Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/WPFhgAwwo7jaJ_-0Xr6Yx2_95wg.roa
File: WPFhgAwwo7jaJ_-0Xr6Yx2_95wg.roa (raw, json)
Hash identifier: GcBjGA1v4RBtWAfsykwvItu1jvR6flXIdaNB/A9dFrQ=
Subject key identifier: 58:F1:61:80:0C:30:A3:B8:DA:27:FF:B4:5E:BE:98:C7:6F:FD:E7:08
Certificate issuer: /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial: 019038B798EDCFF538CAF12CF3BCBCFBB80A
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/WPFhgAwwo7jaJ_-0Xr6Yx2_95wg.roa
Signing time: Fri 21 Jun 2024 02:54:34 +0000
ROA not before: Fri 21 Jun 2024 02:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 91.197.32.0/23 maxlen: 24
91.197.34.0/23 maxlen: 24
193.108.80.0/22 maxlen: 24
193.108.84.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jul 2024 10:06:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:38:b7:98:ed:cf:f5:38:ca:f1:2c:f3:bc:bc:fb:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Validity
Not Before: Jun 21 02:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58f161800c30a3b8da27ffb45ebe98c76ffde708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:45:fa:cf:3b:c7:00:5d:f7:72:b4:b5:9f:
9d:04:d7:02:63:71:3f:55:d6:a9:0c:03:33:3f:1e:
4c:23:f1:97:cc:21:56:7c:a4:d5:ed:1d:17:6b:25:
a0:c7:a3:47:00:1e:c0:c9:1d:d4:71:a2:80:e4:21:
c6:df:fe:48:8a:0f:61:6d:28:0f:7e:14:b8:3a:32:
c9:5c:59:0b:be:74:4d:d5:8a:55:16:e0:8d:9d:ef:
3f:72:27:92:f5:29:18:9d:3a:6c:05:af:00:49:fe:
c9:74:2e:93:f5:a1:77:94:e9:4f:e3:a3:14:49:ff:
69:26:02:64:d8:6e:ce:48:d2:3a:d6:6c:cc:28:3b:
a7:46:01:30:14:93:1a:f7:5e:a1:ce:a3:f7:8f:07:
bb:28:e9:da:45:01:aa:8c:52:70:c9:9b:fe:c7:ab:
a4:10:fc:2c:af:70:1b:54:be:a6:35:ec:74:7a:94:
01:56:37:e5:bd:44:58:c3:e5:12:28:d3:d9:b4:45:
b7:58:b8:0b:81:ec:b0:47:ba:a4:3d:f3:cc:20:2b:
72:7d:cc:b5:dc:a7:17:e2:26:ce:cd:66:72:da:48:
23:af:28:c9:db:49:f9:ba:a7:e4:59:95:fe:20:82:
21:27:0c:88:74:f9:51:b0:92:c5:e3:0e:92:3e:38:
c5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F1:61:80:0C:30:A3:B8:DA:27:FF:B4:5E:BE:98:C7:6F:FD:E7:08
X509v3 Authority Key Identifier:
keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/WPFhgAwwo7jaJ_-0Xr6Yx2_95wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.32.0/22
193.108.80.0/21
Signature Algorithm: sha256WithRSAEncryption
18:0a:77:8c:26:70:e2:02:f4:53:7f:cf:d6:fc:67:b5:fc:30:
1a:be:dc:ee:3c:d1:c0:73:ea:7e:da:3c:b9:e6:80:04:4d:67:
4b:84:4f:1b:b3:a9:07:37:e3:b2:33:ec:b3:31:90:69:59:ef:
a2:d9:b2:ab:6b:f1:b4:40:38:1a:06:3f:4d:85:51:27:13:c2:
59:cc:20:21:87:58:14:f0:36:e3:23:b0:62:08:f0:4b:79:7c:
67:30:31:aa:80:fe:1a:99:06:8d:a3:2f:f8:68:d4:8d:4a:fe:
9e:ed:1f:bc:1c:50:dd:88:60:a3:f1:6d:13:03:f1:99:2e:35:
53:a2:ec:c6:ac:7e:db:1d:a3:dc:5c:ee:b5:97:4b:7e:3b:e1:
89:88:e5:d9:ae:fb:ee:7d:d5:d6:65:d1:fa:5b:50:4e:ff:c0:
f1:15:f1:23:b6:55:01:8d:3d:94:42:e2:b9:f3:81:5a:dd:97:
e0:8a:fe:a4:61:e2:94:f9:8e:30:bc:9b:ff:0e:ad:04:30:76:
0d:4f:e1:14:c7:57:67:99:8a:1f:d4:ff:00:15:f5:9d:0e:ce:
0d:6a:c3:34:a1:78:df:e2:22:d2:c5:28:8d:07:a7:c8:26:47:
01:3a:cd:a6:4e:c4:93:70:08:e5:6f:d0:06:e9:83:77:48:4b:
87:6a:9f:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 21 12:56:38 2024 by rpki-client on console-fra.rpki-client.org