Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wPR-7WBOaQBYijFBZ0BRcKwOTDE.roa
File: wPR-7WBOaQBYijFBZ0BRcKwOTDE.roa (raw, json)
Hash identifier: yEQC9HdhTwJrpfK7FrgmmfcMjF7g8n0dYMNgbqI+2SU=
Subject key identifier: C0:F4:7E:ED:60:4E:69:00:58:8A:31:41:67:40:51:70:AC:0E:4C:31
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01924D91BA44148DA8143899DA0584441F29
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wPR-7WBOaQBYijFBZ0BRcKwOTDE.roa
Signing time: Wed 02 Oct 2024 14:10:48 +0000
ROA not before: Wed 02 Oct 2024 14:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 87.120.84.0/24 maxlen: 24
185.216.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 02 Oct 2024 17:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4d:91:ba:44:14:8d:a8:14:38:99:da:05:84:44:1f:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 2 14:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0f47eed604e6900588a314167405170ac0e4c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:e4:1c:cd:ee:db:ab:23:a0:1a:fb:b1:94:
c4:ee:16:f8:4d:81:7c:e4:3f:3c:f1:02:3b:e2:1d:
7a:3b:c8:dd:60:b9:b3:96:05:8e:ad:90:94:c8:2f:
55:b9:ee:c1:9b:8b:84:ec:95:e6:77:3d:44:23:64:
24:cd:5e:0e:81:1c:4e:31:78:10:63:f3:18:f8:f3:
92:a9:25:a3:ea:11:ab:26:ea:08:ec:92:e5:78:19:
8d:49:04:3a:20:35:51:97:4e:2e:01:ca:35:83:2c:
4a:ab:e7:1d:20:c8:ac:07:8a:ec:61:44:e0:85:a0:
0e:82:47:ea:20:d6:e0:80:1f:15:02:34:98:61:fb:
63:da:58:93:31:20:1d:c1:f1:eb:59:92:16:90:f3:
b8:c2:e4:0d:40:a8:73:be:2e:0a:17:5d:c4:cd:3c:
52:65:5c:51:bf:b5:e0:09:84:20:c8:28:ee:89:66:
78:b2:e7:9c:1a:ae:e6:5f:96:04:03:82:3f:43:b9:
99:63:0a:89:d0:5e:1a:b0:72:02:af:e5:50:e1:bd:
e1:58:ed:e7:30:b4:03:7b:0e:cd:3c:dc:f1:a9:15:
6d:da:72:9e:77:4f:94:61:f8:d6:a4:d7:06:a2:e9:
13:91:c3:75:62:e0:66:d8:f7:b9:9d:7f:43:dc:77:
c1:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F4:7E:ED:60:4E:69:00:58:8A:31:41:67:40:51:70:AC:0E:4C:31
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wPR-7WBOaQBYijFBZ0BRcKwOTDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.84.0/24
185.216.71.0/24
Signature Algorithm: sha256WithRSAEncryption
80:b2:56:ba:3a:65:2b:81:35:00:c2:a6:a5:06:e2:3e:a3:52:
5c:07:6d:9b:e4:04:28:ae:f5:83:cb:ec:1a:c8:8d:70:7a:85:
be:c0:2f:1c:92:2f:56:89:59:db:e4:3a:2a:c2:c7:84:20:1d:
58:ae:de:83:03:ff:8e:db:13:55:7f:38:51:6d:02:ef:67:c8:
50:92:c3:fa:be:50:35:55:a3:87:35:c4:32:61:27:1f:04:12:
0d:3c:c8:0f:74:78:dd:61:70:24:3c:bf:08:55:4c:7b:2b:85:
ef:ec:29:30:a6:a4:01:cc:d3:73:33:1d:b4:4f:04:17:60:ea:
d6:68:1f:6e:3a:cf:e7:7d:a6:4d:13:be:8c:b8:c2:14:9d:3a:
f3:65:a5:e2:68:40:b1:d4:69:82:61:62:ae:c1:46:ae:c6:51:
2f:29:f2:f0:b7:bd:b7:5e:7e:25:08:dd:aa:76:6c:92:93:4a:
8f:8a:81:44:0e:10:94:c4:bf:c3:8b:41:38:ff:07:36:2d:b4:
14:ef:c5:fd:6c:35:01:5e:a1:d6:95:4a:00:e7:59:2a:29:e0:
cd:9a:c1:8f:3e:48:ac:08:1e:c6:f0:68:39:bf:36:27:5e:09:
49:76:f4:1e:c0:90:7d:eb:58:59:68:cb:56:8d:5d:0a:16:f9:
0c:82:80:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:58:40 2024 by rpki-client on console-ams.rpki-client.org