4e:
ef:2d:ab:b5:7d:6e:da:c3:c7:3d:16:ed:6a:e5:ce:
91:d6:28:4e:a9:fe:66:41:2f:5e:33:49:37:fb:5e:
f8:a6:70:f5:67:84:9f:06:91:0e:83:e6:a5:12:64:
41:8b:8c:22:d4:71:f5:6d:c5:c7:33:85:3d:22:cc:
4e:fe:0b:19:2d:c4:c5:f6:1c:a0:05:7d:c7:66:c9:
1b:8d:32:68:98:bc:5d:3c:20:26:03:c1:7b:f7:93:
7a:af:dc:4e:0c:13:f1:b2:18:f3:b3:53:49:62:fd:
cc:b1:3d:48:2f:45:84:ae:1a:fd:84:47:4d:5d:ba:
47:20:d5:9f:36:ba:7c:d3:5a:91:2d:b3:df:01:28:
b2:be:1a:35:5b:03:a0:0a:49:04:98:28:7b:c9:f7:
b4:48:4b:3d:03:45:4a:43:14:22:21:46:da:f7:1e:
d1:78:a8:29:85:70:95:56:40:cc:92:a1:25:c5:05:
86:86:e4:60:e6:59:f0:67:d4:b2:f5:f4:75:4a:d0:
b9:e5:87:11:b7:75:1d:0b:fb:d4:03:e4:0f:fe:9e:
cf:87:4c:d0:ce:c6:8c:3d:9b:58:70:32:11:2c:a9:
e5:51:f8:0c:1a:42:0b:5d:ac:14:94:4e:0d:01:3c:
69:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:68:01:6B:29:19:AB:B0:08:A5:10:D1:17:7E:FD:80:CB:82:D1:90
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/WWgBaykZq7AIpRDRF379gMuC0ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.160.0/21
185.33.128.0/22
185.218.216.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:02:0f:2b:d7:a8:c8:dc:d6:38:36:86:70:af:8d:56:f7:96:
df:f3:99:3f:c2:64:53:5f:f4:cd:91:c4:ef:ce:10:e5:43:d8:
a8:f3:70:16:c1:ff:01:6c:6e:4f:b6:30:b0:d8:ef:f5:d0:78:
e4:72:27:10:99:0d:ba:2e:17:14:02:cf:45:57:7d:7c:aa:25:
2d:2c:36:37:08:af:54:08:e0:c4:f6:c4:9e:d2:20:f1:b7:c3:
1e:95:90:a3:8a:e6:af:0f:92:db:7b:03:62:b9:13:89:3b:04:
29:01:7a:04:f2:73:e6:d6:e9:cb:9c:e3:82:76:3c:05:ca:ed:
72:32:98:56:2a:be:04:c2:dc:68:d0:96:5b:11:b4:ee:7d:81:
4a:91:63:c0:c7:83:41:fd:ab:49:0a:24:a7:be:60:5e:fb:ef:
17:8b:23:93:d7:97:ab:b0:d2:9e:dc:54:6b:8d:e5:04:cd:ad:
8d:af:15:ce:e5:80:e6:b9:c3:72:00:4c:44:82:45:44:f1:01:
35:db:b7:0a:37:13:62:24:11:e4:14:71:dc:63:be:8b:00:7d:
14:59:51:d3:71:66:03:60:66:6a:23:57:ec:04:98:54:43:6d:
00:1b:7a:8e:70:1b:16:5d:b6:36:89:b5:42:33:a2:bb:69:b6:
23:30:a4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:42 2024 by rpki-client on console-ams.rpki-client.org