Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/WwcRszgYV2rQUDgRj2C_7GryR8M.roa
File: WwcRszgYV2rQUDgRj2C_7GryR8M.roa (raw, json)
Hash identifier: OYI2OMbXCCaOygjOY1xTepXRnUpCwPKesSOUbgSy0QU=
Subject key identifier: 5B:07:11:B3:38:18:57:6A:D0:50:38:11:8F:60:BF:EC:6A:F2:47:C3
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 018587A42D387CF8C7960BF52920386936AE
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/WwcRszgYV2rQUDgRj2C_7GryR8M.roa
Signing time: Fri 06 Jan 2023 15:12:41 +0000
ROA not before: Fri 06 Jan 2023 15:12:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56902
IP address blocks: 45.142.137.0/24 maxlen: 24
45.142.139.0/24 maxlen: 24
45.142.136.0/24 maxlen: 24
5.100.240.0/24 maxlen: 24
5.100.243.0/24 maxlen: 24
5.100.242.0/24 maxlen: 24
5.100.241.0/24 maxlen: 24
185.128.125.0/24 maxlen: 24
185.128.124.0/24 maxlen: 24
185.187.129.0/24 maxlen: 24
185.187.128.0/24 maxlen: 24
185.187.131.0/24 maxlen: 24
185.187.130.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:a4:2d:38:7c:f8:c7:96:0b:f5:29:20:38:69:36:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Jan 6 15:12:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b0711b33818576ad05038118f60bfec6af247c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:64:0d:26:c5:7c:78:dd:3c:51:a6:cb:3b:
a2:c5:b5:3e:8b:a7:a5:d2:d4:53:85:98:8f:81:8a:
90:d0:97:c2:71:c8:15:e2:09:43:fb:ad:06:04:f3:
72:33:47:9c:15:fa:0c:ae:93:b5:1f:be:be:28:80:
42:96:89:cd:22:ad:81:15:72:87:bc:ae:58:8b:d0:
7b:af:bc:08:2b:81:bc:bf:2b:84:64:51:d1:cf:44:
9e:aa:88:67:e3:88:1a:a6:4c:91:57:83:7a:f2:9a:
b6:ae:1b:b8:f8:1a:e3:a0:b7:32:bb:fe:2c:2b:9e:
18:17:39:11:27:8b:53:54:97:4a:13:fd:bc:10:ce:
4b:59:40:1d:96:58:0b:9a:fe:fe:4f:cc:19:b7:87:
0b:da:4f:2a:db:a5:2a:43:2f:9a:bf:ef:d2:99:0f:
44:08:a1:71:56:63:59:f1:d6:1f:a8:f8:59:9a:2e:
2b:9c:e1:71:0c:fb:d6:84:20:5e:fd:10:ae:9a:5a:
81:0f:de:67:4d:c6:e3:57:b3:16:4d:f9:6a:7c:60:
fd:3d:39:dd:d4:28:df:21:79:1f:ed:17:2d:e4:e5:
89:e9:04:01:78:c4:a7:31:4f:f5:39:9d:aa:3a:20:
2d:c6:00:48:92:a4:a5:ed:de:21:7e:fd:57:e5:ff:
e0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:07:11:B3:38:18:57:6A:D0:50:38:11:8F:60:BF:EC:6A:F2:47:C3
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/WwcRszgYV2rQUDgRj2C_7GryR8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.240.0/22
45.142.136.0/23
45.142.139.0/24
185.128.124.0/23
185.187.128.0/22
Signature Algorithm: sha256WithRSAEncryption
54:a6:2d:59:18:05:ac:49:b9:6f:63:89:0f:82:4c:f8:9b:16:
de:91:5c:d3:cc:7a:1a:e9:d9:bc:8f:0c:8b:d2:d1:a2:4d:60:
f4:8d:a4:d7:bf:e7:7c:f0:44:12:9e:5e:bf:76:89:93:97:24:
23:99:a4:90:1e:a4:58:31:e3:c1:f1:fa:0b:27:71:9a:61:ed:
57:96:15:8d:48:2c:83:24:e9:2f:2c:0a:1e:7b:80:a4:57:de:
30:83:aa:0b:4e:7e:a5:16:ea:65:94:c8:85:c0:b4:44:0d:4a:
88:2c:d2:1b:e5:26:07:20:2d:50:dd:d4:49:96:8d:0c:9d:a5:
3a:c4:90:b6:c0:64:04:aa:0b:e5:47:f3:01:00:7f:99:4c:e1:
45:7d:d3:8e:d0:07:3c:3b:eb:7a:53:8a:85:dc:95:a0:3a:c6:
92:49:3d:18:74:ef:7e:52:d2:36:1b:5d:8b:dc:58:98:09:f9:
84:5c:1b:55:49:6a:9f:ef:4d:a7:ab:dd:07:c2:2b:82:e7:75:
3e:32:68:90:a4:66:46:07:c6:3e:7d:ce:77:fa:a1:e0:f3:88:
13:86:4d:ee:fc:59:a5:59:92:62:71:90:78:d6:93:f9:ef:75:
fa:64:0b:fa:2f:ec:3a:d3:a0:06:cd:b3:60:b7:cb:da:44:30:
44:5a:d4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:07 2023 by rpki-client on console.sobornost.net