Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/WhLE5eSMf-JXiQUaEyfCAJQiGQk.roa
File: WhLE5eSMf-JXiQUaEyfCAJQiGQk.roa (raw, json)
Hash identifier: ThbF3tqV6pyrGRkDPfrc4oMYqiFTGQ84jqFdg6PYnJw=
Subject key identifier: 5A:12:C4:E5:E4:8C:7F:E2:57:89:05:1A:13:27:C2:00:94:22:19:09
Certificate issuer: /CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Certificate serial: 0192A6A2724D19D350C91B763B51F7F93EB2
Authority key identifier: A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/WhLE5eSMf-JXiQUaEyfCAJQiGQk.roa
Signing time: Sat 19 Oct 2024 21:15:16 +0000
ROA not before: Sat 19 Oct 2024 21:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 91.197.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 21:52:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a6:a2:72:4d:19:d3:50:c9:1b:76:3b:51:f7:f9:3e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3ca7b1c13a7d7b31231412b8fb6947a1747db9d
Validity
Not Before: Oct 19 21:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a12c4e5e48c7fe25789051a1327c20094221909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:17:30:4a:f5:f2:8a:95:83:37:2f:57:06:
11:30:93:2b:b7:35:78:58:49:f7:78:40:a5:54:09:
b2:cd:c2:96:46:5b:0c:d9:bf:55:fb:d6:6c:8f:b6:
7a:ca:3e:e3:c3:ab:c3:8e:c9:c5:f0:38:8f:40:64:
fa:77:26:9a:bf:b7:66:80:38:c5:f3:6f:3f:48:29:
f3:d3:48:0e:b7:54:c5:de:03:a6:13:80:7c:5b:06:
81:fa:0e:dd:6d:04:9b:f8:57:23:6b:31:b7:89:04:
32:86:d4:33:6d:67:e0:51:4c:51:be:87:30:9a:a7:
3d:7d:66:6b:55:55:5d:69:fa:89:6e:b7:50:2f:5c:
af:c6:03:50:ae:22:ba:da:9c:a7:17:e6:43:f2:40:
66:1f:ba:73:dd:90:05:0d:a8:7f:ac:e4:0f:16:e7:
ed:d9:0f:43:61:6f:1f:32:66:5e:40:49:4e:a8:78:
29:73:de:08:91:a7:a8:90:ab:b8:fb:23:32:6a:50:
4e:8a:fa:63:3a:99:39:c5:94:45:f4:62:cd:74:b7:
eb:a0:5b:e4:95:34:3c:77:9c:c8:35:7b:45:fa:e0:
00:2b:6b:c8:0a:26:3e:17:f5:97:c6:0a:8d:8a:32:
fe:2b:d8:f0:f2:05:f5:e5:4a:38:82:1c:58:d1:6c:
1d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:12:C4:E5:E4:8C:7F:E2:57:89:05:1A:13:27:C2:00:94:22:19:09
X509v3 Authority Key Identifier:
keyid:A3:CA:7B:1C:13:A7:D7:B3:12:31:41:2B:8F:B6:94:7A:17:47:DB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8p7HBOn17MSMUErj7aUehdH250.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/WhLE5eSMf-JXiQUaEyfCAJQiGQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bcdcca-f06b-40cf-8e21-2145220994ce/1/o8p7HBOn17MSMUErj7aUehdH250.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:70:e0:c2:0d:4f:28:b3:e9:0b:45:d4:74:82:cd:3b:b4:8f:
c5:f3:67:9d:86:5e:bd:e1:29:e3:db:01:f8:ec:dc:78:66:11:
e8:b6:7b:23:75:e6:ce:60:0a:d5:80:c2:50:47:bf:75:f6:44:
6d:b9:10:14:b0:d1:f2:f0:1b:68:c9:80:f7:9e:3d:de:d0:06:
24:b7:53:cd:bc:fa:bc:ed:9b:a9:02:c1:9b:ec:2a:40:4a:b1:
91:17:89:cb:18:49:7c:86:22:1b:cb:1b:b2:14:73:1a:27:10:
6d:db:8c:41:8c:50:5f:84:7e:24:67:d4:69:16:b7:3d:7e:ff:
f3:80:c5:fc:72:ee:47:42:e6:1d:d8:b9:61:98:d8:e0:b4:7c:
b2:4c:f8:bd:44:62:4c:ce:04:de:00:0e:8e:64:31:8d:16:40:
85:d3:99:38:68:dc:50:d5:f5:5e:46:3c:84:0c:6b:f9:27:dd:
92:a6:1d:7e:1a:cb:c9:ed:e9:00:cb:da:0d:e8:5a:70:4d:54:
0c:ab:ad:5c:1b:35:bc:c9:88:6b:4f:0e:dd:56:df:a9:9c:f9:
e2:96:86:c5:87:1c:b4:6f:ec:9b:36:42:c3:e5:c9:56:06:65:
f6:21:7e:8d:e6:e6:40:7f:52:ce:e7:8a:87:ea:bc:c1:32:29:
ac:4e:54:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 24 23:48:13 2024 by rpki-client on console-ams.rpki-client.org