Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/W7M3CInR9i-BYTFAB_LVFCpDowc.roa
File: W7M3CInR9i-BYTFAB_LVFCpDowc.roa (raw, json)
Hash identifier: sBdiWCzrRyjDJjac624JtXTNXIymg68SRO57a/JBX+U=
Subject key identifier: 5B:B3:37:08:89:D1:F6:2F:81:61:31:40:07:F2:D5:14:2A:43:A3:07
Certificate issuer: /CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Certificate serial: 0193DBCCABC6F047B150A7E6737EA953B4C6
Authority key identifier: 09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/W7M3CInR9i-BYTFAB_LVFCpDowc.roa
Signing time: Wed 18 Dec 2024 22:04:03 +0000
ROA not before: Wed 18 Dec 2024 22:04:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63127
IP address blocks: 199.244.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 01:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:db:cc:ab:c6:f0:47:b1:50:a7:e6:73:7e:a9:53:b4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e592a2e0d427a09aa2de1b9baf08ccd14f0a0
Validity
Not Before: Dec 18 22:04:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5bb3370889d1f62f8161314007f2d5142a43a307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:57:d5:c0:df:15:c6:16:54:45:77:bd:08:b2:
4c:3e:98:10:a2:b4:bc:a3:2d:81:9c:55:91:46:ca:
57:b4:ab:4f:5f:9c:4d:06:d7:d8:34:6f:0c:d3:96:
dc:79:01:a1:59:7e:1c:08:e1:cb:03:be:d3:e9:b4:
6a:b6:28:1f:56:a4:96:82:27:34:1d:3a:0b:1d:f1:
7e:df:f8:a6:f1:f0:d4:aa:f6:a3:89:f3:92:6f:a5:
0b:15:69:9d:76:c7:ed:87:d2:dc:f9:c3:8e:66:cf:
51:5b:bf:ff:71:85:a3:11:cb:50:12:12:a0:a5:b6:
df:55:21:d8:55:20:b2:2f:66:6c:10:8a:52:b6:a1:
71:87:34:64:6e:84:83:98:66:d1:8f:98:9c:ee:f0:
73:f3:a6:47:6a:db:7f:03:ea:c9:85:0f:85:c5:47:
f6:32:19:48:e8:30:91:15:62:83:3a:3c:17:60:8a:
eb:70:95:cf:dc:95:1a:5f:1c:26:b7:c5:92:b3:24:
05:a3:b4:e6:7e:0c:2c:d8:06:e5:fb:f1:36:67:2d:
c1:6c:94:18:03:ed:b3:c5:d1:e6:25:b3:a2:8c:c4:
f0:79:68:bd:2f:1a:73:6c:7b:93:3c:4c:b8:50:c0:
6a:e6:8a:f6:a8:6b:f3:f6:48:a9:82:2c:fa:8c:5a:
f4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:37:08:89:D1:F6:2F:81:61:31:40:07:F2:D5:14:2A:43:A3:07
X509v3 Authority Key Identifier:
keyid:09:0E:59:2A:2E:0D:42:7A:09:AA:2D:E1:B9:BA:F0:8C:CD:14:F0:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/W7M3CInR9i-BYTFAB_LVFCpDowc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/15f690-5add-470d-a286-33bdc73ed0ea/1/CQ5ZKi4NQnoJqi3hubrwjM0U8KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.244.100.0/24
Signature Algorithm: sha256WithRSAEncryption
08:c5:0a:28:02:9e:dc:cc:ab:ca:c9:5e:aa:52:a8:57:c3:3c:
ac:9c:eb:8b:25:ff:60:52:c9:5f:fe:96:f0:af:66:2e:04:0e:
11:d7:5d:16:b3:08:17:8e:78:d5:e9:8f:16:ba:be:86:e0:e1:
12:17:31:f1:be:76:ba:2b:d6:e7:20:e0:3b:ee:3c:9b:cc:99:
f9:d2:a9:fc:2c:67:65:c8:8a:2b:9b:21:49:a4:33:e8:03:41:
46:72:c8:eb:1c:10:e2:12:fc:22:07:98:dc:07:6b:cd:1d:6a:
51:7c:c3:28:10:96:b2:54:74:64:bc:90:c8:5f:d2:34:9a:00:
91:9c:a8:b5:10:ed:d8:ee:bd:e5:e5:60:5e:78:60:ae:8f:2c:
da:54:ea:2a:cd:40:b1:28:90:0c:95:8e:c6:8a:95:e7:38:59:
c3:8c:ed:e3:22:e7:9a:c0:55:07:57:86:6c:eb:95:fb:3b:db:
f0:09:fd:e3:1e:fa:8e:6f:82:13:70:1b:aa:e9:c3:73:72:fd:
0f:1e:bd:ce:96:3f:6b:1a:10:91:31:a5:1f:13:d9:25:5a:7d:
36:5a:a2:25:7e:5f:55:10:96:bd:31:c8:a8:2a:f2:2e:3e:08:
1c:d3:0b:56:1e:b0:9d:3a:c5:4a:48:cd:c4:9e:44:e4:d2:5f:
f3:64:b5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:59:10 2025 by rpki-client