Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/wwMmNHAVUM4HwIucFsvuQa2lnsw.roa
File: wwMmNHAVUM4HwIucFsvuQa2lnsw.roa (raw, json)
Hash identifier: 93k5uAVLFacGaX+bzGvnSDG5bBekWcDmpxSNg8q4vnQ=
Subject key identifier: C3:03:26:34:70:15:50:CE:07:C0:8B:9C:16:CB:EE:41:AD:A5:9E:CC
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 018CC9BB18E9188BA695B571FC2222BB89B3
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/wwMmNHAVUM4HwIucFsvuQa2lnsw.roa
Signing time: Tue 02 Jan 2024 10:32:11 +0000
ROA not before: Tue 02 Jan 2024 10:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 45.94.25.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Mar 2024 11:51:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:18:e9:18:8b:a6:95:b5:71:fc:22:22:bb:89:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jan 2 10:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3032634701550ce07c08b9c16cbee41ada59ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:4c:b5:bd:c5:97:6f:71:99:c8:d6:d3:ae:
18:9e:68:2e:6f:1f:ae:8f:40:39:95:2b:65:fe:fb:
83:9e:0d:64:a4:e4:40:82:eb:5c:4d:e0:82:e1:5a:
ac:c6:74:e8:f3:4b:0d:3f:a0:ce:1a:ae:b0:15:1a:
77:cc:9c:cd:7c:3c:55:80:23:b9:86:72:2c:df:ff:
79:ed:fd:19:68:ca:84:c7:a6:16:6e:88:28:73:b1:
11:af:20:bc:f0:4b:42:7a:8f:f2:37:7e:af:0e:18:
3d:7d:86:1b:5e:cc:be:0d:ec:3a:6b:54:18:11:e5:
db:8b:98:50:26:2d:28:aa:35:29:50:b9:d8:66:5b:
1b:d0:3f:91:4a:2f:43:a3:21:c3:95:c0:6b:43:d9:
82:1b:6b:59:80:6f:66:ab:71:83:6a:0c:ac:e8:a3:
58:1b:42:4f:a6:20:67:60:d7:26:93:b2:0f:80:69:
88:20:8a:13:e0:c6:65:a6:7e:ca:ab:df:e4:d7:36:
62:f3:10:42:03:d0:36:85:96:bf:69:d1:9a:e1:b4:
7b:c3:21:a4:7b:30:3e:a6:70:64:9a:b9:74:e7:61:
eb:d7:9a:18:2a:d7:08:a9:4f:34:0c:c7:6d:d3:30:
e3:a3:68:e9:99:eb:7b:dd:ad:d7:48:23:c1:25:67:
69:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:03:26:34:70:15:50:CE:07:C0:8B:9C:16:CB:EE:41:AD:A5:9E:CC
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/wwMmNHAVUM4HwIucFsvuQa2lnsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:e3:9a:ae:92:55:2f:5c:92:a9:f3:aa:cd:65:69:72:bc:4a:
9c:89:f7:7a:b6:0e:41:32:1a:b1:9a:dd:3c:5e:70:8c:29:db:
38:e1:b3:b4:0d:3c:00:c4:a6:7a:9a:76:07:7b:e0:93:59:72:
3d:ec:0b:00:58:fc:2d:0b:b4:56:7d:16:50:5a:2e:f8:80:fc:
cb:23:b7:fb:2c:aa:14:45:af:52:64:fc:12:6d:d8:73:d3:34:
02:87:f9:e7:b5:77:0e:cb:cb:16:14:7e:fa:17:d0:99:9e:5b:
39:29:bd:8b:14:31:c9:a6:98:2b:80:1a:55:c1:e0:c0:7a:98:
b4:03:83:7c:40:9c:df:f7:91:16:25:e7:c7:9d:45:d7:1b:a8:
09:48:cc:53:ce:1a:8d:ab:38:d1:49:68:bd:2d:d5:0a:e5:d6:
5a:fc:bf:3b:a0:da:f8:25:05:b3:90:e0:07:80:37:81:e5:99:
c8:43:bc:0e:de:c6:60:f6:74:b2:19:15:35:0c:a8:52:93:5d:
ea:2e:16:40:f6:71:9c:b7:16:71:b4:2a:3d:f3:97:e2:fa:25:
c0:4a:c6:6d:61:fc:8c:6a:3e:bc:77:85:93:f3:b3:5e:ad:b3:
d5:b2:98:c6:08:74:7e:2b:12:d6:a8:30:d9:62:8e:a7:7b:1f:
ec:62:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 22 16:08:04 2024 by rpki-client on console-ams.rpki-client.org