Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/WtLZPB3DecHjhnVYNbqnLSk16Ug.roa
File: WtLZPB3DecHjhnVYNbqnLSk16Ug.roa (raw, json)
Hash identifier: UdCdKNzhCKqmZhlhKllDD7uEQUpM496HVxVc6VZLi3Y=
Subject key identifier: 5A:D2:D9:3C:1D:C3:79:C1:E3:86:75:58:35:BA:A7:2D:29:35:E9:48
Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial: 018CC6B91016AB8C8B342D6DFFC8DA587FFE
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/WtLZPB3DecHjhnVYNbqnLSk16Ug.roa
Signing time: Mon 01 Jan 2024 20:31:06 +0000
ROA not before: Mon 01 Jan 2024 20:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 158.172.132.0/22 maxlen: 22
158.172.130.0/24 maxlen: 24
158.172.130.0/23 maxlen: 23
158.172.131.0/24 maxlen: 24
158.172.132.0/23 maxlen: 23
158.172.128.0/22 maxlen: 22
158.172.128.0/23 maxlen: 23
158.172.129.0/24 maxlen: 24
158.172.128.0/21 maxlen: 21
158.172.128.0/24 maxlen: 24
158.172.132.0/24 maxlen: 24
158.172.136.0/22 maxlen: 22
158.172.135.0/24 maxlen: 24
158.172.134.0/24 maxlen: 24
158.172.133.0/24 maxlen: 24
158.172.134.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:10:16:ab:8c:8b:34:2d:6d:ff:c8:da:58:7f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
Validity
Not Before: Jan 1 20:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ad2d93c1dc379c1e386755835baa72d2935e948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:73:c9:4b:a1:de:d2:12:d5:0a:4f:94:cf:82:
af:18:43:b5:81:4c:2f:dd:52:dd:21:1a:eb:1c:f0:
cb:96:a2:7e:0d:f5:33:00:69:9e:31:d3:55:88:d2:
1d:ee:63:f7:f2:69:9f:a0:29:c3:a4:a2:08:e0:3a:
09:2b:a5:3a:64:44:ab:bd:f8:a6:2c:2b:77:45:c9:
e5:c6:45:c6:83:7e:29:f7:6f:56:9c:ec:7d:72:00:
50:7a:bd:87:7e:8a:61:d6:ca:1f:e1:6d:b4:5f:7d:
9f:61:aa:f0:2d:ea:21:08:8b:d4:c3:9a:95:5d:c9:
a4:6a:e4:53:aa:b7:4d:0d:53:c8:af:be:ee:bb:13:
f3:0d:71:bc:ef:d9:01:da:85:b1:d9:d8:a2:c9:52:
e0:d2:95:3e:b1:f2:31:01:e2:6d:0d:f8:ce:2b:aa:
27:a5:9e:0f:7a:26:54:7f:3f:83:75:09:b8:05:95:
19:b5:a6:38:73:1d:69:fb:54:4c:4f:96:0e:0e:b3:
4d:f1:c9:42:c9:dc:81:ab:0b:02:6a:f4:37:47:84:
b0:3c:16:74:a6:7a:bf:06:69:b9:43:e1:9c:e1:84:
56:7f:55:a4:0f:cb:96:88:f5:13:67:a1:a9:02:b9:
d0:e0:ae:92:2e:a3:8f:0b:c1:bd:c7:96:f7:0c:db:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:D9:3C:1D:C3:79:C1:E3:86:75:58:35:BA:A7:2D:29:35:E9:48
X509v3 Authority Key Identifier:
keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/WtLZPB3DecHjhnVYNbqnLSk16Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.172.128.0-158.172.139.255
Signature Algorithm: sha256WithRSAEncryption
86:44:ad:cc:6a:d3:88:13:6f:53:e2:4e:9b:8a:78:f0:b1:fe:
b9:88:22:4c:10:b0:66:be:fd:74:13:00:39:c6:23:42:9a:cc:
dc:46:65:0b:86:ed:24:e9:63:8a:a8:7e:c8:81:5f:2a:a3:e4:
48:22:4f:69:69:bf:c2:31:8d:41:ae:ce:bf:56:ce:06:12:0a:
f9:a4:84:f1:5b:da:e8:ed:c4:79:f3:67:19:ee:cc:43:73:46:
2c:59:0d:f6:6c:8c:c2:03:1e:f1:c9:af:9c:d4:12:81:61:60:
c6:3a:ab:0f:b8:81:7e:27:c5:59:42:36:47:37:5d:ad:41:0e:
70:35:4a:f0:f4:23:6e:56:7c:22:d6:e5:69:80:94:0b:d0:1e:
eb:bd:54:65:05:bf:a1:a2:83:9c:18:21:a1:42:57:3b:33:aa:
49:6b:e7:cc:c7:50:85:1b:44:8f:b7:1e:82:97:09:ef:bc:38:
f8:c1:3c:d7:67:04:2b:bd:eb:5e:c8:86:c6:5c:e2:fb:d3:9b:
1b:79:d3:74:e0:27:62:d6:ef:e3:e1:51:1d:04:b2:57:d5:bd:
39:2a:43:3b:b8:25:0c:3c:7c:d6:c2:7e:59:0d:90:1e:2e:88:
97:b5:15:28:b3:43:b3:bd:44:7f:a5:fd:cb:22:23:bf:d7:d5:
02:eb:8d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:46:02 2025 by rpki-client