Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/W-VR9llyX6qvCpuVOyxFQYpIhO4.roa
File: W-VR9llyX6qvCpuVOyxFQYpIhO4.roa (raw, json)
Hash identifier: nmzOVPXcgitet8hG4TIsL+tXKLzC8VY9QHQdLgZh0/U=
Subject key identifier: 5B:E5:51:F6:59:72:5F:AA:AF:0A:9B:95:3B:2C:45:41:8A:48:84:EE
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018CF231D4096C2734D131B84D7ED6D1B56D
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/W-VR9llyX6qvCpuVOyxFQYpIhO4.roa
Signing time: Wed 10 Jan 2024 07:06:40 +0000
ROA not before: Wed 10 Jan 2024 07:06:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.79.14.0/24 maxlen: 24
77.246.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 11:53:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:31:d4:09:6c:27:34:d1:31:b8:4d:7e:d6:d1:b5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jan 10 07:06:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5be551f659725faaaf0a9b953b2c45418a4884ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:24:72:4e:f5:a1:ee:7c:67:e9:f6:73:ca:
4e:b1:4d:80:eb:33:ef:f1:68:60:9d:b8:ab:2e:2b:
30:96:b1:2e:d3:4a:31:e0:cb:35:16:cd:a3:ed:96:
a6:f0:47:1f:d4:49:92:96:ff:a8:57:12:84:9f:bb:
c5:d0:1b:83:7a:cb:a1:72:ad:5f:1e:2b:67:ba:6a:
a3:63:d8:08:3b:2c:76:25:60:62:4b:d9:5c:64:46:
99:31:76:0e:d2:bb:4b:7c:ad:32:dd:f7:0e:2e:a9:
61:28:f3:28:0b:9c:5d:ec:27:dc:8e:0f:ab:e8:04:
5f:4a:c9:79:da:c3:21:16:23:ec:21:42:bb:44:56:
cd:00:d1:73:8e:e4:30:bc:3c:fe:8d:6a:ff:4c:1f:
4e:a5:c0:2b:b2:7a:34:10:76:4f:dd:84:66:e6:1b:
0e:36:3f:03:3d:4a:37:b6:41:b6:25:9e:ef:a2:49:
ea:15:c4:98:71:0f:3d:5d:4c:81:95:25:5b:64:c0:
3e:39:86:ab:0c:7f:b9:2a:e6:ca:80:f0:01:34:28:
39:f2:a9:50:06:e1:6d:62:dc:90:97:6b:61:a7:49:
50:86:a9:93:bd:99:6f:e5:99:42:e9:e9:b1:bb:26:
3f:84:7c:12:eb:5a:00:e0:4a:39:9b:12:89:d3:bb:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E5:51:F6:59:72:5F:AA:AF:0A:9B:95:3B:2C:45:41:8A:48:84:EE
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/W-VR9llyX6qvCpuVOyxFQYpIhO4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.211.0/24
194.79.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:b9:d4:61:19:4d:79:9c:6f:25:92:74:85:b3:f1:c9:29:c2:
a7:75:71:70:6f:dd:db:ae:64:9e:b5:f9:a6:74:73:e2:47:9f:
bc:cc:df:c2:a0:c2:2d:64:f5:4b:cf:fb:51:27:73:04:4a:cd:
ba:cf:14:04:a6:d0:6f:c8:19:6e:45:94:8f:63:73:78:66:87:
f6:a5:bb:0b:c3:54:00:27:c0:be:2e:89:a0:1d:ed:76:1e:4a:
5d:23:14:d7:14:88:0c:33:96:74:97:ae:18:38:0d:46:cf:17:
45:4b:dc:31:d5:05:76:1c:39:00:95:24:10:ff:e0:c0:e9:f6:
f0:f1:6c:38:dc:6c:c4:d1:0a:93:39:94:80:02:b5:00:ed:0d:
59:13:7d:03:a9:e0:c4:d6:34:9d:50:ab:ed:99:f5:63:e0:d3:
dd:62:21:59:fe:4a:a1:0d:ee:86:dd:42:b2:8d:51:d1:b8:de:
58:7a:6a:11:86:f9:7a:23:46:63:58:a8:7f:84:b1:09:49:56:
d0:e7:c2:f2:a1:97:bf:58:fe:84:74:07:84:67:ae:1f:7c:f5:
19:f3:c8:9b:21:df:83:3b:4b:2f:b8:73:6e:30:50:73:24:23:
dd:d4:d8:7f:7f:69:a2:88:bd:91:4c:a5:d7:a5:18:48:3c:56:
e1:ef:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:20 2024 by rpki-client on console-ams.rpki-client.org