Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/wKHTGlPu-KsncMFp8LtB3FcYyDM.roa
File: wKHTGlPu-KsncMFp8LtB3FcYyDM.roa (raw, json)
Hash identifier: nUiu6Mi3+URdfMNj+S34mHQDsF+ilDoMNQTK2hL9UiU=
Subject key identifier: C0:A1:D3:1A:53:EE:F8:AB:27:70:C1:69:F0:BB:41:DC:57:18:C8:33
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018CC9BBC9DA37C5CBA141685739995AD296
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/wKHTGlPu-KsncMFp8LtB3FcYyDM.roa
Signing time: Tue 02 Jan 2024 10:32:56 +0000
ROA not before: Tue 02 Jan 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16280
IP address blocks: 194.149.50.0/24 maxlen: 24
194.149.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c9:da:37:c5:cb:a1:41:68:57:39:99:5a:d2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0a1d31a53eef8ab2770c169f0bb41dc5718c833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:30:6f:06:7b:62:80:bb:76:57:8f:ec:6d:
cb:d9:78:14:f1:5e:d8:13:d5:da:57:f9:f9:76:eb:
fd:16:41:2d:42:1b:f7:d2:76:1e:90:6d:00:d1:4f:
7f:8b:5a:d8:3f:33:d5:1a:ae:6a:c9:4c:e9:6a:59:
3a:8c:86:d4:9c:9d:7e:15:d7:6a:2a:25:ff:1e:d2:
de:67:e6:8a:34:62:f6:fc:c6:27:d7:39:8a:40:e9:
c2:75:95:e4:9d:c2:a5:cf:22:6c:11:fa:70:b2:2f:
cf:7d:d1:14:a5:d3:06:0e:de:f7:c1:20:b9:38:8c:
09:b9:eb:76:49:1c:dc:22:b3:d5:53:42:2d:9e:96:
30:14:26:da:ed:7c:61:44:22:8d:3a:bb:04:a1:c9:
7c:ac:1b:15:cd:7c:ee:ca:d7:57:1d:f1:2f:3e:7c:
2c:be:bd:db:47:a8:68:5c:26:dc:fa:eb:0e:30:21:
8e:00:da:b3:90:fa:b5:19:69:fa:73:81:a3:95:b1:
88:7b:31:02:3c:f3:d9:22:b6:7a:8d:89:9d:d8:b6:
20:8c:e7:2f:a4:b2:f7:0d:6b:17:06:ef:74:b8:d1:
f4:d4:91:45:9d:49:23:89:bd:db:c8:85:e9:12:3e:
09:20:70:38:64:85:cb:77:81:c9:9c:a1:dc:f3:37:
e4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A1:D3:1A:53:EE:F8:AB:27:70:C1:69:F0:BB:41:DC:57:18:C8:33
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/wKHTGlPu-KsncMFp8LtB3FcYyDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.48.0-194.149.50.255
Signature Algorithm: sha256WithRSAEncryption
34:43:c6:ac:43:6c:d1:da:46:74:fa:89:04:a0:07:03:d9:0d:
ac:05:49:18:62:7c:68:3f:4e:3b:90:73:be:d4:71:d2:36:e7:
8c:0c:95:48:9f:fe:d3:c1:54:a1:5c:fc:7c:cd:f9:66:dd:1c:
ff:b2:fe:ba:5c:59:b1:09:12:e0:87:58:4c:07:d8:c2:fd:56:
0a:cf:53:c4:9b:de:7c:79:b5:35:ae:c3:a4:5d:20:cf:11:5b:
41:6f:e5:4f:d0:14:9c:8d:02:72:e3:2c:be:f8:f8:69:1b:fe:
00:67:d4:b5:2b:0b:89:cb:3e:aa:04:cb:59:c1:f5:ce:9f:90:
5d:52:9c:30:62:59:9e:a2:1e:f7:83:1b:c9:51:ff:63:66:d3:
1a:ca:7f:02:ee:da:b4:4f:ea:16:d1:02:a0:31:9c:d8:36:70:
59:de:50:2f:18:0b:ca:64:cd:1e:0d:40:90:62:83:cf:7a:36:
b3:c2:c2:ad:45:8e:2a:26:d1:9c:33:de:67:b7:b4:cc:96:bc:
b6:ee:18:fc:0a:2d:d2:b3:36:20:01:00:66:88:1a:a2:1a:4e:
0f:7d:7a:73:94:fc:13:e2:58:1a:4f:89:d6:5f:ba:dc:54:74:
cc:16:d4:71:03:06:68:78:40:a4:aa:d2:84:a6:45:e5:b2:b6:
6c:1c:ad:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 04:42:29 2025 by rpki-client