Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/WicPScCPAMaDjuMlFPEJ1uS0tN4.roa
File: WicPScCPAMaDjuMlFPEJ1uS0tN4.roa (raw, json)
Hash identifier: dzCo3TnlrrYEgNVqzCG4Vq7SIMm2M0ECs9eXI5geUEA=
Subject key identifier: 5A:27:0F:49:C0:8F:00:C6:83:8E:E3:25:14:F1:09:D6:E4:B4:B4:DE
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 01927D56C8CC68D8D62EBD07CD9DDCF88A62
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/WicPScCPAMaDjuMlFPEJ1uS0tN4.roa
Signing time: Fri 11 Oct 2024 20:48:12 +0000
ROA not before: Fri 11 Oct 2024 20:48:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 31.133.90.0/24 maxlen: 24
31.133.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 18:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7d:56:c8:cc:68:d8:d6:2e:bd:07:cd:9d:dc:f8:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Oct 11 20:48:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a270f49c08f00c6838ee32514f109d6e4b4b4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:65:e5:63:e0:b3:2c:c6:23:45:37:90:0f:0e:
15:2d:7f:8b:86:b8:46:a8:91:fc:e3:11:1c:48:af:
4e:e2:f2:37:38:06:70:bc:0d:8d:43:18:0f:0f:6c:
1d:33:ed:5e:57:ab:a8:21:35:b0:a5:5c:4e:ac:8b:
3a:9b:9f:7b:ca:0d:26:16:1e:4a:a9:98:c0:3f:8f:
00:7e:d1:75:58:e8:5d:23:65:2e:8e:d7:6e:2f:25:
05:4d:b9:08:e8:fa:c4:e4:b9:64:e9:8c:e8:31:e2:
d8:6f:a4:e3:46:74:ec:b0:c1:d9:52:2c:7e:39:67:
c4:0f:55:5f:fc:18:cb:7d:26:f1:43:50:23:22:28:
a7:5d:40:8c:33:ff:35:c1:b6:87:b3:7b:7d:15:41:
e4:13:be:24:6c:ae:c6:b1:bc:33:63:f2:11:49:cb:
31:60:71:f2:39:15:97:97:45:2c:f5:13:a8:5f:32:
ef:c0:b7:16:6b:35:b5:aa:91:16:19:7d:89:21:2b:
d2:bc:14:d6:e1:74:15:c9:36:d4:71:fa:a2:7a:57:
f5:77:bf:d3:83:45:ce:10:bf:f0:e3:33:e0:60:f3:
fb:36:bd:2f:24:f4:66:96:76:c6:8a:00:d2:ff:08:
6e:16:34:81:85:3a:0c:c5:ee:04:16:9e:91:65:e0:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:27:0F:49:C0:8F:00:C6:83:8E:E3:25:14:F1:09:D6:E4:B4:B4:DE
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/WicPScCPAMaDjuMlFPEJ1uS0tN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.90.0/23
Signature Algorithm: sha256WithRSAEncryption
25:1f:3f:f4:dd:bc:81:82:2d:35:f0:b3:8c:4c:6a:48:34:24:
6c:07:b4:4b:a1:9b:a5:79:29:16:9f:aa:54:bf:10:2c:c4:5a:
63:2b:b8:f3:0d:ea:1a:41:6a:5f:e9:e4:1c:ce:c5:b8:87:51:
66:c1:5d:82:44:c7:f9:b5:24:75:d7:cd:84:4d:fc:89:49:76:
92:4f:c8:22:7b:5c:27:73:fb:65:21:95:f1:f7:00:bc:a7:29:
78:e8:09:95:32:7e:15:7e:bf:0b:4f:5f:8d:18:e0:61:ce:87:
c3:7f:4d:68:6d:97:41:49:1c:69:44:07:9b:f4:fd:97:5c:fc:
a3:f2:9e:1c:53:91:67:92:b1:2e:89:ac:77:ad:e9:6a:5b:42:
e0:25:fe:a7:57:eb:a4:ce:b4:21:7d:69:ca:c4:ea:a8:85:a4:
cc:d8:f5:d8:e8:24:32:37:c4:f7:43:63:f7:a6:e2:17:b5:a7:
7a:64:76:6f:72:e5:c4:cf:b1:d8:f5:5d:09:e5:07:73:bd:6a:
d9:29:0f:7e:c8:34:e4:85:9c:78:cd:11:77:1f:3a:82:93:40:
21:da:89:56:8f:d4:c0:6b:b1:44:2b:4b:57:e6:d4:3a:f9:9a:
69:24:7e:60:69:af:0a:55:a0:1b:a3:de:22:43:94:16:03:63:
e3:c0:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:11:46 2025 by rpki-client