Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WzwektmZZtbNamTL00nXw30TX4Q.roa
File: WzwektmZZtbNamTL00nXw30TX4Q.roa (raw, json)
Hash identifier: 25P04K+pnpvllApy/+S2BmgxeKsvf8Wb7pbOVI3lCeE=
Subject key identifier: 5B:3C:1E:92:D9:99:66:D6:CD:6A:64:CB:D3:49:D7:C3:7D:13:5F:84
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01948365FC205AB99D56188A4DD48476FC3E
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WzwektmZZtbNamTL00nXw30TX4Q.roa
Signing time: Mon 20 Jan 2025 11:08:06 +0000
ROA not before: Mon 20 Jan 2025 11:08:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.155.240.0/24 maxlen: 24
45.155.242.0/24 maxlen: 24
194.143.205.0/24 maxlen: 24
194.143.209.0/24 maxlen: 24
194.143.221.0/24 maxlen: 24
195.114.192.0/24 maxlen: 24
195.114.198.0/24 maxlen: 24
213.220.3.0/24 maxlen: 24
213.220.19.0/24 maxlen: 24
213.220.59.0/24 maxlen: 24
213.220.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Jan 2025 07:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:83:65:fc:20:5a:b9:9d:56:18:8a:4d:d4:84:76:fc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jan 20 11:08:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b3c1e92d99966d6cd6a64cbd349d7c37d135f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d2:14:2e:a2:54:bc:88:18:e7:89:d9:6e:63:
4d:86:fa:e5:f3:d3:62:80:7e:9c:be:fe:44:d2:04:
43:99:a5:d6:a7:12:ff:ee:0b:19:ed:9b:2d:0a:02:
07:b0:09:96:68:7b:87:64:6a:1f:aa:01:db:17:6b:
f5:d1:81:1c:80:9b:10:f0:df:00:05:e1:e2:b9:35:
55:48:6e:db:3f:c0:ff:a2:93:a9:08:e4:0a:7e:1c:
c2:fd:b9:a6:47:1c:4b:62:6f:6d:81:87:10:4c:b3:
11:5b:eb:ac:ee:90:cd:e5:67:24:2a:fa:57:e0:8e:
2b:66:b4:39:a2:df:2c:97:c1:91:05:38:8f:df:c7:
cf:7d:64:d5:a9:80:9f:2d:ea:78:ab:97:98:33:14:
e3:a2:b7:a4:b8:f9:75:50:24:a7:db:c1:07:b8:63:
3e:75:17:21:fd:01:7f:6e:c7:d4:87:f8:68:44:fd:
ff:09:be:ea:f7:3b:f7:97:be:07:6d:ba:aa:44:b7:
2d:03:9e:b2:11:18:aa:47:f4:d5:1f:45:0d:67:8b:
ae:0c:c1:72:5c:66:b9:a1:1e:c5:b5:76:09:6f:f4:
2a:1e:8e:26:20:48:3d:ac:c1:69:0e:92:dd:c7:0f:
de:5e:20:b3:b9:52:f5:41:8f:d6:e2:76:25:63:a7:
05:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3C:1E:92:D9:99:66:D6:CD:6A:64:CB:D3:49:D7:C3:7D:13:5F:84
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/WzwektmZZtbNamTL00nXw30TX4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.240.0/24
45.155.242.0/24
194.143.205.0/24
194.143.209.0/24
194.143.221.0/24
195.114.192.0/24
195.114.198.0/24
213.220.3.0/24
213.220.19.0/24
213.220.59.0-213.220.60.255
Signature Algorithm: sha256WithRSAEncryption
76:1c:d1:8a:ad:d4:b9:bf:aa:5b:68:6f:a4:ee:af:bd:17:b3:
b8:a0:b4:5a:1b:d6:66:e7:83:64:2b:ab:cf:a5:e2:b8:6f:f6:
25:c2:b2:3f:b8:93:76:44:cf:86:f7:d9:d8:4b:ee:e5:a0:3c:
8a:7f:6c:0c:c3:4a:39:3e:8b:a0:5e:8e:d9:64:62:a7:75:f9:
e1:39:e4:52:fa:3f:26:6f:52:ee:63:60:43:fd:da:d9:66:78:
f5:27:31:04:10:0e:4a:4b:fa:c9:4d:ad:ba:6e:23:7b:21:a7:
7d:cd:36:a6:d6:85:b0:0e:46:c0:86:fb:ea:f0:23:af:b8:af:
72:48:0a:8a:6c:21:66:83:2e:75:e9:e8:4f:a5:17:73:a6:ba:
7f:75:54:27:6d:7c:65:bd:53:05:3f:9a:fb:5e:d1:0d:1b:8e:
da:36:c3:7d:1d:a7:7a:a3:1e:07:bc:4e:bd:27:4b:aa:ed:50:
2b:c4:63:b8:8f:4b:d7:58:d3:a4:37:6d:33:e1:71:d1:79:fd:
51:66:66:c0:f2:cd:49:ea:55:8a:49:9c:46:08:cb:3d:4a:f1:
f3:84:0d:82:44:c8:54:70:8b:1e:a3:d8:1c:a1:0c:c9:d0:09:
6c:31:38:a8:e7:5a:12:b9:2a:86:6f:52:c2:1c:69:a6:72:69:
5f:8f:ee:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 17 02:24:29 2025 by rpki-client