Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/iVu_WGWKLnILlAT-kNrIeZ6wXow.roa
File: iVu_WGWKLnILlAT-kNrIeZ6wXow.roa (raw, json)
Hash identifier: Bh4m3NhaW7uGk1999Jh9msEzgWRqTIENiB14UAck3kQ=
Subject key identifier: 89:5B:BF:58:65:8A:2E:72:0B:94:04:FE:90:DA:C8:79:9E:B0:5E:8C
Certificate issuer: /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial: 018CC801435D14D9D9464BD0F6BA9F267CEC
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/iVu_WGWKLnILlAT-kNrIeZ6wXow.roa
Signing time: Tue 02 Jan 2024 02:29:35 +0000
ROA not before: Tue 02 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51178
IP address blocks: 91.219.64.0/22 maxlen: 23
5.61.14.0/23 maxlen: 24
5.61.13.0/24 maxlen: 24
188.68.184.0/22 maxlen: 23
185.218.70.0/24 maxlen: 24
185.218.68.0/23 maxlen: 24
92.249.4.0/24 maxlen: 24
2a00:9801::/32 maxlen: 32
2a0b:d0c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 30 Jan 2024 07:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:43:5d:14:d9:d9:46:4b:d0:f6:ba:9f:26:7c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
Validity
Not Before: Jan 2 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895bbf58658a2e720b9404fe90dac8799eb05e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4b:82:17:11:06:3d:8c:0c:0d:97:40:3e:23:
dc:bb:64:7a:f9:a4:0d:df:f4:9f:81:f5:06:6b:7d:
4c:2b:2d:b7:4f:41:0a:4f:69:9c:a4:b1:b6:73:2d:
b0:57:4a:bc:4e:71:1e:6d:00:26:40:48:94:12:79:
51:a0:9b:23:94:39:0a:76:3d:e2:b3:0a:51:39:13:
2f:72:c7:cb:d3:0c:0b:32:ea:b7:c4:c1:45:b9:c2:
f4:a3:a9:71:bd:4c:95:54:87:14:90:e8:dc:ad:ab:
db:79:79:89:a1:d0:5f:91:c0:e4:65:c5:85:0d:59:
4d:34:bb:7f:d0:f2:1b:66:99:b9:bd:81:1c:25:8a:
fb:91:54:eb:57:7c:cb:55:fc:ce:88:6e:ce:33:91:
73:0e:15:a3:bb:b2:0e:92:db:60:78:a6:2d:d9:52:
52:07:52:a4:1a:2b:2b:1b:1b:68:79:91:9d:8d:0d:
cd:a0:00:3f:a2:fd:0f:35:e7:eb:2f:17:c3:10:aa:
bf:c5:3d:45:03:d7:2b:3e:74:bb:29:83:9b:95:1e:
5a:6a:ff:4f:76:02:da:ae:e8:6a:f4:71:bb:7d:6e:
41:e7:5c:a2:ec:98:ae:a5:a9:7f:c4:37:84:65:48:
30:51:cf:fe:61:15:ca:35:15:b6:06:40:30:19:cd:
8f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:BF:58:65:8A:2E:72:0B:94:04:FE:90:DA:C8:79:9E:B0:5E:8C
X509v3 Authority Key Identifier:
keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/iVu_WGWKLnILlAT-kNrIeZ6wXow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.13.0-5.61.15.255
91.219.64.0/22
92.249.4.0/24
185.218.68.0-185.218.70.255
188.68.184.0/22
IPv6:
2a00:9801::/32
2a0b:d0c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:38:b6:a1:c9:4a:a4:af:89:5b:fe:66:84:7b:b9:f7:90:25:
18:1d:d5:9a:5d:f6:db:e2:f4:53:9a:da:d9:0a:ba:6d:c7:5b:
52:5b:0b:63:7f:c8:ce:42:64:56:ec:b7:e1:44:f7:04:9a:90:
ac:6b:85:b4:1f:41:a6:84:7a:d6:2d:13:6e:1a:d9:e3:80:bd:
36:f0:37:c4:a1:c2:93:7f:ee:f0:76:e1:38:e0:ac:15:34:48:
af:df:1f:64:e6:64:a5:47:e0:20:ef:2e:14:48:9b:a4:d4:67:
a5:7b:16:3b:33:21:9b:f8:fb:4c:74:c5:38:ab:ee:f7:01:ea:
9f:68:8f:8d:ef:65:12:7d:69:d7:49:9f:d3:4d:ad:19:da:1c:
8a:b8:f4:d3:21:51:52:03:5d:dc:60:65:2c:32:81:9f:97:f5:
c0:f7:6e:f3:33:2d:00:78:61:2f:ff:ab:86:0a:1e:8d:84:72:
18:26:52:93:b3:05:7c:f0:8b:c3:3a:c7:1f:9e:a0:ba:ad:68:
f6:7d:77:e7:70:48:8e:a8:2d:bc:ad:91:8f:4d:35:03:84:27:
a9:af:d0:f2:d6:89:71:79:fe:71:15:de:b2:24:6c:c4:9a:be:
a9:73:44:05:bc:63:20:8e:fb:f9:21:af:48:d5:31:5e:80:10:
3b:cd:84:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 27 17:55:28 2025 by rpki-client