Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/WWG8cl62eoFmDUUJlZdEhQuKHlw.roa
File: WWG8cl62eoFmDUUJlZdEhQuKHlw.roa (raw, json)
Hash identifier: jBpKShS1hwrz6xGwFiW2ZXHY7KZk/QwDcti9KVVNp3E=
Subject key identifier: 59:61:BC:72:5E:B6:7A:81:66:0D:45:09:95:97:44:85:0B:8A:1E:5C
Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd
Certificate serial: 0190DFF9F623911388357F1C413CBB18B8CF
Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/WWG8cl62eoFmDUUJlZdEhQuKHlw.roa
Signing time: Tue 23 Jul 2024 14:23:38 +0000
ROA not before: Tue 23 Jul 2024 14:23:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142270
IP address blocks: 194.126.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:52:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:df:f9:f6:23:91:13:88:35:7f:1c:41:3c:bb:18:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd
Validity
Not Before: Jul 23 14:23:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5961bc725eb67a81660d4509959744850b8a1e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:22:e1:12:0c:1f:56:3d:1f:59:81:0a:38:
f0:d6:af:35:c7:ea:15:4b:1b:6f:72:de:59:bd:7d:
0a:0c:45:74:c3:a8:3e:21:55:36:5d:74:67:fc:41:
47:f1:17:c9:6e:50:60:d1:3c:c9:89:3c:9e:57:f4:
82:64:b9:8d:d8:0c:b9:90:4b:6e:d3:0e:11:ef:23:
81:e2:54:17:78:3c:e8:86:d8:a6:39:c6:72:ff:8b:
a7:4e:c0:45:05:e8:da:aa:b4:c3:a5:39:7c:d9:60:
3a:6f:78:60:09:05:28:1a:ba:dd:d2:cb:af:13:ab:
ce:c0:42:69:d6:44:48:1f:ec:de:5e:e9:94:94:e0:
fc:bb:8b:5e:5a:fc:16:b3:7c:ca:b5:ff:64:08:a1:
1c:f2:ff:80:68:8d:bb:74:f2:f2:0e:42:8c:d0:65:
db:47:20:b4:08:92:cd:3f:44:ee:38:04:b8:82:84:
53:ad:9f:6b:32:91:6f:cb:e6:1b:fc:d7:31:c1:f7:
ab:b4:f3:81:6b:1e:11:ac:2d:fc:19:20:b7:fe:ce:
af:f2:c6:ea:a1:b3:e4:9f:c6:77:02:9d:b0:e5:9b:
b4:47:dc:42:5d:5a:8d:1d:94:b7:84:5a:1a:dc:0f:
fc:97:07:8a:d1:1d:43:c7:1c:69:c6:97:bf:d9:ee:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:BC:72:5E:B6:7A:81:66:0D:45:09:95:97:44:85:0B:8A:1E:5C
X509v3 Authority Key Identifier:
keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/WWG8cl62eoFmDUUJlZdEhQuKHlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:75:96:9a:23:00:e3:74:f6:75:a6:8c:cf:6c:a0:e8:4b:d6:
66:0d:b0:ce:52:97:5e:85:8b:92:2f:5a:70:52:d5:76:af:86:
98:83:e4:ac:f3:be:ce:57:d8:f2:36:61:be:07:cd:f3:6d:2f:
13:0c:07:7c:6b:f3:75:06:24:44:02:d6:20:ac:43:11:7d:fd:
3f:83:28:0b:e8:2c:e4:7d:89:59:d9:e7:d4:db:d4:7c:5b:ce:
9e:6b:38:a0:24:d0:6e:35:a6:63:c8:2b:11:93:c7:82:23:93:
11:a2:57:f0:5a:fd:5e:98:e8:93:42:11:27:35:c7:eb:0b:bd:
d9:15:f9:fa:7d:58:57:7d:e7:56:09:0b:9f:30:d9:29:91:04:
f1:0b:b7:72:27:06:c1:fc:90:d6:a7:8b:c5:51:ea:28:50:85:
ec:0d:b9:79:8f:3a:15:e4:92:fa:bc:f1:2a:6c:92:8c:dc:91:
4a:a3:75:29:bb:bf:1f:2a:92:2e:8e:33:86:60:35:04:c8:54:
c1:ad:06:e5:14:97:f0:10:e2:11:66:16:57:70:7d:dc:75:68:
75:65:5e:52:93:e2:22:2d:98:22:ca:be:1c:5a:24:a4:2c:28:
1a:5a:d2:18:b3:df:2a:fb:d5:49:10:49:d7:eb:fc:49:e8:dc:
38:a5:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:17 2025 by rpki-client