Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wjo0zZ-c8FOWzydWYBkAunV-y8w.roa
File: wjo0zZ-c8FOWzydWYBkAunV-y8w.roa (raw, json)
Hash identifier: coi9OMoxmmDB997cm5NlGlMrKufdm4j62jYY1vHu6ac=
Subject key identifier: C2:3A:34:CD:9F:9C:F0:53:96:CF:27:56:60:19:00:BA:75:7E:CB:CC
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01937D03A1883847535771B49F0B2C9B72BB
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wjo0zZ-c8FOWzydWYBkAunV-y8w.roa
Signing time: Sat 30 Nov 2024 12:20:10 +0000
ROA not before: Sat 30 Nov 2024 12:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 5.102.104.0/22 maxlen: 24
5.102.116.0/22 maxlen: 22
31.186.180.0/22 maxlen: 24
82.163.96.0/21 maxlen: 24
Validation: Failed, certificate revoked on Sun 29 Dec 2024 12:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7d:03:a1:88:38:47:53:57:71:b4:9f:0b:2c:9b:72:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Nov 30 12:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c23a34cd9f9cf05396cf2756601900ba757ecbcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:0b:75:7a:56:c5:ae:b2:71:d3:5a:91:5a:
7e:78:1b:70:df:47:b3:c7:bd:34:e0:3c:e9:f0:b9:
68:a7:57:c6:17:3b:ab:69:88:b8:c9:ed:b3:c6:f5:
f3:3f:40:d8:d8:0c:54:05:91:b7:ba:66:7f:06:59:
4b:88:2b:56:d2:99:42:62:b8:2a:46:bc:76:0b:db:
f6:dd:0b:8a:81:bd:d0:d8:98:a4:d5:03:cf:a9:44:
a2:67:aa:2f:ff:df:b8:97:bc:89:1e:41:87:40:e6:
0e:83:4f:02:02:42:e7:c5:62:b8:4c:26:63:d6:9d:
8b:2d:a3:35:13:75:97:23:44:fe:0b:43:23:42:53:
ec:06:5b:c7:be:ed:03:c4:33:21:b4:a9:59:87:3c:
d5:de:33:35:a1:c5:64:86:fc:52:e5:1d:a4:1f:cc:
14:92:68:0d:11:35:64:cd:37:27:83:f8:20:04:18:
46:9a:bf:3a:1a:a5:d4:17:24:23:d5:40:2d:9e:e5:
84:11:c9:cf:57:22:c4:f0:b8:21:e5:87:03:e9:a5:
c9:c5:8d:e7:07:68:17:08:20:83:ae:c8:a7:01:d0:
fc:24:36:f2:75:04:ee:4b:ed:e9:bf:6a:d5:55:0a:
76:62:cc:fd:a2:d3:d0:12:fc:fb:a3:c1:5b:e8:42:
bb:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3A:34:CD:9F:9C:F0:53:96:CF:27:56:60:19:00:BA:75:7E:CB:CC
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/wjo0zZ-c8FOWzydWYBkAunV-y8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.104.0/22
5.102.116.0/22
31.186.180.0/22
82.163.96.0/21
Signature Algorithm: sha256WithRSAEncryption
05:08:0e:60:77:08:1e:06:77:74:f4:08:39:58:1f:38:3f:4d:
5c:c7:18:4a:f6:f2:87:8f:a0:b8:40:59:6f:7d:7f:38:c4:d1:
7e:c8:7f:d7:de:cb:9e:cb:ec:06:6f:b8:c2:af:df:e4:1f:60:
8f:66:2d:60:92:01:b6:80:f8:91:6b:99:11:fe:55:76:95:4f:
19:e0:0a:22:dc:35:07:f3:5f:fe:1c:ce:f5:78:ae:cf:a7:ee:
71:38:7e:50:9e:c3:63:db:f8:d3:eb:29:d0:a1:51:23:63:47:
75:ab:5b:6f:68:f9:a7:ed:73:c4:c4:55:b8:19:35:f7:68:a6:
e1:38:3b:29:9a:22:cb:2f:f7:42:fd:84:82:c8:46:2a:bd:80:
a7:8d:65:af:fd:ad:01:2e:20:96:28:e9:7e:c3:d5:b9:23:ab:
ea:e0:48:55:11:c0:3e:5a:4a:dc:55:83:e9:98:3c:5a:af:44:
fd:08:f6:28:d7:2d:fc:39:86:f6:a5:74:a3:6a:91:3b:d3:82:
0e:d7:91:2f:21:cd:ac:d7:e2:be:c9:b3:74:04:b9:a6:0d:7d:
8d:74:34:96:47:cc:a8:80:b6:3f:78:89:1b:d4:bd:79:78:2c:
26:03:3b:7b:06:28:81:65:77:14:b4:e7:7a:db:fa:7b:06:8b:
a3:81:6f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:40 2025 by rpki-client