Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/WWS_XiNB7Z99s3xZRpc1eeF7rlE.roa
File: WWS_XiNB7Z99s3xZRpc1eeF7rlE.roa (raw, json)
Hash identifier: 3UcElGjm5M7yKoHJ3ASuAeW021G3b31VJb1jaNaK2Os=
Subject key identifier: 59:64:BF:5E:23:41:ED:9F:7D:B3:7C:59:46:97:35:79:E1:7B:AE:51
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 018FA6773A1B73609A3B9B91FABEA50A3B75
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/WWS_XiNB7Z99s3xZRpc1eeF7rlE.roa
Signing time: Thu 23 May 2024 17:19:42 +0000
ROA not before: Thu 23 May 2024 17:19:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212815
IP address blocks: 91.212.26.0/24 maxlen: 24
185.177.44.0/24 maxlen: 24
2a0a:2f80::/32 maxlen: 32
2a0a:2f81::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 15:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a6:77:3a:1b:73:60:9a:3b:9b:91:fa:be:a5:0a:3b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: May 23 17:19:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5964bf5e2341ed9f7db37c5946973579e17bae51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cc:82:32:a3:e4:8a:7d:9a:7b:23:83:73:15:
85:f7:83:37:32:bf:c9:06:2c:4a:b6:3a:96:cb:03:
5f:a1:d7:10:3d:2c:fb:4e:61:32:dd:2d:3e:96:70:
42:af:bc:e5:e0:e7:62:05:2c:26:10:3a:ef:b8:df:
aa:1f:8d:e7:1b:15:e0:36:1e:fe:95:76:ad:b3:a2:
82:f2:77:fa:fb:6e:f4:7e:fd:c3:a9:88:de:44:39:
ac:e6:4d:c8:ad:7f:53:63:fc:3a:e1:9a:e8:e9:84:
fa:e9:64:19:28:7f:26:c7:2c:56:61:b3:8c:61:65:
c8:da:18:f9:2c:38:69:b4:a8:71:52:f8:e6:14:53:
b2:7c:e7:16:7d:ea:7b:a9:fc:f6:97:56:6c:55:67:
e5:ad:7b:5c:f0:ef:21:ab:5b:b9:61:e7:58:b8:b0:
62:36:0c:f2:db:2c:39:fd:12:7b:aa:b3:ad:64:2e:
00:c7:39:4e:0a:e6:dc:d9:19:93:99:39:34:06:78:
d5:56:dd:2f:30:fa:8d:4d:b4:be:20:3e:f6:9e:b0:
98:06:67:e8:1b:e4:0e:ef:2f:38:24:f5:a8:2b:5c:
af:90:a8:e7:ba:23:0f:b5:6d:4d:4f:aa:41:94:40:
6b:08:ff:ac:63:89:57:94:d1:f7:e7:3a:9a:78:93:
07:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:64:BF:5E:23:41:ED:9F:7D:B3:7C:59:46:97:35:79:E1:7B:AE:51
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/WWS_XiNB7Z99s3xZRpc1eeF7rlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.26.0/24
185.177.44.0/24
IPv6:
2a0a:2f80::/31
Signature Algorithm: sha256WithRSAEncryption
c0:2b:ac:80:3e:68:b7:2e:76:bc:e0:3f:05:50:aa:72:7b:0a:
2f:fa:ac:39:e0:43:98:7d:54:6d:6a:5e:41:b7:84:a8:b0:1c:
5d:f8:d2:ba:4e:96:a8:c4:d6:21:25:74:3b:13:28:1c:de:42:
05:8c:10:4b:9d:96:ed:83:d8:3e:35:3d:cb:0f:61:e5:63:e6:
4b:af:8d:dc:ab:9f:77:2d:6c:8d:29:97:17:63:39:a7:40:8c:
95:f4:c4:73:87:c4:40:22:1f:ac:88:61:e1:0e:b9:10:04:b4:
47:9e:b9:f8:b6:c0:d4:e4:1f:99:aa:3b:1c:33:01:8a:60:f2:
51:56:64:0a:e1:b4:dc:87:98:3f:00:22:a2:0f:d2:06:0e:5b:
f7:af:eb:22:88:e0:99:81:c0:75:ac:5b:79:35:ef:ab:36:58:
8d:19:bb:6b:a4:2e:ab:50:fe:1f:91:94:3d:a7:c0:1f:90:d8:
07:6f:65:98:e9:1e:5a:2e:09:b6:2a:1e:fd:cf:e1:3e:34:55:
87:12:b2:3b:c9:67:e2:ab:a8:b9:43:0f:76:e1:67:5b:88:ca:
c0:de:85:73:4d:da:33:e3:9d:a0:2e:6d:fb:b8:7f:ac:de:cd:
cd:73:fa:5e:90:45:52:8e:66:71:b6:b1:52:76:46:7c:16:fc:
3f:3d:e1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:01:07 2025 by rpki-client