Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wze70hYF5CXU7F4aKtCbsZcn0BE.roa
File: wze70hYF5CXU7F4aKtCbsZcn0BE.roa (raw, json)
Hash identifier: 3ou97IFtl06IymljENqjllmJT/mj0AaNEqVRZ88VEAc=
Subject key identifier: C3:37:BB:D2:16:05:E4:25:D4:EC:5E:1A:2A:D0:9B:B1:97:27:D0:11
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01911319D1B50118389BCB44BAEF5670A9D5
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wze70hYF5CXU7F4aKtCbsZcn0BE.roa
Signing time: Fri 02 Aug 2024 12:39:04 +0000
ROA not before: Fri 02 Aug 2024 12:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58232
IP address blocks: 91.247.177.0/24 maxlen: 24
188.253.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 06:05:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:19:d1:b5:01:18:38:9b:cb:44:ba:ef:56:70:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 2 12:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c337bbd21605e425d4ec5e1a2ad09bb19727d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:ab:68:a0:88:9a:cc:dd:2b:42:eb:17:cf:
f4:e5:ba:6e:ee:92:d7:c0:be:b0:b6:14:ec:1e:22:
0f:b2:8e:bb:8a:7c:69:ad:00:4f:32:a9:3d:84:35:
91:cb:63:0b:d2:99:13:84:0e:b7:75:b4:10:4d:d9:
49:29:d6:f9:6e:0b:bf:e6:76:22:96:40:58:6f:1b:
58:6c:84:75:e2:6e:c6:b4:f7:45:dc:39:92:28:71:
72:5a:22:09:ce:ff:67:2c:8a:e0:ac:97:a4:ab:d2:
a8:b1:18:45:56:d8:8a:43:1f:ea:bc:a7:f6:75:45:
d2:c3:41:7b:04:80:cf:ee:b9:4a:e1:d1:72:08:da:
20:65:46:57:ac:33:d5:1a:d7:d3:9d:8c:6b:61:a4:
cc:cb:12:14:05:17:7b:6b:4e:fd:35:75:71:24:ce:
8c:3f:ac:59:ec:80:5f:1d:1a:12:31:24:f3:d3:bc:
74:1e:a4:ad:e4:b4:c2:b5:5a:2e:24:49:a3:0c:ec:
de:a1:23:5e:df:88:ed:12:c2:4e:95:cd:d7:94:bf:
01:54:b5:91:42:d8:63:4d:19:13:e7:8c:2f:56:c4:
16:8a:26:bf:72:9e:dd:d5:aa:6c:df:b3:73:ce:91:
e5:15:7d:ca:22:24:ec:cc:63:c2:31:f1:ac:52:20:
6c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:37:BB:D2:16:05:E4:25:D4:EC:5E:1A:2A:D0:9B:B1:97:27:D0:11
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/wze70hYF5CXU7F4aKtCbsZcn0BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.177.0/24
188.253.1.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d2:49:54:51:10:c9:e7:d3:e0:b3:d6:01:6e:01:05:6e:2d:
c7:1c:9c:68:5d:17:02:e0:7e:1e:3b:d4:5f:ac:61:b8:34:63:
44:5a:fd:86:68:b0:bd:46:c6:9f:19:1e:01:c7:e9:5d:36:8a:
28:c4:80:8e:89:ac:ab:af:13:d4:a7:e0:4a:1c:04:2b:97:e3:
14:41:97:38:5d:a1:f9:95:9e:af:94:5c:f3:de:62:a3:91:e9:
04:68:a6:08:61:17:e4:ca:6c:a4:da:8a:bc:da:5f:50:d5:c5:
72:ce:ef:b2:f2:c7:87:c7:c5:a6:ce:a1:d9:0b:73:3c:92:97:
93:3a:a3:68:2a:6c:7e:c6:01:31:d2:b3:56:59:50:65:1b:94:
32:d9:6c:01:5f:19:92:4a:37:81:3d:0c:d2:3a:b6:6f:e3:33:
fa:1b:7f:f0:a4:f5:e1:e4:5d:80:16:de:e1:be:91:81:7c:2d:
52:b1:68:b5:94:2c:71:0a:8f:0a:d2:55:3f:79:e5:94:ab:09:
2d:4c:bb:00:44:41:05:f6:d5:d8:05:8b:51:81:80:7b:3e:69:
1b:5f:b7:48:74:67:ef:8a:09:7c:33:f9:c1:b7:18:1b:ef:ff:
dd:e1:e2:e0:01:cb:dd:05:75:ce:a9:cf:7f:ba:3e:c3:ad:73:
dc:e2:d3:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 15 07:27:39 2024 by rpki-client on console-fra.rpki-client.org