Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWujdevKuwbdtRuGsSZgpKtm7qQ.roa
File: wWujdevKuwbdtRuGsSZgpKtm7qQ.roa (raw, json)
Hash identifier: mR7jPFL4u41m2YsCOGLy4ggHE4FV2rIUKFE7xYTXgEU=
Subject key identifier: C1:6B:A3:75:EB:CA:BB:06:DD:B5:1B:86:B1:26:60:A4:AB:66:EE:A4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01920F1C09AAC223DADE8CD530BB0DD7A74C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWujdevKuwbdtRuGsSZgpKtm7qQ.roa
Signing time: Fri 20 Sep 2024 11:05:48 +0000
ROA not before: Fri 20 Sep 2024 11:05:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 107.150.166.0/24 maxlen: 24
185.161.111.0/24 maxlen: 24
203.188.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Sep 2024 07:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0f:1c:09:aa:c2:23:da:de:8c:d5:30:bb:0d:d7:a7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 20 11:05:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c16ba375ebcabb06ddb51b86b12660a4ab66eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0d:ec:46:09:33:0c:f6:89:df:e0:04:0f:18:
1d:00:eb:f6:c4:5c:b1:52:a7:9f:91:47:67:72:66:
96:fa:81:98:60:32:41:f6:1a:de:2b:0d:29:d3:62:
7f:fa:14:aa:53:98:20:b8:15:b3:f8:44:42:aa:1a:
99:ed:99:80:6d:9f:39:85:3a:5b:d6:6b:01:a7:57:
f6:2c:63:99:17:f9:2a:50:bf:28:1b:ad:a7:29:fe:
7b:2d:36:2c:87:14:8d:5b:3c:50:83:1c:e5:dd:3e:
60:42:8d:ff:42:90:ba:59:1b:88:27:96:28:b8:bf:
20:74:11:cd:b1:eb:a9:a9:15:79:f3:6b:15:12:80:
ae:89:b7:36:85:9c:c7:21:47:ca:f0:ea:7e:8c:de:
4b:cd:99:e4:52:52:e0:a1:60:7b:18:d5:3f:54:67:
9f:87:2b:ef:d1:39:4a:88:92:db:1b:cb:ef:74:e1:
f6:9b:7f:0b:77:7d:a7:cd:b5:e1:f0:46:f2:85:56:
dc:4d:3d:9d:dc:39:ab:bf:b6:21:29:ba:da:26:2d:
fc:71:86:1e:37:dc:2c:b7:8c:10:ba:e8:f5:5f:c7:
f9:9a:99:76:57:df:a1:f4:12:5e:b6:bb:ef:9a:27:
0b:88:30:68:3e:dd:ac:fb:2b:28:e3:cb:b4:17:f9:
2e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:A3:75:EB:CA:BB:06:DD:B5:1B:86:B1:26:60:A4:AB:66:EE:A4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWujdevKuwbdtRuGsSZgpKtm7qQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
107.150.166.0/24
185.161.111.0/24
203.188.165.0/24
Signature Algorithm: sha256WithRSAEncryption
72:fe:59:7c:b7:7f:8a:2d:3d:5a:92:61:b5:ca:32:4a:07:9e:
7c:ca:b2:6c:12:b5:46:7f:16:2c:cd:4a:3e:1d:6e:d4:8a:26:
aa:0c:c0:24:1f:01:fb:7c:bf:35:7c:b3:9d:82:0b:76:02:be:
64:43:bb:4b:18:c3:74:e3:5c:6e:fd:6a:05:35:33:ae:51:0b:
c6:bc:4f:cc:03:fe:80:b2:95:96:43:ab:fb:73:8a:7c:1b:03:
12:27:e7:b6:23:9e:57:51:45:07:0d:d0:6b:84:be:27:95:ed:
93:e7:cc:75:26:d2:b9:aa:7b:66:bd:86:b6:e9:61:f2:46:62:
8c:ba:ba:43:53:f2:4d:50:50:6a:26:e3:b7:2e:fa:bf:f2:af:
b6:a4:da:65:d8:d1:5b:43:11:9f:95:a5:02:8c:5b:bb:97:b5:
d9:05:a8:c3:ef:b9:b7:4e:78:67:07:aa:49:a3:f4:c9:85:72:
c5:8e:fd:2a:e9:c6:43:3f:ca:4b:b3:aa:2f:28:da:bc:bc:0e:
8b:2e:60:6e:30:00:37:61:66:d5:48:f8:76:bd:fd:41:ac:f9:
28:7a:dc:69:09:d9:f4:6c:a0:b4:55:38:04:0b:2e:ce:4f:7d:
26:bb:9f:a9:01:f1:9f:73:5a:7d:b4:10:2c:3c:81:63:5c:b8:
f0:55:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 10:48:42 2024 by rpki-client on console-ams.rpki-client.org