Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/WjT4Fgr3F3DZfEODwsAwaMzEWq8.roa
File: WjT4Fgr3F3DZfEODwsAwaMzEWq8.roa (raw, json)
Hash identifier: I2eoT1IqXP2ZqoGh1UD1lYagY5rhg6J23u5ouXkhzxI=
Subject key identifier: 5A:34:F8:16:0A:F7:17:70:D9:7C:43:83:C2:C0:30:68:CC:C4:5A:AF
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 018CCA2A1597D3DE8A760A9D4E300773AB33
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/WjT4Fgr3F3DZfEODwsAwaMzEWq8.roa
Signing time: Tue 02 Jan 2024 12:33:24 +0000
ROA not before: Tue 02 Jan 2024 12:33:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12773
IP address blocks: 185.28.109.0/24 maxlen: 24
185.28.111.0/24 maxlen: 24
185.28.108.0/24 maxlen: 24
185.28.110.0/24 maxlen: 24
130.193.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:15:97:d3:de:8a:76:0a:9d:4e:30:07:73:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Jan 2 12:33:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a34f8160af71770d97c4383c2c03068ccc45aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ff:32:10:d9:cb:48:63:5c:f8:51:8e:5f:39:
b7:03:c5:25:02:7e:9f:cf:de:fc:79:30:f6:e6:cc:
95:54:4b:61:8b:0d:f2:f1:83:10:cc:87:e3:dc:44:
16:4a:d0:e2:49:80:dc:fc:6a:e4:42:9b:ad:e5:bb:
ee:54:4f:0d:5d:02:4d:d3:ff:e0:e3:1a:19:9e:21:
39:27:04:60:d4:53:95:56:44:0c:74:7c:8a:dd:00:
77:b5:71:23:d4:cc:f8:45:d5:7c:4c:29:7b:ae:cf:
04:44:54:70:14:ef:9f:34:35:a5:39:d0:13:05:61:
e1:5d:ae:be:c2:cc:d4:99:4d:f0:b1:b4:4b:1c:44:
e2:fd:32:4e:d3:e8:53:2a:08:b1:90:09:25:b8:2b:
6f:c3:60:e2:6a:72:64:9f:55:e1:4c:35:24:a8:d6:
1d:d0:ba:51:96:0c:e2:14:20:de:a7:9e:69:4a:bb:
dd:a6:73:3d:8f:56:4b:db:37:3d:e4:d6:9b:ca:e8:
33:26:2d:db:4e:a7:7d:2f:ac:e9:94:b1:55:df:a5:
9c:49:40:fd:7c:c5:33:d4:41:a4:4a:59:30:2e:b0:
8f:7d:d4:f9:6c:69:9b:68:34:aa:7f:bc:a5:6d:a5:
a8:c1:d5:99:7a:68:b9:4a:a4:9b:26:fc:57:c5:70:
90:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:34:F8:16:0A:F7:17:70:D9:7C:43:83:C2:C0:30:68:CC:C4:5A:AF
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/WjT4Fgr3F3DZfEODwsAwaMzEWq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.73.0/24
185.28.108.0/22
Signature Algorithm: sha256WithRSAEncryption
75:fb:7b:7a:b8:01:3d:37:fa:b5:b8:82:a9:fa:f0:51:d0:88:
04:a1:97:ef:71:d2:89:fe:da:14:22:92:24:7a:e9:4a:2e:34:
e4:5f:ab:54:1d:85:1e:a4:9e:01:2a:d4:79:0f:86:e0:ab:80:
2b:45:0f:75:14:c8:d9:4a:63:94:2f:1a:f4:87:bc:3e:e4:3e:
a7:95:64:fe:e4:14:45:a4:fa:b4:06:72:61:1a:1c:49:69:9e:
fb:6f:da:f9:3a:d9:dd:37:8c:04:58:bb:d1:5a:56:c1:71:91:
48:cf:96:27:4e:95:c6:b7:45:aa:f0:2e:30:81:a4:9d:bc:69:
e1:e2:af:89:83:e7:16:b2:07:6d:21:bb:4a:11:24:aa:cb:61:
6d:4c:68:e8:3b:49:27:ad:af:61:54:e4:91:e0:32:e4:79:17:
41:64:7a:c3:91:df:0a:7a:dd:cb:e1:33:a4:b1:f1:9d:53:be:
06:1c:f1:89:e1:64:5b:66:cb:c1:4d:79:32:21:93:4c:57:03:
a1:eb:f0:13:98:af:6e:e1:25:10:57:9c:35:79:8a:51:9e:dd:
6f:4c:e3:6a:bc:f3:a4:4d:4f:d2:91:2c:23:a3:fa:7d:5d:0e:
d6:57:c2:a0:56:c6:9c:dc:3d:2b:00:b9:1e:77:31:b9:b1:6c:
dd:11:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:40 2025 by rpki-client