Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/WBbQG--nXh0G__YEzG44jp4KlTk.roa
File: WBbQG--nXh0G__YEzG44jp4KlTk.roa (raw, json)
Hash identifier: dButiRleak3dmrXQOUzIjIGdobztxC7juzVbhO+RwUg=
Subject key identifier: 58:16:D0:1B:EF:A7:5E:1D:06:FF:F6:04:CC:6E:38:8E:9E:0A:95:39
Certificate issuer: /CN=7a0b64cb6f18a114174231050b0179931b5e486d
Certificate serial: 019268AB97EBE1052CECFE75D95C65DD7FC5
Authority key identifier: 7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/WBbQG--nXh0G__YEzG44jp4KlTk.roa
Signing time: Mon 07 Oct 2024 20:28:48 +0000
ROA not before: Mon 07 Oct 2024 20:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47609
IP address blocks: 91.206.132.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:ab:97:eb:e1:05:2c:ec:fe:75:d9:5c:65:dd:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a0b64cb6f18a114174231050b0179931b5e486d
Validity
Not Before: Oct 7 20:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5816d01befa75e1d06fff604cc6e388e9e0a9539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:9a:31:64:6c:7b:8c:cb:28:7e:1d:0e:a7:
6d:f2:37:5e:42:47:6b:32:21:e4:8b:c0:18:da:39:
37:e4:0f:ed:b6:c7:6f:da:23:5c:93:04:21:f5:a8:
44:4c:c3:a3:29:f5:cf:1b:4d:50:a5:76:6e:57:7a:
fd:8f:88:73:52:e4:85:5a:d6:d8:ae:54:0a:c0:8b:
50:58:68:f9:ef:74:ac:9a:fe:63:f3:19:f1:f2:19:
ca:b0:16:ac:66:99:e7:f7:3e:0d:16:92:8b:d9:ec:
3b:70:44:91:c9:c5:87:9c:5a:e2:cb:73:39:fc:2e:
5d:28:f2:92:57:e4:ca:f5:61:52:24:aa:ca:37:ea:
63:8b:95:68:8d:d7:46:92:8d:09:bd:6b:c0:85:88:
de:d0:89:6f:e4:55:12:80:d8:de:8c:4e:dc:c6:ac:
ee:df:50:a0:85:81:5a:75:7d:bd:77:0b:b7:50:05:
30:c0:52:5f:49:a9:c4:5f:ff:dc:95:12:a3:0b:c9:
f9:36:99:6a:1f:ed:20:66:c0:77:b1:3b:c0:c8:6d:
ec:ce:3b:fd:23:37:aa:d3:9a:eb:b7:79:b3:81:e1:
9f:80:0c:73:6f:8f:89:03:40:d5:67:88:3a:5a:d8:
b5:8c:bf:11:9d:da:71:24:38:1f:ad:f1:7b:de:2e:
fc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:16:D0:1B:EF:A7:5E:1D:06:FF:F6:04:CC:6E:38:8E:9E:0A:95:39
X509v3 Authority Key Identifier:
keyid:7A:0B:64:CB:6F:18:A1:14:17:42:31:05:0B:01:79:93:1B:5E:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egtky28YoRQXQjEFCwF5kxteSG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/WBbQG--nXh0G__YEzG44jp4KlTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4039d9-a8b0-4654-a5c3-22ae542eb5df/1/egtky28YoRQXQjEFCwF5kxteSG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.132.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:28:a6:8b:ab:7b:78:2b:55:8c:ef:b6:da:9e:99:59:ec:82:
85:10:b3:04:97:bf:16:c6:81:3f:d9:3c:71:12:5a:41:c4:20:
d2:95:40:5b:ac:0b:bf:6c:fc:ec:fb:a0:a4:ce:22:9b:bf:a8:
a1:b0:23:0a:ae:a9:e6:0a:2f:ce:a7:c5:9b:cd:5c:46:d0:c6:
dc:9c:8c:3b:f8:31:0e:7e:e9:93:35:83:04:04:60:db:7d:d7:
bc:31:1f:87:21:6f:d4:26:55:2a:74:d3:3d:02:a8:35:5e:77:
18:ff:89:cc:43:55:37:7f:66:d9:84:6e:60:7e:df:22:50:eb:
2f:b3:ab:5b:bb:ce:f4:cd:71:6a:1f:dc:6c:09:bb:a2:6b:26:
c7:7d:37:1a:e3:1a:4b:b7:3d:c5:a6:b1:75:6b:1f:42:8b:7a:
1f:cf:2e:62:69:80:89:0f:7b:ff:e0:54:aa:d2:c0:86:d9:03:
e7:ff:59:3c:f1:93:03:10:c6:38:2e:37:6e:97:f7:59:3e:6f:
55:57:31:59:4d:8b:64:39:b8:9f:ca:d7:59:7f:ae:ae:14:bb:
e2:59:63:df:84:09:3a:09:5c:cb:9b:3a:90:92:35:c6:de:65:
ea:e7:87:25:2d:25:7f:9a:fb:8f:df:ec:b6:01:53:65:60:07:
70:88:ed:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:34 2025 by rpki-client