Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/WaYR67FFd_VrFpPIYGzaEx6I7y0.roa
File: WaYR67FFd_VrFpPIYGzaEx6I7y0.roa (raw, json)
Hash identifier: v6ZY/MJ71SE1A8gAr9FxP0+v2UNJ/W+1Xa+YdAheRok=
Subject key identifier: 59:A6:11:EB:B1:45:77:F5:6B:16:93:C8:60:6C:DA:13:1E:88:EF:2D
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018EA84AE8670C541D6CE9D1B50F12713FEA
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/WaYR67FFd_VrFpPIYGzaEx6I7y0.roa
Signing time: Thu 04 Apr 2024 08:47:45 +0000
ROA not before: Thu 04 Apr 2024 08:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62390
IP address blocks: 195.95.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 19 Apr 2024 07:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:4a:e8:67:0c:54:1d:6c:e9:d1:b5:0f:12:71:3f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: Apr 4 08:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59a611ebb14577f56b1693c8606cda131e88ef2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:d0:db:4a:98:fd:e7:b8:12:ba:8a:a3:88:
81:9f:4e:07:8a:dc:bc:c1:b3:34:df:b8:04:4f:1b:
9c:df:10:55:c1:a5:25:7c:18:9d:d0:d7:38:61:75:
d8:83:9c:90:d5:26:d4:09:d1:41:a6:1a:54:3d:c5:
42:a9:93:16:d2:9a:7b:2b:b6:cd:f5:5a:6b:22:f1:
52:c7:db:2d:aa:fd:d7:61:b2:ef:04:be:d3:61:f6:
3d:15:20:68:6a:4b:9f:6c:8f:45:cf:f7:7b:dd:1b:
39:92:00:19:53:38:fd:77:c7:9f:c4:ba:b1:51:c7:
69:c2:c2:fd:05:d6:10:5a:c2:f2:0d:f2:8e:bb:ca:
4e:ec:db:8b:f3:36:4b:5a:34:47:ab:0c:80:f6:51:
01:e3:e1:62:0b:fc:15:1f:d5:1c:a1:3a:7f:fd:10:
ac:71:ee:f8:45:5f:e3:42:be:e0:06:24:16:6c:eb:
88:5a:fc:e5:34:f5:8b:7a:e4:3d:1f:62:4e:54:6e:
ad:d3:45:01:0a:37:88:2f:cc:ff:3f:7c:64:34:ee:
57:ee:76:b8:fa:9e:7e:4e:70:f9:03:1a:e3:e9:6c:
aa:1e:bf:e1:73:f5:7a:36:4a:c6:3b:af:ff:29:fb:
1c:66:bb:50:81:22:5c:9e:96:b0:11:43:22:a8:64:
82:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A6:11:EB:B1:45:77:F5:6B:16:93:C8:60:6C:DA:13:1E:88:EF:2D
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/WaYR67FFd_VrFpPIYGzaEx6I7y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.200.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d4:e8:e9:4c:64:4a:7e:c1:98:b1:66:55:ad:37:95:9b:6d:
2d:a1:18:cd:86:27:91:aa:85:1e:7c:72:f5:ab:e2:b4:80:b5:
39:a2:5b:46:a6:63:29:19:a5:7c:8c:65:55:07:a1:3e:17:e8:
1c:a9:ec:a9:a3:35:27:7b:93:38:18:4c:6f:df:68:3a:40:80:
1e:e9:0a:69:c1:39:1e:d6:08:cb:23:61:13:2b:ec:b3:f1:0f:
83:ae:4a:30:6b:30:29:4e:60:fe:90:d2:40:2d:86:6e:31:cb:
f0:c7:20:9d:98:1c:7c:fb:b7:a5:86:01:ff:62:da:11:4a:9a:
7e:83:23:f6:3e:b4:09:24:40:d5:de:6a:cf:2f:32:2d:ff:3e:
a2:c9:98:78:08:a6:c4:c3:ed:67:bd:bf:d6:c3:fe:df:7b:41:
dd:f2:59:75:9a:14:2a:06:e1:6c:08:56:d0:e3:2d:ca:79:9b:
e6:d9:35:e8:26:69:bd:08:57:57:22:08:73:d2:9d:3b:43:9c:
62:0d:34:46:9e:0f:df:94:7c:b5:42:e8:7b:71:51:db:c1:55:
61:e5:79:44:e6:0e:0a:b7:26:d2:85:7d:90:69:7f:58:da:53:
30:a6:18:0f:d7:57:6c:ee:80:39:76:5a:c4:91:50:02:7a:ca:
ad:a3:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 09:00:19 2024 by rpki-client on console-fra.rpki-client.org