Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/wm0-0EJSMKOsLa_GA8PFDjQ7ISw.roa
File: wm0-0EJSMKOsLa_GA8PFDjQ7ISw.roa (raw, json)
Hash identifier: yQBaVBBUxNhnzLWk9ZY4Lm8D7e+/K1A4rL5lIP88YEE=
Subject key identifier: C2:6D:3E:D0:42:52:30:A3:AC:2D:AF:C6:03:C3:C5:0E:34:3B:21:2C
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 018E1D71CDC00BE3A324CAD1DC0B7343C482
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/wm0-0EJSMKOsLa_GA8PFDjQ7ISw.roa
Signing time: Fri 08 Mar 2024 09:43:01 +0000
ROA not before: Fri 08 Mar 2024 09:43:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 109.107.157.0/24 maxlen: 24
194.26.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 09:16:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1d:71:cd:c0:0b:e3:a3:24:ca:d1:dc:0b:73:43:c4:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Mar 8 09:43:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c26d3ed0425230a3ac2dafc603c3c50e343b212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3f:cb:69:fa:ab:ab:53:1b:0e:ca:2e:4b:0b:
bf:67:46:c3:4d:8c:70:93:46:9d:0e:e7:b8:eb:9f:
d9:79:d5:ed:ca:0d:06:34:ee:b5:48:1e:04:9f:3b:
84:5f:a4:51:01:71:d3:d5:5c:7c:cc:4a:75:85:2c:
2f:e9:5e:3e:df:aa:78:15:da:81:85:3d:f8:a5:a8:
3c:5f:4e:67:aa:01:c9:e5:4e:c3:1a:8d:a5:2a:b8:
60:52:c9:f5:59:bd:7f:d8:a7:35:f3:10:35:19:25:
d5:f9:13:62:02:10:11:2d:8c:cc:8f:ec:3e:26:54:
55:55:48:38:ea:4b:59:5a:56:3c:7f:fa:73:c1:77:
84:53:94:92:5f:f9:f7:ce:65:d1:73:54:37:e4:c3:
3a:27:9e:76:a4:14:95:01:5b:24:7a:b4:c3:f5:a4:
27:3c:6a:d9:2e:59:22:41:74:27:50:ce:b7:30:42:
9e:92:43:32:a6:e0:86:32:85:e2:06:5e:ad:48:a9:
c1:fd:40:b4:32:aa:d5:0b:7d:ac:66:8f:c2:60:2e:
e9:43:63:8b:da:cd:37:45:54:2f:a5:fb:46:2e:27:
84:e7:9f:e2:09:0a:60:d8:b6:fa:19:e9:fc:fa:3a:
91:e5:e9:e9:2b:fb:30:0e:f6:eb:eb:8d:33:19:8b:
a1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6D:3E:D0:42:52:30:A3:AC:2D:AF:C6:03:C3:C5:0E:34:3B:21:2C
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/wm0-0EJSMKOsLa_GA8PFDjQ7ISw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.157.0/24
194.26.232.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ba:14:6d:bf:94:66:33:4d:03:19:d4:3d:41:09:44:18:42:
6d:ea:61:ae:89:23:7a:e2:2d:4b:d9:71:ae:79:d3:70:41:3c:
c8:5b:17:e0:7b:95:ce:9b:32:84:66:45:ef:c5:d0:46:58:35:
e5:f3:9a:ea:2c:2a:d3:28:b7:2f:56:7b:69:b0:97:b1:ed:39:
dc:9f:16:1f:18:ec:aa:dd:78:4d:cd:4d:0e:33:62:da:f4:fc:
b4:07:17:6d:65:c6:fc:8a:35:e2:11:1b:c2:fe:5c:2b:a7:9c:
70:90:17:52:5f:0c:b8:e5:10:ba:29:13:9b:e5:a1:e4:de:17:
b9:34:e4:d6:c7:42:b4:77:cc:4a:fa:fc:19:22:cd:03:58:18:
92:9b:9d:67:8f:ee:8d:7b:c0:0b:68:03:65:e3:29:9c:7c:18:
3a:52:a4:f3:37:ee:38:ad:48:32:1c:e8:c0:bd:01:a8:68:a1:
5f:7e:0e:0e:1a:60:80:4f:13:af:80:87:dc:36:91:27:35:9c:
3a:9f:c0:f4:64:d9:58:ff:fc:4d:38:0a:e4:27:73:7e:82:dc:
1d:49:36:26:6a:1d:61:40:ca:c5:dd:bb:f8:b2:b9:4e:a4:63:
7f:85:e7:18:87:76:8b:7e:1b:bc:c8:20:76:67:8b:83:ed:0f:
2b:0f:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:12 2024 by rpki-client on console-fra.rpki-client.org