Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/wxkyITOSfc7NklxrdwXy6lGRdPM.roa
File: wxkyITOSfc7NklxrdwXy6lGRdPM.roa (raw, json)
Hash identifier: Rj1/J98LYSJKJt2peSh0c6XSjpWv+t14WjdDWDBCdxs=
Subject key identifier: C3:19:32:21:33:92:7D:CE:CD:92:5C:6B:77:05:F2:EA:51:91:74:F3
Certificate issuer: /CN=ed64691c31892cc991ad4e9a9671147759e417ab
Certificate serial: 01928F5F9F8BC50A123590B6ED278A864BA6
Authority key identifier: ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/wxkyITOSfc7NklxrdwXy6lGRdPM.roa
Signing time: Tue 15 Oct 2024 08:51:01 +0000
ROA not before: Tue 15 Oct 2024 08:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.75.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 07 Dec 2024 12:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:5f:9f:8b:c5:0a:12:35:90:b6:ed:27:8a:86:4b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed64691c31892cc991ad4e9a9671147759e417ab
Validity
Not Before: Oct 15 08:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c319322133927dcecd925c6b7705f2ea519174f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b2:c0:92:c5:19:14:83:71:b1:62:8d:cc:a3:
04:33:b3:2d:42:65:87:85:b4:3c:1d:6f:0f:4b:f7:
6e:09:2a:75:c4:e1:48:e0:5c:20:74:6a:75:70:59:
ce:8e:b1:7a:8c:db:31:6b:ac:56:40:7d:fd:73:41:
9c:0d:77:26:07:4c:07:ac:8a:13:96:13:2f:9b:9c:
d4:c3:63:4c:8e:2b:02:68:4e:45:d5:92:6a:11:65:
61:d7:a2:d5:ed:b6:dc:ee:fc:3c:5d:f8:ca:4a:77:
81:b5:00:16:ca:f3:0f:4f:eb:23:94:d1:08:b1:ca:
94:a3:2d:a4:80:d5:a2:b7:0c:b8:b0:df:62:92:05:
82:6c:ec:3b:38:92:1d:34:49:8f:5f:8d:54:b5:47:
b6:d8:a5:5d:46:79:2b:1a:ca:41:30:50:df:e7:58:
27:fe:25:4f:3a:7f:fc:dc:91:a1:97:70:6d:4b:17:
7d:21:2c:a5:f6:21:75:3f:c8:48:8b:17:e3:19:6b:
9a:09:3b:99:86:96:53:a4:4a:51:09:e2:a5:8c:fa:
8a:cf:5e:1e:5e:e0:47:36:68:c5:85:c6:73:a1:e7:
a6:ef:50:9c:df:65:4a:d4:19:58:f6:05:d9:78:a0:
53:12:9c:1f:43:94:1d:b5:9f:1b:28:14:42:17:06:
11:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:32:21:33:92:7D:CE:CD:92:5C:6B:77:05:F2:EA:51:91:74:F3
X509v3 Authority Key Identifier:
keyid:ED:64:69:1C:31:89:2C:C9:91:AD:4E:9A:96:71:14:77:59:E4:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7WRpHDGJLMmRrU6alnEUd1nkF6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/wxkyITOSfc7NklxrdwXy6lGRdPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f67d09-8923-4152-95f2-7c7db21230a3/1/7WRpHDGJLMmRrU6alnEUd1nkF6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.242.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:4f:b5:9b:29:44:2f:c4:c6:62:8c:f1:a5:83:39:2a:f0:d8:
6e:d6:49:12:de:3e:84:cc:dc:27:f4:bd:da:a9:43:69:ba:3c:
36:0d:b9:1a:8c:34:44:72:e2:0b:88:c7:76:2a:85:33:f3:fc:
62:9a:f1:41:59:9b:7e:f7:74:9d:55:95:23:0f:a0:d6:12:c1:
4c:fb:bb:2a:e3:e6:eb:bf:0b:53:30:1b:0b:81:d3:65:12:7f:
c5:7a:ca:a1:0d:ae:6c:8d:f6:97:f6:83:91:d0:12:1d:a7:e6:
07:a5:87:be:fb:e4:ca:e2:5f:92:0b:72:df:07:1f:a9:00:c1:
eb:3d:88:64:23:3f:87:50:a9:96:b8:0d:cc:91:7a:11:e0:3a:
eb:79:ae:c8:76:db:4e:87:18:f2:1c:94:8b:fd:d1:fd:4e:ca:
aa:43:cd:25:a2:d7:95:f9:14:45:e6:e0:1e:f7:6d:56:57:11:
4d:82:f6:66:45:b3:71:28:d7:19:ce:65:28:35:99:dc:85:ac:
c8:63:cf:16:17:d6:28:fd:5f:58:79:b1:17:3a:d6:e1:fb:3e:
f3:48:bf:96:8a:b6:48:33:f2:25:7f:f9:1c:2f:71:fc:51:19:
38:cf:e7:f2:15:29:50:08:d4:2a:cb:75:f6:cc:54:cd:e9:d5:
e8:d9:47:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:45 2025 by rpki-client