Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wCpLAWi2d9Mr5iCo0XnhXYTEM6A.roa
File: wCpLAWi2d9Mr5iCo0XnhXYTEM6A.roa (raw, json)
Hash identifier: KNM6/bprkDIJZ8d4pZ4qpNv6VtyEDdPsybscPh3+ilM=
Subject key identifier: C0:2A:4B:01:68:B6:77:D3:2B:E6:20:A8:D1:79:E1:5D:84:C4:33:A0
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0192688B8CF49F646862435F545CFACC3C68
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wCpLAWi2d9Mr5iCo0XnhXYTEM6A.roa
Signing time: Mon 07 Oct 2024 19:53:48 +0000
ROA not before: Mon 07 Oct 2024 19:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.210.145.0/24 maxlen: 24
109.122.41.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
109.122.45.0/24 maxlen: 24
109.122.46.0/24 maxlen: 24
176.97.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 08 Oct 2024 08:47:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:8b:8c:f4:9f:64:68:62:43:5f:54:5c:fa:cc:3c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 7 19:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c02a4b0168b677d32be620a8d179e15d84c433a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:14:bb:31:c5:0b:38:04:80:22:17:39:d7:d3:
28:3a:ff:23:30:ab:75:66:81:a2:ce:e1:05:fd:07:
5d:33:cd:e4:33:12:a5:34:0d:d7:a9:56:3b:1f:3b:
1d:9f:04:73:51:b3:1e:d1:c9:7b:d5:b9:16:92:ca:
19:47:20:13:89:03:6c:63:32:40:59:89:69:0f:be:
49:47:62:13:e8:40:f8:9f:99:62:5b:43:cd:7f:fc:
85:16:f0:eb:41:b3:2e:8f:69:68:15:d2:a9:78:3e:
aa:d3:49:24:70:94:f1:f8:05:38:67:1c:ce:a4:5e:
8f:4c:3d:16:c5:2c:4e:86:94:33:e6:17:2a:59:c1:
9a:d9:98:41:e9:89:40:77:0b:53:8a:66:cb:09:e1:
55:4d:55:ce:f5:f1:98:29:cb:82:cb:24:6c:50:2c:
1d:c8:6b:2f:2a:f6:75:22:eb:5a:0b:bb:d3:cf:60:
7c:9d:f4:af:97:fa:5d:cc:03:2d:fa:ee:9e:c5:97:
a8:e7:68:77:97:86:11:05:c8:85:00:4a:20:72:1d:
e3:db:55:34:15:66:2a:02:59:4f:1c:70:33:fd:f2:
54:91:d3:dc:2b:8c:5d:da:10:44:0d:ed:33:a9:57:
6d:3b:6e:14:99:1f:da:e2:89:09:2b:2e:a3:d5:2e:
4f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:4B:01:68:B6:77:D3:2B:E6:20:A8:D1:79:E1:5D:84:C4:33:A0
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wCpLAWi2d9Mr5iCo0XnhXYTEM6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.145.0/24
109.122.41.0-109.122.42.255
109.122.45.0-109.122.46.255
176.97.205.0/24
Signature Algorithm: sha256WithRSAEncryption
97:a9:e9:be:8f:37:70:bd:51:a2:ee:f5:97:1a:97:db:0e:4f:
81:e2:66:fa:e7:4f:96:91:ab:2a:95:d1:c5:e2:38:4d:d5:fb:
94:1e:c0:d0:7e:d6:8a:fa:72:8a:f0:43:35:78:71:33:a2:56:
35:48:61:84:0d:ec:2a:24:90:ee:40:01:39:ef:c8:b8:25:fb:
0a:67:1f:f6:fe:20:a7:0d:05:a0:a8:06:26:a6:f3:f0:9b:7d:
fa:0e:7c:46:09:45:5c:13:4f:6b:e2:11:e1:f0:ce:9b:c5:07:
b3:a3:ad:f8:e2:47:6a:cf:70:2c:2e:2e:c1:11:b5:ef:c5:12:
03:0a:26:8e:f3:6b:51:5f:f4:9c:19:0a:93:e7:8d:0b:a8:85:
29:96:90:94:da:e8:9c:96:2a:6c:b2:fd:fc:3e:71:1b:ff:93:
8f:4f:69:a4:75:20:02:1e:a3:7b:c3:77:01:49:03:64:2c:2d:
bf:16:79:45:59:ad:3e:23:2b:cc:25:26:76:7d:b6:59:c6:c2:
d8:8b:23:95:27:fc:cf:e2:58:3e:ab:cb:64:e0:52:e4:b8:87:
3a:03:de:da:54:cf:6b:be:a6:e8:32:35:e7:44:0f:ab:3c:08:
04:c4:ee:c3:26:75:2f:78:46:16:8d:e4:b0:3b:92:de:d0:a7:
cf:d5:bd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 13:43:45 2024 by rpki-client on console-ams.rpki-client.org