Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/WCfSgKwyMxqy24PHh83VjNK7HRA.roa
File: WCfSgKwyMxqy24PHh83VjNK7HRA.roa (raw, json)
Hash identifier: HJ4aPRzQk8rc+UlhegPoeqQJHW/itkFpP+cDtYlmWFw=
Subject key identifier: 58:27:D2:80:AC:32:33:1A:B2:DB:83:C7:87:CD:D5:8C:D2:BB:1D:10
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 0192340273D2854542B4F98E44F00246DDB9
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/WCfSgKwyMxqy24PHh83VjNK7HRA.roa
Signing time: Fri 27 Sep 2024 15:03:48 +0000
ROA not before: Fri 27 Sep 2024 15:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214390
IP address blocks: 94.139.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 00:25:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:34:02:73:d2:85:45:42:b4:f9:8e:44:f0:02:46:dd:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Sep 27 15:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5827d280ac32331ab2db83c787cdd58cd2bb1d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:ca:d8:4f:26:1d:4d:a9:3c:cf:b8:0c:24:
d7:26:e1:a7:63:79:fa:0f:2b:f5:db:91:e9:62:dd:
d7:ca:d8:a4:5a:44:fc:99:2d:35:3f:ca:a8:81:0b:
48:a7:1e:47:cd:5b:45:65:91:1a:52:f4:97:07:b1:
7e:75:b3:7e:36:94:c0:76:45:6a:b6:6c:f3:c8:9e:
f4:08:f4:82:49:35:e7:f7:44:e0:33:e0:86:6a:4f:
a0:a6:e8:e9:43:27:8a:71:52:06:08:4a:75:f4:ec:
c3:26:60:83:19:06:05:f5:b1:7e:28:d9:4c:00:ec:
1b:c8:11:5d:17:2e:12:ab:25:99:64:8a:fd:e0:f5:
b8:0a:93:58:d8:29:7a:33:e8:41:48:9e:bb:d2:df:
3f:81:bb:89:aa:27:0d:2f:67:c3:49:9d:6a:19:96:
b6:8c:d5:8c:2f:6e:f7:e9:ca:ea:7e:b0:46:ee:b3:
32:06:e6:14:49:4b:ce:34:ef:c0:20:78:03:c1:4d:
63:59:6b:c3:d0:03:7e:05:11:b4:7c:77:bf:0f:a5:
d6:4a:04:1d:c7:21:7e:85:f0:00:5f:0a:21:16:0a:
f3:fc:0e:70:a8:d4:79:4e:b0:38:f8:27:33:13:cf:
a3:42:75:fa:0d:eb:85:59:18:f1:a3:b4:6c:18:f1:
59:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:27:D2:80:AC:32:33:1A:B2:DB:83:C7:87:CD:D5:8C:D2:BB:1D:10
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/WCfSgKwyMxqy24PHh83VjNK7HRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.139.32.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:24:9d:56:90:85:7e:9f:92:de:3d:57:6b:6a:cb:72:65:51:
b2:2d:9e:59:e3:b2:84:64:a6:47:5e:7e:7a:b5:fd:85:5d:64:
a4:53:8c:0e:90:3a:f1:d3:ec:90:e5:db:b3:2c:2f:82:2c:53:
34:1f:9c:ad:a4:36:a6:6e:14:78:98:4a:53:61:69:bf:c9:02:
73:8f:25:df:7d:4b:b5:ea:73:af:e1:5e:93:c9:24:14:d6:32:
39:2b:80:c2:a3:ec:f1:ed:1f:41:bd:d8:f0:0c:b0:ab:df:c9:
29:e0:f3:0f:d1:24:07:27:6d:c3:11:2a:25:5c:16:f7:37:17:
0f:8e:87:a7:03:83:1b:95:52:11:b5:44:ee:35:0e:83:85:b0:
dc:de:06:b7:5a:ca:5e:98:9c:87:cc:b4:fe:35:77:e1:e6:83:
24:3b:1c:f1:49:6e:1c:e4:83:2e:8f:ba:7b:38:46:de:46:8a:
6e:03:94:f6:7f:44:8a:4b:0b:d5:21:02:8b:a9:54:54:1f:10:
c5:65:43:6b:a6:5e:ee:96:fe:28:41:dc:b1:48:09:58:cf:76:
aa:d4:c9:06:54:42:e5:c9:c4:aa:08:24:9b:d1:e6:d8:cb:7b:
23:d7:bd:20:68:fc:be:1e:8a:f7:9c:d7:11:13:e1:bc:6d:9e:
d5:6d:1a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 03:43:45 2024 by rpki-client on console-ams.rpki-client.org