Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/cWCWJ_6NkjRVhkjxvS1Q7ua8mxs.roa
File: cWCWJ_6NkjRVhkjxvS1Q7ua8mxs.roa (raw, json)
Hash identifier: uhhbyqUilx8ko5cCKuTrU1VMN2JJ82KWYLkNNB4pS5E=
Subject key identifier: 71:60:96:27:FE:8D:92:34:55:86:48:F1:BD:2D:50:EE:E6:BC:9B:1B
Certificate issuer: /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial: 018CC500D37B9B3401C6A26DE2CD61E1BCF8
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/cWCWJ_6NkjRVhkjxvS1Q7ua8mxs.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25117
IP address blocks: 193.57.120.0/23 maxlen: 24
193.57.124.0/23 maxlen: 24
193.56.244.0/23 maxlen: 24
193.56.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d3:7b:9b:34:01:c6:a2:6d:e2:cd:61:e1:bc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71609627fe8d9234558648f1bd2d50eee6bc9b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e1:c5:00:d2:24:8c:a4:d8:e0:e2:6a:32:c5:
f8:ea:82:f5:f2:c4:f0:3a:13:39:04:f9:5f:03:00:
37:74:ff:68:ae:c1:ae:ed:11:6d:6c:7a:5a:5f:20:
58:31:39:52:f5:a1:5d:d7:89:12:62:34:72:b9:2a:
3d:98:de:1e:39:1a:45:f8:a7:95:b0:fa:f4:1f:e2:
a3:13:a2:49:fa:20:9a:2a:6a:37:ed:6a:ba:dd:bb:
97:af:3c:b3:fc:69:2b:0c:95:05:f2:02:a9:8a:a9:
38:1d:19:a4:25:96:21:5d:68:95:ab:ad:0d:37:a9:
a3:c6:e2:47:ba:cd:bb:5d:c7:11:da:6e:66:f5:ae:
4b:29:8a:94:3e:03:54:de:54:eb:62:7e:11:a8:57:
8a:43:26:03:d1:33:09:05:e4:db:b2:36:2f:c2:9f:
81:7b:d5:41:30:48:94:48:f0:8c:6e:61:38:7b:9e:
35:8b:a4:41:f0:a2:4f:6d:25:d0:0d:61:c2:ea:32:
15:1f:fc:d2:93:f3:db:27:e8:5f:ee:1b:9c:78:18:
ff:08:f7:dd:81:1b:58:0a:77:99:89:47:29:56:68:
8e:3a:38:4b:60:7e:c6:70:3e:63:7e:21:a6:ac:4d:
1c:ec:54:bf:36:de:57:07:78:ac:76:77:2b:f5:3e:
40:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:96:27:FE:8D:92:34:55:86:48:F1:BD:2D:50:EE:E6:BC:9B:1B
X509v3 Authority Key Identifier:
keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/cWCWJ_6NkjRVhkjxvS1Q7ua8mxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.242.0-193.56.245.255
193.57.120.0/23
193.57.124.0/23
Signature Algorithm: sha256WithRSAEncryption
90:7e:83:2e:b4:48:af:f5:e6:24:60:74:30:55:11:72:b4:cd:
0c:0a:e3:fc:78:0c:0a:d2:29:d8:59:5c:2e:22:03:c5:7b:4b:
c2:6c:3f:dc:58:7a:bc:9b:ab:27:57:0b:43:47:51:9f:59:1b:
29:43:e1:f6:64:fc:33:34:cb:ce:23:68:13:5b:03:96:c0:fa:
22:0e:2f:54:0b:58:45:96:b7:95:d3:82:90:34:b7:82:af:10:
07:6f:14:91:b9:92:c1:5a:8f:2c:03:c3:15:da:b2:e1:0c:17:
cf:67:43:19:90:37:36:4a:ba:06:d4:ab:52:82:0d:91:73:30:
1b:5b:1d:14:bf:ac:4f:b8:29:08:11:52:ed:af:b7:64:a9:b1:
87:cd:5a:c9:89:e8:68:80:f4:4e:29:39:6d:04:53:30:36:b8:
c1:9b:90:38:9f:89:b8:89:b6:fe:ad:c7:e8:d3:4e:78:a1:1a:
e0:9a:f1:98:05:28:80:a1:b1:4c:65:17:6c:95:df:cf:4f:61:
e6:0d:60:c0:57:54:30:96:4d:77:cf:ba:f7:4c:a0:40:f9:17:
cd:fe:ed:54:2f:01:cb:ae:e8:bc:83:bc:13:89:64:a5:6e:0d:
28:ce:68:94:88:36:50:6b:fa:68:07:ec:2a:98:70:34:dd:8a:
7b:d4:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:52 2025 by rpki-client