Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/W1zKYvU6E4UJH55KGRLeWGaUp54.roa
File: W1zKYvU6E4UJH55KGRLeWGaUp54.roa (raw, json)
Hash identifier: jJ2n6i27sAx53TH8Uw9sTL+45N+k7kOZI57NHGFDttI=
Subject key identifier: 5B:5C:CA:62:F5:3A:13:85:09:1F:9E:4A:19:12:DE:58:66:94:A7:9E
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 0191EA88F167D24E6CB5F56BE79A56B24A6C
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/W1zKYvU6E4UJH55KGRLeWGaUp54.roa
Signing time: Fri 13 Sep 2024 08:38:48 +0000
ROA not before: Fri 13 Sep 2024 08:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214360
IP address blocks: 185.220.118.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:88:f1:67:d2:4e:6c:b5:f5:6b:e7:9a:56:b2:4a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Sep 13 08:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b5cca62f53a1385091f9e4a1912de586694a79e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:41:85:cf:c1:e0:c9:59:87:bc:3b:0c:43:75:
99:d0:24:ed:8a:07:9b:e9:80:5d:6d:84:3d:f8:97:
92:12:0a:03:00:e0:08:2e:a2:dc:0c:f0:17:ad:ee:
a3:38:3b:98:a7:f6:be:08:ae:7f:bf:5d:a0:1c:07:
ac:fa:8e:17:d2:c0:1a:9e:65:9b:73:1e:a5:2b:ba:
5e:d4:2b:44:d8:1d:04:6a:d2:18:ec:5f:17:59:1d:
fb:8d:cb:cd:0e:0d:a2:0c:20:65:2f:00:32:18:76:
37:53:03:28:27:74:d9:ac:5a:f9:2a:df:fc:79:1f:
99:5e:a6:c2:a8:11:76:55:99:69:eb:1d:77:be:62:
dd:7d:27:a0:0e:f8:06:05:56:bf:2a:db:f9:f4:eb:
02:92:0f:04:02:31:3c:4a:9f:a9:c2:f0:f3:00:18:
db:f0:0e:f1:80:b3:96:ec:01:2e:8a:02:f6:b1:89:
b3:d0:5a:e2:66:a6:9f:83:80:36:9e:c8:b4:f8:98:
4b:2a:39:2f:dc:a1:a0:a2:52:88:b3:b7:cb:ed:69:
4d:50:f8:09:c8:2a:eb:a8:09:36:aa:9e:ba:26:a9:
fc:4b:12:9a:c4:f7:fe:4d:9e:1d:fe:a0:49:a2:d1:
ed:00:58:43:d0:73:a8:b5:75:61:25:b1:69:c8:d5:
5e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:5C:CA:62:F5:3A:13:85:09:1F:9E:4A:19:12:DE:58:66:94:A7:9E
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/W1zKYvU6E4UJH55KGRLeWGaUp54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.118.0/24
Signature Algorithm: sha256WithRSAEncryption
74:9a:c7:1e:46:1f:90:2d:52:af:bf:34:a1:b7:e9:5f:38:2d:
9d:e4:25:37:85:69:34:1f:5d:a1:3c:89:c6:6d:96:7d:b9:b3:
ea:2f:88:d6:0c:01:6c:c2:38:e6:56:f3:c5:a4:e6:64:8a:e1:
36:1d:30:b9:e6:33:69:80:74:4a:7e:21:1e:cd:8d:e6:4e:74:
22:e8:73:22:ff:e2:15:44:17:cf:c9:9c:e5:73:2a:70:b3:90:
0f:45:c8:38:57:e4:ba:cd:b1:a9:9f:20:1b:a4:b0:94:dd:ae:
85:71:3c:72:b8:dd:77:d2:19:f5:8f:75:08:3f:95:fb:2c:28:
4d:de:63:41:e5:3e:28:7a:0a:40:0a:62:7a:67:a1:f5:bb:21:
ed:99:a4:7f:92:d9:dc:0f:2c:bd:5e:46:59:49:96:45:ef:0e:
2d:70:6d:21:fb:ec:a5:18:be:e5:0d:ad:7f:9b:5f:66:45:c5:
ce:b9:eb:d5:39:f8:40:18:b9:1f:4e:e0:00:7b:db:74:58:55:
8d:c5:f0:60:c2:b1:7f:5e:97:fe:34:28:f4:1d:be:fd:e6:62:
cd:db:01:6c:2d:dc:f5:19:87:dc:70:23:ed:7f:11:41:40:26:
f8:51:6b:94:aa:db:7c:bb:1e:b5:1a:d0:ae:ac:e0:41:fe:22:
2c:44:a3:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:40:24 2025 by rpki-client