Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wdw_uoYGtBH3mnh0qOSE78gwd8I.roa
File: wdw_uoYGtBH3mnh0qOSE78gwd8I.roa (raw, json)
Hash identifier: 5xJ0Yb8+w24p3U15CqwUqMQttNJhX1cgIQwic+khhTM=
Subject key identifier: C1:DC:3F:BA:86:06:B4:11:F7:9A:78:74:A8:E4:84:EF:C8:30:77:C2
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0191BE3494AE98A8B1A0CE9975F6DF2A855F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wdw_uoYGtBH3mnh0qOSE78gwd8I.roa
Signing time: Wed 04 Sep 2024 18:03:22 +0000
ROA not before: Wed 04 Sep 2024 18:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21769
IP address blocks: 45.127.248.0/22 maxlen: 22
45.151.140.0/22 maxlen: 22
77.111.96.0/20 maxlen: 20
85.208.8.0/22 maxlen: 22
94.229.208.0/20 maxlen: 20
103.41.44.0/22 maxlen: 22
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.36.32.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
2a09:1e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Sep 2024 15:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:be:34:94:ae:98:a8:b1:a0:ce:99:75:f6:df:2a:85:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 4 18:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1dc3fba8606b411f79a7874a8e484efc83077c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:eb:44:91:54:62:b8:21:ec:b8:99:22:46:32:
b2:44:a6:ab:9d:6e:8c:d5:75:9c:0e:df:05:8e:00:
c3:3a:2d:2e:4a:ea:3e:f0:80:f8:e2:08:a9:05:49:
69:20:fb:85:ba:d0:34:df:cf:86:24:9d:3c:6c:98:
c0:ee:41:8a:b1:d9:73:86:2f:eb:bb:3d:72:df:6b:
28:6a:9b:0a:2d:96:16:3b:fb:e4:35:eb:5d:fc:bd:
17:f3:41:c8:df:68:c0:53:3b:9d:05:57:9d:e5:24:
89:4b:69:65:b0:73:9b:7f:67:05:6f:ab:9f:61:12:
60:c7:51:90:f2:17:f1:d5:7c:12:15:b2:41:4c:3f:
cc:03:40:82:94:33:bd:f9:9a:02:c1:77:f6:84:07:
5f:61:4a:ea:8f:2d:74:51:83:18:7c:d7:68:36:a0:
16:4c:ff:d1:ac:dd:ea:6b:64:56:ae:0a:6a:54:75:
18:9e:aa:86:40:57:65:16:4d:ed:34:dd:8f:76:88:
e5:8c:89:60:39:3a:9b:2f:62:4e:41:7d:35:23:7c:
86:b5:3e:66:0e:75:20:95:df:cd:13:23:60:15:e7:
e7:1e:a1:c6:d5:12:be:c7:e1:79:11:85:15:97:29:
e1:ff:49:ec:7c:c2:df:5e:83:97:e2:fa:82:0d:c1:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DC:3F:BA:86:06:B4:11:F7:9A:78:74:A8:E4:84:EF:C8:30:77:C2
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wdw_uoYGtBH3mnh0qOSE78gwd8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.248.0/22
45.151.140.0/22
77.111.96.0/20
85.208.8.0/22
94.229.208.0/20
103.41.44.0/22
103.63.28.0/22
103.71.61.0/24
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.36.32.0/22
194.93.4.0/22
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
49:d4:3a:ca:a1:ca:31:55:5e:56:f4:75:f6:35:63:8b:59:8f:
4f:22:10:3a:02:03:4f:2e:0b:f1:14:67:d2:2d:be:a0:ec:9b:
b4:df:05:72:9d:6b:78:e1:c9:91:bf:be:09:28:39:60:38:2b:
a0:a8:f2:3f:d0:e5:4a:cc:c6:fc:ab:a4:1c:7a:27:52:28:24:
f2:31:d9:ca:5d:34:e3:a4:af:e6:18:ed:77:54:24:53:57:b9:
db:ff:d8:12:fb:35:6b:91:0d:ad:83:22:f7:12:7a:d9:e0:50:
00:e9:ce:28:fd:7b:e4:de:e0:88:bc:b7:15:71:b8:b7:a9:c0:
d7:b2:8d:33:32:bb:e5:cf:29:d9:a3:d1:06:fd:21:ef:4c:3d:
7e:0f:af:11:dc:e4:a2:7b:8c:d7:df:2b:b7:86:ee:be:0b:9f:
54:95:23:d4:8b:c7:a6:26:68:2b:3f:ec:6b:7d:ce:01:e1:8a:
45:e3:9a:3b:12:8f:91:8b:73:9f:f5:c3:e8:20:07:61:43:24:
a6:31:52:05:db:b0:ff:b8:69:eb:30:7a:95:8d:99:46:ad:3a:
15:60:f8:c6:e4:f5:00:0c:58:21:c6:c1:d7:50:42:c2:11:66:
f1:02:0d:d8:b7:bf:14:d7:e7:ad:db:80:fe:c0:1a:0e:87:ec:
42:0c:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:04:23 2025 by rpki-client