Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wAglqkouc_r8bjbSFyHMC8tTT4I.roa
File: wAglqkouc_r8bjbSFyHMC8tTT4I.roa (raw, json)
Hash identifier: AgwcFCyljNXq7qabXxZlwmdGZ8Vv5DpFyFkH6W8JMII=
Subject key identifier: C0:08:25:AA:4A:2E:73:FA:FC:6E:36:D2:17:21:CC:0B:CB:53:4F:82
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191ADD8F685760D46E4D512D8835C12EC9F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wAglqkouc_r8bjbSFyHMC8tTT4I.roa
Signing time: Sun 01 Sep 2024 13:49:22 +0000
ROA not before: Sun 01 Sep 2024 13:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216285
IP address blocks: 109.176.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Sep 2024 12:53:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ad:d8:f6:85:76:0d:46:e4:d5:12:d8:83:5c:12:ec:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 1 13:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c00825aa4a2e73fafc6e36d21721cc0bcb534f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f4:8b:ad:b2:a6:aa:e3:ec:0d:58:0a:60:be:
c8:33:7f:2a:ef:ed:38:e9:d8:ae:1c:45:1e:95:cb:
d0:90:e9:0a:d1:a1:f5:4c:a9:c5:29:75:e0:e2:22:
0f:4b:fd:52:32:be:d7:a1:30:11:fa:34:e5:1f:a0:
ae:df:cc:30:6c:f9:74:6b:52:7c:49:77:36:26:6e:
8e:a3:b9:dd:ff:24:9a:fd:5e:51:9e:4e:d3:1e:f2:
f1:cd:1e:d1:c6:b5:2e:09:0e:3e:31:81:e9:f1:10:
c8:7c:0f:16:dd:6b:9e:7b:25:e6:67:9e:53:9f:47:
f5:b5:7e:28:bf:5b:3b:20:41:b3:45:bc:2a:37:3d:
2c:cb:96:43:05:42:1f:ad:53:d6:21:a5:35:b2:3c:
53:f6:a4:c8:18:82:2d:15:21:9b:5b:99:b3:47:25:
2a:c5:8f:d3:89:61:e3:63:0b:96:f4:22:73:ca:3f:
44:12:8c:c9:91:94:4a:d6:f4:87:ab:8a:fd:bb:b3:
92:d1:93:45:5b:0a:c0:32:dd:31:71:05:5b:a5:cd:
11:f8:aa:f2:7e:1f:4e:a7:2f:d4:44:06:37:98:e8:
2f:3d:13:13:c5:2a:6e:8f:ee:20:96:7d:a8:b3:84:
de:35:64:eb:04:1b:10:fd:86:9e:c5:4d:00:4f:f8:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:08:25:AA:4A:2E:73:FA:FC:6E:36:D2:17:21:CC:0B:CB:53:4F:82
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/wAglqkouc_r8bjbSFyHMC8tTT4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.16.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:f8:6c:30:fd:77:3a:c7:00:19:56:b2:87:f1:49:d5:78:42:
df:84:a5:da:eb:67:e4:c2:02:24:f9:8c:41:4d:cc:d6:b6:f5:
72:04:ce:5d:45:6b:c1:86:72:60:e6:44:85:d0:04:5d:64:42:
52:21:55:3d:c8:55:e0:12:28:1b:cf:f6:0f:ff:4a:50:4e:da:
3d:14:86:c7:89:92:47:c2:29:9a:6d:3c:97:08:cc:98:05:48:
73:78:88:08:e9:65:6f:c3:ee:b8:df:28:45:30:65:24:84:54:
ca:16:e4:81:6a:fa:9f:9e:f9:05:4c:83:bc:e2:e9:20:0a:af:
b1:92:e2:49:cd:0f:61:ef:8b:f4:fb:a4:45:be:d1:41:3d:75:
2e:33:8a:ee:7c:75:b1:c5:b5:15:46:9d:9c:72:a4:f2:2d:0a:
51:cc:30:0a:01:27:0e:3c:8e:72:45:a6:61:3d:2d:46:0f:14:
9a:92:23:80:6d:35:a9:a6:20:59:e0:12:7d:4a:ee:6b:93:06:
aa:0a:7c:28:1b:01:9d:de:a9:4a:c1:b1:84:94:ba:e8:83:e7:
39:58:42:47:27:99:c5:b3:0e:25:19:76:c9:d6:44:27:32:39:
8a:9f:9a:34:8a:ad:3e:ae:58:d6:8b:ea:1e:90:32:07:30:41:
e9:1d:39:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:19:38 2025 by rpki-client