Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/i-WLoWpIJT80zX9-lw5bKzTouFM.roa
File: i-WLoWpIJT80zX9-lw5bKzTouFM.roa (raw, json)
Hash identifier: fNaNMNjZwEXphNfVoxcNpsdwLKxy4ou5u0BgVU4sQZ0=
Subject key identifier: 8B:E5:8B:A1:6A:48:25:3F:34:CD:7F:7E:97:0E:5B:2B:34:E8:B8:53
Certificate issuer: /CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Certificate serial: 018CC801629D04ABB37207B760F7B1E5779B
Authority key identifier: 5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/i-WLoWpIJT80zX9-lw5bKzTouFM.roa
Signing time: Tue 02 Jan 2024 02:29:43 +0000
ROA not before: Tue 02 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 194.127.172.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:62:9d:04:ab:b3:72:07:b7:60:f7:b1:e5:77:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb3a2145f9b4d4660582adc6b7354969e089ca9
Validity
Not Before: Jan 2 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8be58ba16a48253f34cd7f7e970e5b2b34e8b853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:27:39:6b:0b:fc:29:47:d8:ee:ec:5c:a1:
46:6b:b0:c7:6f:92:ba:e9:af:c5:1e:ad:d0:6b:fc:
2a:41:7e:42:89:2d:ae:68:8f:a2:9d:0d:01:14:8e:
7f:99:5a:50:2c:43:e7:a0:79:55:07:b9:f5:5e:6e:
bb:d2:6c:5f:fe:b5:41:04:81:cf:ce:d9:17:02:2b:
18:59:d1:b7:f2:32:45:1a:e2:fa:c2:aa:19:d6:55:
6f:2a:87:ad:64:be:21:2b:ba:fd:ec:d9:2c:af:9b:
c7:38:76:28:3d:a7:ea:b7:c0:ec:09:4b:4f:b9:c1:
a3:1b:7a:42:84:2e:24:d8:bc:0f:16:b9:ad:ef:4b:
4a:40:83:4e:58:95:25:30:58:ac:b3:f6:01:a2:1e:
5d:bc:05:66:cb:01:ee:61:5d:6b:6b:65:d3:e9:2d:
9f:2e:cc:4e:9a:df:37:0c:bc:4d:ce:6f:0c:fe:5c:
d2:65:76:27:fb:a6:f0:aa:56:95:8d:3a:25:e2:ba:
72:39:dd:3f:5c:51:be:77:99:70:e3:99:ae:f5:82:
39:aa:f8:82:9e:e9:29:fa:4f:84:02:9f:11:9f:f4:
1b:21:47:47:50:3d:f6:23:74:0e:ff:0f:9c:d5:28:
15:54:89:63:94:e4:44:e8:68:8f:18:10:e8:45:8b:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:E5:8B:A1:6A:48:25:3F:34:CD:7F:7E:97:0E:5B:2B:34:E8:B8:53
X509v3 Authority Key Identifier:
keyid:5C:B3:A2:14:5F:9B:4D:46:60:58:2A:DC:6B:73:54:96:9E:08:9C:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLOiFF-bTUZgWCrca3NUlp4InKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/i-WLoWpIJT80zX9-lw5bKzTouFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d0661c-cebb-4e22-b197-139800a8c75f/1/XLOiFF-bTUZgWCrca3NUlp4InKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.172.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:cd:61:41:44:ac:21:ba:4f:83:fb:0d:ff:e8:72:9c:38:5c:
17:f4:9b:3e:0b:fd:da:60:1e:f7:8a:89:15:0b:02:61:df:5d:
99:71:d4:12:dc:0c:87:d5:5c:bb:7a:37:b9:d6:ae:94:cb:31:
1e:b3:e3:7a:55:af:98:26:b8:df:45:cc:ed:f5:ef:f5:9b:24:
12:09:d7:76:85:28:29:7d:fb:75:7a:63:c2:df:fa:a5:3e:14:
3a:b3:cb:d8:cc:88:fd:e4:19:df:e5:66:e5:62:5f:39:b6:91:
8d:d8:0a:64:ab:89:a8:57:86:a9:da:68:36:36:42:a2:68:4f:
fe:93:d7:7a:3b:f9:9d:38:fe:9a:c2:e4:96:53:f1:89:b1:a6:
18:87:37:a2:3c:d8:e6:b5:7f:3c:eb:34:98:00:b9:47:a7:b8:
c5:9e:32:ab:05:a9:49:a9:f3:d9:04:cc:ff:5a:48:65:6d:14:
80:54:82:87:bc:fe:24:c2:d3:ae:f2:99:ca:be:34:51:bf:df:
59:57:df:11:74:c6:25:7a:f5:02:52:42:ff:4b:45:03:9d:d5:
87:e8:84:4a:44:7f:67:34:07:78:ac:1b:6d:7a:4c:e1:af:86:
37:78:b7:81:97:90:ae:82:c0:af:ae:e4:bf:df:9d:9a:9e:07:
d2:c1:68:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:43 2025 by rpki-client