Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wtr9kQKvFXFt5dqM6vlw28Yosfw.roa
File: wtr9kQKvFXFt5dqM6vlw28Yosfw.roa (raw, json)
Hash identifier: Fjs5H23UjX64nsofDfvEc8k6NhOB2pV+PpP4yu3P4No=
Subject key identifier: C2:DA:FD:91:02:AF:15:71:6D:E5:DA:8C:EA:F9:70:DB:C6:28:B1:FC
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 018CC5DD1173E7EC9EE48944CD8957625C0E
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wtr9kQKvFXFt5dqM6vlw28Yosfw.roa
Signing time: Mon 01 Jan 2024 16:30:48 +0000
ROA not before: Mon 01 Jan 2024 16:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 193.36.163.0/24 maxlen: 24
193.36.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 14:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:11:73:e7:ec:9e:e4:89:44:cd:89:57:62:5c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Jan 1 16:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2dafd9102af15716de5da8ceaf970dbc628b1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:16:8c:20:3c:5a:15:a4:e5:92:e4:f7:4b:0a:
a8:79:f0:50:03:24:dd:95:56:83:7d:6a:20:8a:45:
af:76:4e:ca:a6:6b:d2:42:1a:00:ba:7f:e6:76:1a:
bf:e9:dd:ef:5e:f0:94:95:b9:9a:7f:35:e6:65:dd:
3e:a3:20:9d:a9:55:05:22:85:03:c6:c7:aa:d8:0f:
fd:11:e2:35:f8:00:a8:d8:94:40:01:31:fd:2e:d1:
c6:06:a7:dd:0f:d9:e8:99:84:60:58:4e:a8:dc:f6:
1e:04:45:f2:ae:07:9f:7d:92:cf:22:f7:f4:a1:55:
b9:d0:43:d2:61:1f:b4:cf:fc:71:9f:b3:21:67:ff:
76:28:f1:bd:78:74:25:7e:d2:fd:f2:00:df:43:71:
0e:a7:99:9c:08:e5:7f:5e:c4:62:8c:61:37:5c:66:
f0:a3:69:60:ad:8a:1f:09:64:bc:5e:1d:58:1e:2a:
5e:b2:b0:ff:e0:0e:1e:00:01:4e:69:b1:13:76:51:
0c:35:0d:84:29:ee:e8:31:f3:bb:ac:a8:4f:56:35:
e9:6b:3b:1e:bf:5b:2d:a3:37:5c:64:f3:38:6c:39:
38:7c:51:d7:7e:78:a2:74:cb:3a:63:c8:70:cd:4b:
ba:ae:7c:a8:f8:70:7b:a5:f3:cc:63:b8:a4:66:79:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DA:FD:91:02:AF:15:71:6D:E5:DA:8C:EA:F9:70:DB:C6:28:B1:FC
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/wtr9kQKvFXFt5dqM6vlw28Yosfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.162.0/23
Signature Algorithm: sha256WithRSAEncryption
47:94:3b:c8:bb:ce:dc:bf:9a:b4:9a:ca:af:70:23:6f:db:a2:
3e:6b:a8:4f:88:31:e2:7e:7a:d2:b6:36:a9:0c:aa:11:e6:f9:
a2:d0:c1:36:f3:2a:dc:a9:78:4c:a2:f7:05:ba:6f:1c:31:da:
ca:29:12:4d:e8:ec:69:08:aa:92:53:8c:0c:75:6b:90:59:d1:
1e:25:cc:d5:23:40:a5:ad:1c:8e:5a:26:4b:3d:5b:a5:9b:30:
e0:88:71:22:a2:f7:51:93:eb:d8:80:7f:bd:b4:8a:2d:38:d5:
50:96:0e:b4:87:2d:75:b6:26:99:23:83:dc:8c:77:1b:42:72:
13:55:2b:62:73:27:03:1a:ab:1f:98:5f:e1:7d:6c:68:6a:2a:
c8:9b:3b:81:a6:46:2b:41:2c:85:92:43:ec:78:89:95:ad:61:
88:d7:1a:86:7a:21:a9:8e:80:e3:07:a6:24:82:5b:e8:19:5e:
60:5f:c3:0f:87:25:63:ca:2b:c1:f9:17:45:3b:b0:90:bf:d9:
93:50:a5:bb:be:24:db:f4:46:2d:dd:e5:e3:e3:dc:ee:d1:a4:
80:58:87:e8:f9:89:a5:c4:57:22:d0:af:13:03:69:9d:09:07:
d4:17:39:51:4b:f5:19:ce:77:89:1d:31:46:b0:0c:e4:aa:d6:
4f:6c:4a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:39:35 2025 by rpki-client