Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/WruUkri-ift0JjOCOuinguM_BJY.roa
File: WruUkri-ift0JjOCOuinguM_BJY.roa (raw, json)
Hash identifier: +BPH/CNhEs3ChdJT9QsGOmPxT4Kxz4HrpAga8s71xyM=
Subject key identifier: 5A:BB:94:92:B8:BE:89:FB:74:26:33:82:3A:E8:A7:82:E3:3F:04:96
Certificate issuer: /CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Certificate serial: 018F5917198288EE7BD6CD74C68E611F6F7D
Authority key identifier: 1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/WruUkri-ift0JjOCOuinguM_BJY.roa
Signing time: Wed 08 May 2024 16:43:56 +0000
ROA not before: Wed 08 May 2024 16:43:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 193.135.116.0/24 maxlen: 24
193.135.117.0/24 maxlen: 24
193.135.118.0/24 maxlen: 24
193.135.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:48:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:59:17:19:82:88:ee:7b:d6:cd:74:c6:8e:61:1f:6f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c04848bfef724e26abed3c65e4e8f9508fb1796
Validity
Not Before: May 8 16:43:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abb9492b8be89fb742633823ae8a782e33f0496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:11:ef:92:6a:1e:25:cd:21:3a:24:81:ce:
d7:6e:81:6d:7d:6c:3e:cf:ba:83:8f:30:6f:91:4e:
6f:24:bc:32:81:85:af:c4:59:6e:cb:91:83:2e:71:
45:3c:61:54:82:8c:79:99:7b:36:f7:91:90:bb:15:
04:fe:e9:e4:38:49:f3:1a:69:c3:9d:7c:d6:55:1d:
6e:62:b3:b3:07:96:a2:47:f0:b8:70:de:67:d7:45:
e0:68:c9:4b:b8:41:f4:93:0a:35:4a:26:cb:20:18:
85:5b:ff:44:93:c4:a0:02:da:4f:6c:1e:ff:13:44:
29:67:39:09:92:a9:b9:c1:5f:6c:a4:40:56:af:a0:
1d:34:a0:d0:5f:37:e5:c1:5f:83:59:b6:b7:02:70:
fa:dc:0b:c6:8c:41:ff:98:b2:20:b8:da:32:90:0a:
04:b2:e1:4b:e7:22:20:ce:04:7d:34:cb:3d:72:dc:
31:cb:a8:48:a2:a9:7f:39:4e:60:6d:10:44:9e:c0:
df:34:12:b2:d4:55:65:d0:4a:a8:b5:d9:f9:f5:52:
b9:76:9f:cc:06:ba:9d:b1:6d:eb:3a:3b:f1:6c:53:
43:bc:b0:87:90:0a:05:95:3f:07:76:9e:cf:e5:75:
3d:82:37:6d:08:b5:e4:74:a3:92:f2:35:e8:cb:00:
23:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BB:94:92:B8:BE:89:FB:74:26:33:82:3A:E8:A7:82:E3:3F:04:96
X509v3 Authority Key Identifier:
keyid:1C:04:84:8B:FE:F7:24:E2:6A:BE:D3:C6:5E:4E:8F:95:08:FB:17:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HASEi_73JOJqvtPGXk6PlQj7F5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/WruUkri-ift0JjOCOuinguM_BJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/672629-a0e2-476f-aead-ee380b82cfca/1/HASEi_73JOJqvtPGXk6PlQj7F5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.116.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:a0:3c:a9:16:d4:50:26:61:6c:6a:70:5e:f5:0a:8d:c0:cd:
80:04:83:8a:e9:59:1a:54:4c:7d:4d:1c:95:e8:98:f1:91:f3:
32:9d:3e:67:84:44:21:4a:63:5f:a3:c3:2d:a2:0b:e4:c5:f8:
35:6c:cb:09:b5:3f:d8:40:53:97:5b:58:88:40:09:05:4c:65:
f0:46:93:c0:cb:8d:27:bc:a5:d6:84:38:21:d1:bd:17:16:e0:
66:d3:6d:45:2c:8b:06:b6:23:05:cf:1b:68:46:a2:aa:1c:a3:
35:91:3f:26:61:3e:a3:ec:e2:a4:8e:43:ae:ba:60:a2:34:60:
3d:7e:bc:1f:d5:5e:75:46:5e:c6:ba:5f:8b:3b:66:e8:de:95:
63:c6:7b:ba:09:d8:18:a3:f6:e8:12:d8:4f:f0:9e:89:e1:f3:
bb:66:ce:61:35:5d:79:c1:d0:0f:9d:95:75:69:02:07:8a:e7:
15:2e:65:a1:b9:bd:9b:19:87:5f:0b:8f:ef:b9:b3:99:6f:2c:
dd:71:72:4a:92:93:06:cf:f7:ba:83:29:ce:15:97:f2:f4:71:
a8:5d:d0:74:ee:08:a6:46:f0:2a:f0:be:87:3c:da:41:1e:28:
c8:b0:0c:7c:69:18:46:92:81:8d:20:37:80:20:77:de:93:3d:
f6:fa:76:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:17:26 2025 by rpki-client