Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/wXeu36YVBJk2A6b3HhWYtI5O99A.roa
File: wXeu36YVBJk2A6b3HhWYtI5O99A.roa (raw, json)
Hash identifier: 1URXkXR9H/tjIuzCFD//gB9ldGQ7SD0AE+AS/LjDlDY=
Subject key identifier: C1:77:AE:DF:A6:15:04:99:36:03:A6:F7:1E:15:98:B4:8E:4E:F7:D0
Certificate issuer: /CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Certificate serial: 019349E08073BF4E14B0C606690D5A6698C0
Authority key identifier: 5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/wXeu36YVBJk2A6b3HhWYtI5O99A.roa
Signing time: Wed 20 Nov 2024 14:01:09 +0000
ROA not before: Wed 20 Nov 2024 14:01:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64481
IP address blocks: 91.90.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:49:e0:80:73:bf:4e:14:b0:c6:06:69:0d:5a:66:98:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b3502cdbd3325628cd615606b7c7433ee5b2204
Validity
Not Before: Nov 20 14:01:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c177aedfa61504993603a6f71e1598b48e4ef7d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0f:e2:c1:cb:25:21:44:74:6c:13:e9:28:df:
f3:10:72:e6:62:33:ad:43:88:15:78:ee:6a:c0:df:
a3:d3:6e:06:7a:95:33:c6:27:7a:b0:f3:b4:2e:83:
05:73:2b:02:3f:c0:42:cd:9d:56:32:96:6b:e4:46:
3d:05:31:19:eb:b0:bc:73:2d:a7:f3:0f:7c:12:e0:
c2:f2:2f:c4:10:ba:66:f4:56:90:75:b6:46:53:ca:
81:6b:d0:6c:37:5d:10:f4:23:d7:15:d7:d0:3c:5a:
d1:2e:c7:5a:34:04:27:81:f8:99:e8:29:c3:97:7d:
df:5a:77:7e:30:20:1c:5a:7c:42:b5:54:6e:cf:d1:
a7:43:74:2a:0d:83:6d:32:38:74:b2:00:8a:d4:83:
6f:a8:2d:36:ab:80:1b:3a:e2:fd:b4:c9:ef:60:c3:
dd:6e:70:25:7e:5b:8c:01:ad:f0:23:63:e3:e1:a8:
ce:aa:fb:ef:34:34:3b:cb:fe:9a:56:44:5a:45:c7:
23:85:20:bd:c5:43:bc:c6:04:c3:6a:68:1e:51:dd:
88:5e:a8:3c:84:fb:95:f3:aa:5b:d8:1a:7d:6b:b3:
a6:33:f3:5d:70:39:35:ee:c5:2e:93:c6:b0:4d:b8:
50:6a:a1:23:9b:3f:48:8e:d4:ae:75:4d:44:80:66:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:77:AE:DF:A6:15:04:99:36:03:A6:F7:1E:15:98:B4:8E:4E:F7:D0
X509v3 Authority Key Identifier:
keyid:5B:35:02:CD:BD:33:25:62:8C:D6:15:60:6B:7C:74:33:EE:5B:22:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzUCzb0zJWKM1hVga3x0M-5bIgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/wXeu36YVBJk2A6b3HhWYtI5O99A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f228be-a3a6-48ca-a41a-b6b670b6809a/1/WzUCzb0zJWKM1hVga3x0M-5bIgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.197.0/24
Signature Algorithm: sha256WithRSAEncryption
03:c2:c2:8d:99:27:0c:27:bf:b2:bf:0c:dd:9a:a5:01:99:c9:
f2:21:7f:73:3b:89:aa:69:5a:22:d4:88:99:a8:27:fd:fc:0e:
bc:61:a1:ae:c3:56:e5:0d:af:63:44:60:4d:df:ed:60:34:e9:
90:fb:4f:39:cf:80:89:4f:68:d4:e6:84:7f:ef:21:82:0d:85:
17:e4:ac:60:d7:ec:7d:8f:a4:48:3e:ec:31:2b:8f:89:c9:ab:
eb:ec:ad:e3:5e:7b:1b:48:61:b9:5b:d1:66:fc:b3:c7:cd:57:
f2:d5:ad:c8:76:c6:44:3a:10:15:03:18:27:96:23:5a:d4:43:
92:b7:0c:89:ec:9b:5d:47:f0:e8:2f:a5:af:ed:0b:91:ca:2b:
88:bc:f3:8d:02:88:be:b8:16:e1:41:57:02:8d:ef:f6:f3:e0:
11:e7:a8:49:d2:8d:77:bd:cb:70:fe:65:da:eb:e7:df:ab:15:
c0:7d:69:55:f5:e7:c4:fa:79:d3:1c:c7:60:87:ce:d7:b6:ee:
22:fc:74:07:b7:4d:86:d4:8e:7b:19:d1:77:34:a8:f4:02:29:
98:b0:ea:4c:3a:2a:15:37:ba:92:97:33:e8:a6:02:78:d9:fe:
18:0c:a8:9f:56:58:c2:62:69:8d:25:6a:8a:d5:75:3d:3c:25:
b4:6a:63:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:31 2025 by rpki-client