Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/wfouCC5BisUJg_YhVi0ib8gPydM.roa
File: wfouCC5BisUJg_YhVi0ib8gPydM.roa (raw, json)
Hash identifier: X5y7NmYTER5QSXVhgo3Qwv0SpK/Pcjvb5n9SK/9QtkE=
Subject key identifier: C1:FA:2E:08:2E:41:8A:C5:09:83:F6:21:56:2D:22:6F:C8:0F:C9:D3
Certificate issuer: /CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Certificate serial: 0190EF702DD00E14BD87A57C5B27F1499316
Authority key identifier: 9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/wfouCC5BisUJg_YhVi0ib8gPydM.roa
Signing time: Fri 26 Jul 2024 14:27:04 +0000
ROA not before: Fri 26 Jul 2024 14:27:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29226
IP address blocks: 91.240.242.0/24 maxlen: 24
193.105.93.0/24 maxlen: 24
195.43.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ef:70:2d:d0:0e:14:bd:87:a5:7c:5b:27:f1:49:93:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b054fec255d0cdc6ba3aba96ab2603663272db3
Validity
Not Before: Jul 26 14:27:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1fa2e082e418ac50983f621562d226fc80fc9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:88:13:6c:5d:93:e2:10:1c:21:b8:7e:ea:
06:87:bf:3b:5c:0d:ce:c7:d7:33:c3:10:44:26:ef:
5d:83:d8:2f:12:99:14:6b:fd:5d:da:c1:31:15:7f:
96:39:79:da:9e:28:82:a8:a0:f3:3f:d5:dd:c9:99:
cf:9f:c4:82:8b:94:eb:c5:b8:a6:95:a9:45:da:ad:
cf:00:30:af:79:4b:e5:d7:23:91:00:75:8e:f3:90:
5e:d9:01:b6:b0:f4:51:b7:49:76:f8:4a:e5:10:99:
77:31:fd:dd:69:72:f9:fe:ee:cb:7d:a7:b7:33:bc:
3c:17:df:d5:ab:6d:bc:79:2c:1d:78:33:51:3e:60:
99:43:3b:b0:e8:e4:1b:ca:6a:70:ba:65:4b:ca:b7:
22:98:95:6b:54:60:68:98:95:4d:f8:ce:5d:0e:f1:
55:42:c0:d0:95:af:e4:f7:1c:51:42:d4:cf:fa:69:
aa:23:e3:ad:07:e9:53:bf:9d:78:db:46:fe:fc:c9:
03:a7:24:ed:1e:ca:8b:53:18:95:4d:fc:92:c4:41:
21:d7:b2:d0:4d:b6:d7:15:3d:4f:f8:5c:88:4b:e4:
ee:dc:e1:53:e5:69:44:07:13:1e:74:90:55:57:7d:
7e:08:8e:2a:58:98:4e:35:00:0b:6d:08:02:95:0d:
35:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:FA:2E:08:2E:41:8A:C5:09:83:F6:21:56:2D:22:6F:C8:0F:C9:D3
X509v3 Authority Key Identifier:
keyid:9B:05:4F:EC:25:5D:0C:DC:6B:A3:AB:A9:6A:B2:60:36:63:27:2D:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwVP7CVdDNxro6uparJgNmMnLbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/wfouCC5BisUJg_YhVi0ib8gPydM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7605ec-6f34-4589-9237-f80a48ad0a2c/1/mwVP7CVdDNxro6uparJgNmMnLbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.242.0/24
193.105.93.0/24
195.43.77.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:cd:dd:d4:83:41:fb:a6:66:cb:8f:aa:08:cb:64:75:55:ee:
f7:4b:ef:3c:a6:ff:31:3a:07:1d:91:2f:53:d7:cc:76:76:83:
77:1a:82:42:01:b4:49:65:96:9a:56:89:ed:97:d4:d2:ef:9e:
7c:1c:3d:7a:c5:ab:e0:11:4e:27:26:25:6b:84:13:0c:84:d7:
dd:1f:48:a4:da:90:c5:77:08:02:86:c4:3c:d7:c4:81:4e:2d:
bd:0f:a8:fb:0d:10:9a:03:96:56:32:99:31:6c:31:ba:4a:48:
9e:3a:26:a7:9f:d7:81:eb:81:7f:ca:6e:32:19:ec:a2:01:b7:
c8:c2:22:38:4c:15:d5:4c:d2:bf:d0:e6:a5:be:39:39:1f:de:
8f:59:f0:6d:b5:f7:0e:17:7a:84:6d:61:76:b9:41:43:03:b7:
49:ac:92:9d:52:10:b1:f0:d0:de:6e:a8:75:fe:84:99:2d:0a:
7c:7e:fb:93:9f:00:ad:b7:9f:df:90:1b:1c:e2:6f:75:b8:09:
1e:6e:7a:2b:01:eb:58:4d:34:8f:94:7b:ac:5f:c1:ce:71:85:
15:27:c7:d7:65:70:84:8c:89:30:01:49:bf:91:97:76:9f:3b:
f6:96:c6:11:44:9c:f5:c4:ad:52:5e:26:98:4c:c7:5a:bb:54:
9c:64:d4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:08:28 2025 by rpki-client