Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxNM6QD4IVCsk3aVjU0e5gGsq3U.roa
File: wxNM6QD4IVCsk3aVjU0e5gGsq3U.roa (raw, json)
Hash identifier: 9hMiXWsPY3NounEB3JovyxIur7I9SJZmXhhB4NANho0=
Subject key identifier: C3:13:4C:E9:00:F8:21:50:AC:93:76:95:8D:4D:1E:E6:01:AC:AB:75
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA29F28CB21B7D298EF7693A74EFCC41
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxNM6QD4IVCsk3aVjU0e5gGsq3U.roa
Signing time: Tue 02 Jan 2024 12:33:15 +0000
ROA not before: Tue 02 Jan 2024 12:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43309
IP address blocks: 146.120.170.0/24 maxlen: 24
146.120.168.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:f2:8c:b2:1b:7d:29:8e:f7:69:3a:74:ef:cc:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3134ce900f82150ac9376958d4d1ee601acab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4e:96:01:43:62:e7:1a:0a:aa:2c:e1:75:39:
c7:a3:45:ae:23:82:df:0b:17:62:a6:f6:42:b7:f4:
41:91:2e:1f:83:23:d4:d2:5c:5e:9f:76:75:a5:46:
48:a3:fb:2a:5f:3c:48:57:1a:2b:d9:9f:25:09:be:
08:68:56:8a:f2:cf:8d:85:6e:21:54:0f:0f:ce:2f:
5e:38:60:d2:8e:ad:6f:29:c5:2b:36:90:8d:36:45:
b9:a8:b7:d1:07:ff:ad:1d:fc:bf:5f:78:fc:89:94:
16:be:49:6c:91:00:e5:90:33:95:43:2c:aa:b6:36:
e4:ab:a2:f0:82:45:c1:66:48:74:57:b9:89:f8:14:
45:59:d1:b2:73:f4:d3:89:36:95:77:27:94:a8:f5:
16:c4:75:e3:d0:7c:b0:93:6e:a1:d1:ad:82:39:10:
44:d8:d3:60:92:d4:c3:ac:40:17:79:54:15:2b:13:
a3:d2:63:fc:39:39:39:3b:45:ba:f2:27:5b:88:c7:
11:0c:82:eb:40:41:50:38:37:fb:d1:be:1a:6e:9e:
e8:1f:df:5e:f6:e9:5a:ea:49:38:99:16:1e:8e:d0:
f7:12:58:da:ad:da:dc:e7:68:72:a9:f8:b1:c1:73:
0a:b0:c3:ef:67:85:3a:80:c0:43:8e:1e:5b:4d:81:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:13:4C:E9:00:F8:21:50:AC:93:76:95:8D:4D:1E:E6:01:AC:AB:75
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/wxNM6QD4IVCsk3aVjU0e5gGsq3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.120.168.0-146.120.170.255
Signature Algorithm: sha256WithRSAEncryption
0c:f4:3a:a2:2f:4b:77:6b:72:88:4b:d8:ee:f9:2b:de:6c:da:
b7:fd:54:f3:ec:dc:99:57:f1:66:f4:a6:5d:08:3d:e1:18:7b:
8f:fd:bc:d0:ac:b1:d2:95:17:a1:32:e9:db:70:1e:3a:19:90:
82:b1:0d:56:0f:c0:37:0d:33:68:c0:97:79:2f:17:ab:74:9c:
3a:7a:eb:75:53:68:3a:fe:f7:59:5e:f3:5b:b1:07:a1:e9:09:
59:02:c4:13:cb:bb:48:6f:18:1d:d9:ce:1d:1b:cd:6c:23:94:
0d:48:4e:66:9b:15:b2:61:97:86:9a:62:78:d9:8e:7b:7b:2b:
d6:7d:0d:4c:53:0a:34:36:04:f3:4d:b7:cd:2a:4b:3b:68:78:
f1:a9:3b:79:1c:51:0b:87:30:9a:c9:3c:0d:b9:27:d5:2b:ff:
2e:4d:04:97:bc:02:26:b6:2f:51:22:aa:c8:48:ec:85:0c:0b:
33:4a:cc:c0:bc:1c:4d:c9:09:90:0f:32:1b:90:48:9a:5c:78:
19:f2:db:72:3c:71:7c:6c:db:57:87:3e:46:15:42:9c:e9:23:
61:fb:b8:b3:cf:01:fd:93:20:48:71:64:aa:16:bf:e5:50:1f:
d1:4c:4e:89:64:a0:17:b8:f1:36:99:f5:fa:e6:d0:b6:1a:2b:
10:33:4d:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:58:41 2025 by rpki-client