Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/wpoE2-3nZ6rLwwfLxj8EE4dOGDY.roa
File: wpoE2-3nZ6rLwwfLxj8EE4dOGDY.roa (raw, json)
Hash identifier: 3rta4JX0W03UjuT+/XhR721fqSWtb8bbUMRZgDp78Pg=
Subject key identifier: C2:9A:04:DB:ED:E7:67:AA:CB:C3:07:CB:C6:3F:04:13:87:4E:18:36
Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Certificate serial: 018E183662E4503FC3F8D7C06B617227F92C
Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/wpoE2-3nZ6rLwwfLxj8EE4dOGDY.roa
Signing time: Thu 07 Mar 2024 09:20:01 +0000
ROA not before: Thu 07 Mar 2024 09:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205733
IP address blocks: 94.154.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Mar 2024 20:34:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:36:62:e4:50:3f:c3:f8:d7:c0:6b:61:72:27:f9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155
Validity
Not Before: Mar 7 09:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c29a04dbede767aacbc307cbc63f0413874e1836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f4:69:68:d6:ec:80:b6:b5:17:3d:17:cf:12:
47:5d:62:06:99:e4:5e:c0:85:6d:ca:de:e6:e3:99:
33:b0:b8:94:eb:cc:c6:fa:67:a8:8f:c5:8b:f9:40:
54:33:67:6c:0b:de:7b:a8:e1:98:13:79:b0:b5:ed:
20:99:ce:bf:b8:21:a1:bd:1e:46:46:27:2e:7a:87:
57:77:98:72:e2:7a:9f:ff:63:f8:5e:5a:3e:69:6e:
2b:7a:c6:93:af:7f:74:0b:33:50:95:0d:20:49:2e:
43:38:fb:06:99:64:4b:27:95:3c:94:1d:49:e7:de:
f5:28:9e:c0:75:a7:b8:10:c7:59:bb:6c:c1:57:88:
48:e3:b6:f9:a9:06:d3:c5:f0:3f:7a:ba:29:90:6c:
e9:53:17:df:40:9b:25:ad:ac:5f:4a:ff:3d:26:70:
b8:41:ae:fc:a2:7d:e9:77:75:ea:c4:4a:52:1e:7c:
94:d6:ce:47:ff:1a:0f:8d:80:70:0a:95:77:08:69:
37:9a:58:f6:7e:77:6e:29:09:98:90:54:a4:79:c8:
41:63:d4:bc:3a:dd:a5:90:a7:a5:51:42:e6:13:88:
69:b2:47:60:6b:f0:f9:81:80:70:b3:5a:53:ff:69:
e0:d6:4d:50:d2:d8:5c:ae:d2:36:41:e9:89:e5:cf:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9A:04:DB:ED:E7:67:AA:CB:C3:07:CB:C6:3F:04:13:87:4E:18:36
X509v3 Authority Key Identifier:
keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/wpoE2-3nZ6rLwwfLxj8EE4dOGDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.40.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:f3:83:a0:02:5e:b3:e1:43:16:65:40:74:28:37:e6:8f:09:
eb:44:53:48:6d:26:ee:eb:1a:2d:ed:74:35:d0:e7:51:9b:08:
82:66:a9:51:df:e4:8c:ec:76:57:b6:1c:31:82:fd:b3:4e:98:
6c:e1:f2:52:00:c6:2e:36:0e:78:f7:11:07:d4:e5:49:c4:35:
24:29:8c:9c:f8:71:1f:92:79:de:a3:97:d2:8b:da:5e:03:09:
b4:01:d0:d6:65:cc:18:3a:ef:42:83:40:47:5f:dc:de:44:d9:
fc:6e:ee:65:02:2d:8c:54:60:42:44:a9:41:8e:0c:12:a2:18:
32:06:c4:0c:5c:79:c8:8b:56:be:7c:8c:38:3e:67:50:8e:ca:
2c:06:7a:13:24:5c:18:98:c3:45:69:79:3f:56:ae:75:81:88:
d0:fe:ac:50:ca:5e:68:57:32:de:b0:a7:21:3f:db:68:dc:6e:
d3:07:7c:3f:3c:77:ec:bf:11:f5:43:38:07:58:ee:e6:7f:43:
38:9e:57:33:2e:55:c4:dc:d9:e5:81:7f:b3:17:31:6d:32:05:
8d:93:ca:d1:03:36:4f:c9:89:8c:ef:f9:0a:b2:54:c6:bd:77:
30:8f:65:ed:ee:12:f4:63:25:f5:89:8a:aa:f3:69:5e:3e:a2:
f4:6d:f8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org