Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WGtj0JgVNIPzgSiUBrpGpXL4gVE.roa
File: WGtj0JgVNIPzgSiUBrpGpXL4gVE.roa (raw, json)
Hash identifier: 4W5dNeFp3FZwc+5KWrvWYIJEv4FPTqfnwgQPPXyUC0Y=
Subject key identifier: 58:6B:63:D0:98:15:34:83:F3:81:28:94:06:BA:46:A5:72:F8:81:51
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29E034206A376CE8CD0AB4A9EAA0C5
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WGtj0JgVNIPzgSiUBrpGpXL4gVE.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6876
IP address blocks: 95.46.107.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e0:34:20:6a:37:6c:e8:cd:0a:b4:a9:ea:a0:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586b63d098153483f381289406ba46a572f88151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f3:dd:9a:7d:49:43:07:35:7e:3c:8b:84:98:
d7:79:a5:bb:94:2f:f9:00:3f:71:b0:9f:ab:e3:a2:
6a:ce:96:f3:37:2e:27:30:83:03:77:70:c6:ea:73:
72:4f:33:fe:16:e2:45:d9:74:3e:c4:6b:83:04:06:
4d:3a:aa:43:d5:e0:53:9b:36:bd:98:09:ba:b8:96:
89:32:2e:e6:94:5e:08:55:28:de:08:f9:f9:cc:e2:
2c:e4:11:d4:c7:ec:6f:de:4b:f6:ac:ab:55:cc:68:
a9:38:68:7e:36:da:6f:1a:fd:37:73:08:85:49:f3:
09:52:84:f0:7c:c5:5e:a0:95:e7:c3:18:95:f3:13:
a3:77:15:b2:b1:5b:d1:4c:54:2f:ec:3f:91:fa:7d:
8e:22:18:d1:d8:73:d8:60:a7:c1:88:ae:da:fc:67:
db:59:3e:9b:dd:7d:31:1c:ca:e9:b3:35:87:16:04:
4e:03:e5:bd:f4:87:cd:39:eb:d2:e0:b2:ba:95:ae:
2a:c2:24:77:8b:25:96:9b:63:df:c1:f0:29:09:b2:
3b:ac:46:31:8f:e9:23:a7:cf:03:3c:4f:6e:1c:67:
b5:8a:77:f4:80:5f:c1:ba:23:46:c5:38:0a:57:e8:
c3:9d:1c:e2:a8:c0:e4:61:f4:bc:d1:9c:43:70:48:
ae:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:63:D0:98:15:34:83:F3:81:28:94:06:BA:46:A5:72:F8:81:51
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/WGtj0JgVNIPzgSiUBrpGpXL4gVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.107.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:af:98:67:d6:2e:93:91:e2:a6:3a:78:4a:1f:44:cf:5b:bf:
60:e5:90:45:d8:09:c7:31:3b:ac:c5:cb:7a:01:c2:1b:49:78:
c7:a2:de:23:5d:af:1a:a5:1e:bc:15:3d:a4:f4:44:9a:4c:a3:
7a:11:21:9d:0f:55:c5:6b:80:d4:cd:d1:2e:91:a9:9a:f1:2d:
14:85:b2:f9:b8:4d:8f:13:c6:95:80:15:32:a8:36:88:13:fd:
b0:d4:f7:dd:4f:0d:e7:cb:ed:04:bf:5f:aa:8a:a7:9c:49:1f:
19:66:f0:03:c0:7a:8a:08:bb:b4:d2:9c:a1:92:59:b6:7e:66:
09:e9:29:15:6c:66:96:07:a9:28:0c:d6:a1:fb:cd:c0:1d:ea:
25:41:91:4e:ed:25:d7:f8:dd:54:b5:42:54:14:70:c3:07:70:
15:7a:0d:09:16:01:3f:5f:29:7c:6b:65:11:c5:f0:b6:db:81:
5d:0c:b0:6d:5b:c0:b7:1f:d3:95:83:b4:df:97:a3:00:31:60:
c5:85:cb:cc:a1:63:6e:d3:06:33:fa:8b:22:b5:0b:09:6f:0a:
9a:43:ac:b0:82:e0:69:18:33:6b:4c:a8:34:b6:b8:66:1b:73:
f2:25:8a:1a:31:7d:12:1d:5c:10:58:02:35:d3:38:b5:5c:5e:
0f:d0:3d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:02 2025 by rpki-client