Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wtO9H6MOFY2AfefxRjPcng3KwwE.roa
File: wtO9H6MOFY2AfefxRjPcng3KwwE.roa (raw, json)
Hash identifier: /tMCB8S3lEgfikhfwLZanCTAvQIHM3gc6AdLgUx/3ao=
Subject key identifier: C2:D3:BD:1F:A3:0E:15:8D:80:7D:E7:F1:46:33:DC:9E:0D:CA:C3:01
Certificate issuer: /CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Certificate serial: 018CC50036031CB6E6D5F9F75B7797481CF1
Authority key identifier: 25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wtO9H6MOFY2AfefxRjPcng3KwwE.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50941
IP address blocks: 185.172.51.0/24 maxlen: 24
185.172.50.0/24 maxlen: 24
185.88.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:36:03:1c:b6:e6:d5:f9:f7:5b:77:97:48:1c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25e4aed3ef72bee3141660d1149e16d079205f3c
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2d3bd1fa30e158d807de7f14633dc9e0dcac301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0c:65:41:9f:90:40:68:84:bc:0e:81:b0:db:
98:45:08:c3:4c:73:3f:1c:24:ea:18:a2:c4:74:1e:
78:62:dc:a8:c5:e8:58:70:0d:b7:18:bd:5b:cc:18:
ac:d2:d8:c4:ac:98:f6:23:75:98:9f:d9:f6:86:44:
4b:6f:4f:46:3c:82:b2:98:e9:89:68:d9:1f:4f:1e:
1b:e0:71:71:ff:1e:24:6f:61:60:b9:1f:3f:cc:62:
7c:90:90:5d:7e:1a:73:45:9c:ae:76:02:63:0e:f6:
21:1d:4c:02:ce:3a:e5:9c:6d:1e:9b:85:e0:a4:31:
eb:32:43:78:f4:3a:a2:04:e5:ca:ed:37:08:62:39:
28:1c:c9:8f:42:8f:e4:b4:76:5f:75:55:94:35:6f:
45:f5:f0:c2:20:82:6d:29:7a:c8:7c:2e:c6:04:d7:
ca:fb:c8:35:5a:34:69:67:72:aa:6a:84:90:87:14:
12:c6:20:d3:f6:e6:ea:9e:5e:01:37:47:0a:db:d2:
54:4f:e0:7f:90:28:c3:d8:62:0d:e1:5a:47:a7:02:
d9:76:a2:29:5c:eb:ed:84:f7:61:36:91:dd:2b:81:
fc:3c:eb:08:2b:9e:9b:d3:1e:b1:47:fd:14:33:28:
c3:54:2e:4d:f1:37:51:80:a9:d0:6a:ed:ea:29:8f:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:BD:1F:A3:0E:15:8D:80:7D:E7:F1:46:33:DC:9E:0D:CA:C3:01
X509v3 Authority Key Identifier:
keyid:25:E4:AE:D3:EF:72:BE:E3:14:16:60:D1:14:9E:16:D0:79:20:5F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/wtO9H6MOFY2AfefxRjPcng3KwwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6336d0-9494-46d3-9861-ed3e38f9577f/1/JeSu0-9yvuMUFmDRFJ4W0HkgXzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.88.135.0/24
185.172.50.0/23
Signature Algorithm: sha256WithRSAEncryption
60:5b:c3:70:a4:c0:a9:75:37:7e:a3:42:3a:29:7b:0b:f8:00:
04:c8:9a:18:6a:07:f3:db:15:b0:78:9b:51:86:23:4e:9e:d3:
bb:84:a7:ef:6d:05:e4:b6:fc:95:7d:78:90:84:0c:3d:61:d4:
c3:f6:88:3c:89:ba:d6:f6:c2:a7:37:22:3c:6a:6b:2e:ef:c9:
99:77:17:b2:48:50:a0:53:4f:98:5e:12:53:07:10:19:71:48:
33:13:92:b5:7a:21:4f:9e:40:8a:cc:e9:19:e6:58:05:2f:22:
01:f7:40:9b:11:3d:21:65:4c:07:bf:d7:98:5f:ba:16:29:3e:
e2:25:a4:50:98:98:72:19:cc:d9:37:dd:4f:fa:27:2e:7c:a8:
d7:67:de:08:cd:1f:8e:90:b2:ca:54:68:90:26:74:ec:a6:63:
17:be:b4:4e:05:9c:53:0b:e5:b1:56:d4:22:88:81:12:ed:fb:
25:6e:af:48:e1:dd:5a:1a:a2:d1:31:a6:da:ca:30:d9:ae:b0:
5a:35:b6:7b:46:e3:02:e3:97:36:47:a4:c0:fe:ef:ff:ec:66:
f6:90:3a:21:22:7c:ca:14:f5:99:92:50:f3:3c:b3:f7:3b:bc:
14:fa:94:b6:1f:10:3b:df:f6:14:a6:0a:8b:71:db:7e:9d:73:
5b:49:9c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:34:56 2025 by rpki-client