Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WNRYQNNN5EbzKfCtsX3A22FEP8c.roa
File: WNRYQNNN5EbzKfCtsX3A22FEP8c.roa (raw, json)
Hash identifier: zi2zsWQwmiBWsMDgx1RFLztvqMBLw1BlfkjIPPvDjKc=
Subject key identifier: 58:D4:58:40:D3:4D:E4:46:F3:29:F0:AD:B1:7D:C0:DB:61:44:3F:C7
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 019363F91AA9F3C7923C897AC369E707A8AC
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WNRYQNNN5EbzKfCtsX3A22FEP8c.roa
Signing time: Mon 25 Nov 2024 15:38:09 +0000
ROA not before: Mon 25 Nov 2024 15:38:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Dec 2024 21:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:63:f9:1a:a9:f3:c7:92:3c:89:7a:c3:69:e7:07:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Nov 25 15:38:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58d45840d34de446f329f0adb17dc0db61443fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:26:1a:0e:84:1e:88:0a:6c:3e:a9:2c:4c:0e:
64:f6:6c:8d:b3:7f:cc:a3:7b:e0:70:4d:84:80:dd:
b4:1a:5b:9f:d8:a9:38:0b:40:9c:93:58:06:1d:39:
51:1a:66:1f:06:63:27:4d:dc:70:a1:c6:86:12:20:
74:6f:fa:c1:39:53:7c:17:ce:32:bf:9f:1b:f5:c9:
6c:cf:65:63:52:1e:0a:ed:0b:28:d3:61:be:19:e1:
86:75:83:d4:54:7e:8d:c4:83:29:fa:06:65:92:ec:
8c:e8:2a:06:7a:6b:5c:68:8a:62:f4:a3:47:77:04:
4a:38:ff:38:bb:ad:80:64:f3:1a:a4:ab:2d:26:8b:
06:81:8e:a7:94:35:94:b9:41:6b:a6:a1:16:ff:62:
ef:dd:ff:05:9c:bd:28:b0:55:94:57:a1:35:bd:d1:
42:3f:4a:73:cd:a6:32:a0:19:c5:4d:b1:01:7c:6d:
ad:69:1d:62:d3:06:a1:1c:71:eb:d8:b9:6e:52:d7:
60:9f:b2:ae:ef:4b:09:74:1f:e5:c1:86:bb:01:bf:
2d:d1:c1:d9:bf:35:c7:10:ad:62:d4:62:b1:b9:f2:
c9:48:a8:b8:0c:fb:4e:aa:a3:d2:64:bc:00:77:04:
8e:24:53:2d:d6:a2:b3:f5:3f:6b:2f:b8:2b:40:ff:
5c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D4:58:40:D3:4D:E4:46:F3:29:F0:AD:B1:7D:C0:DB:61:44:3F:C7
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/WNRYQNNN5EbzKfCtsX3A22FEP8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:24:88:fa:b8:90:ad:ac:f5:47:dd:a2:d1:df:56:94:c5:7d:
30:e9:19:07:41:fb:71:19:b4:81:e3:1b:e3:1c:0d:c5:a9:b4:
c4:89:19:e5:8f:4e:a8:52:85:cd:ac:dd:af:3a:1a:e7:ff:2d:
1d:4e:6c:ff:64:a6:b5:f9:36:0a:09:a9:3c:75:d5:a8:08:86:
d5:2b:35:f3:46:ed:cf:6d:05:b0:93:96:0c:f7:f4:c8:a6:d9:
fc:32:71:f8:38:e9:11:4a:d2:50:6c:02:c5:cc:f3:39:67:ed:
33:9f:ec:92:f1:ff:ba:40:e7:0d:75:0f:5c:95:24:05:4c:ed:
92:04:f1:f8:27:a2:b8:ec:85:f5:fb:db:98:b6:d0:b5:83:79:
b6:e6:a0:dd:28:c4:18:04:73:27:f4:4a:a6:42:0a:1d:c4:c6:
2f:6b:51:9e:16:57:56:8a:68:cb:0d:17:51:47:e5:47:04:f9:
36:22:a4:b1:9a:ae:45:e8:b5:85:35:36:27:7b:ed:5d:1e:90:
18:7d:e4:83:ef:82:37:cb:28:29:57:20:c8:18:97:26:63:30:
00:dd:23:4d:fd:19:38:71:18:fa:0a:0c:84:9d:b3:3b:20:bf:
00:f5:06:66:db:af:6b:4a:a5:72:d6:08:1d:df:0b:fd:16:07:
6e:0f:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 21:17:09 2025 by rpki-client