Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WgvQEWG6_zOHgGAehptxJkvn-Yc.roa
File: WgvQEWG6_zOHgGAehptxJkvn-Yc.roa (raw, json)
Hash identifier: KwUtDGeHKOhC2hzeTxw9228FZV2yQka2PBrkmnS6v1g=
Subject key identifier: 5A:0B:D0:11:61:BA:FF:33:87:80:60:1E:86:9B:71:26:4B:E7:F9:87
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01926846E25F82DE03A5EB405997E0004CBB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WgvQEWG6_zOHgGAehptxJkvn-Yc.roa
Signing time: Mon 07 Oct 2024 18:38:48 +0000
ROA not before: Mon 07 Oct 2024 18:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0f:3d84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Oct 2024 17:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:68:46:e2:5f:82:de:03:a5:eb:40:59:97:e0:00:4c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 7 18:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a0bd01161baff338780601e869b71264be7f987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6b:f9:0e:39:47:7c:d9:43:96:44:43:2d:9b:
4f:71:d6:20:b7:09:c5:f1:89:18:08:47:4a:93:bc:
1e:93:00:9c:c2:63:14:08:c7:73:d3:71:7f:3e:ce:
c8:39:0d:13:ff:f4:35:d5:8c:2a:c8:85:b3:b0:9e:
da:de:d0:5c:12:81:55:73:65:2c:4f:fc:e5:b6:70:
0e:b1:d4:c4:68:24:f5:f9:f2:e6:54:0b:e3:bb:f2:
13:10:32:35:57:c1:ea:84:94:8e:eb:b0:18:b2:8e:
4e:c1:07:bb:eb:c1:35:01:c7:31:47:9f:9b:2b:20:
1a:18:6e:40:4d:12:9d:2a:08:3f:c2:e7:fb:9d:8c:
d5:97:c0:2c:1b:ec:7a:02:b0:b7:60:b9:df:f0:6c:
37:4f:a2:98:b9:ff:a8:01:aa:d8:2f:e1:cf:99:79:
f8:28:51:41:68:66:2f:2e:ca:ff:1b:f3:a2:7b:73:
87:85:e4:db:b3:22:30:db:a1:e2:59:1b:d9:ff:38:
3a:b2:73:46:4e:e8:ee:84:52:18:91:68:36:61:62:
63:03:8c:b1:3c:34:4f:94:19:5f:1e:92:d9:76:95:
66:20:6a:b6:b7:9f:f3:be:7f:ec:61:f5:dd:51:55:
3d:4b:1f:21:d4:7d:3e:0c:75:0e:fb:09:19:31:9b:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0B:D0:11:61:BA:FF:33:87:80:60:1E:86:9B:71:26:4B:E7:F9:87
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/WgvQEWG6_zOHgGAehptxJkvn-Yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0f:3d84::/32
Signature Algorithm: sha256WithRSAEncryption
48:83:da:87:f9:27:1a:6c:e5:56:37:4e:c0:e2:a3:b6:7d:1c:
78:dc:97:0c:dc:60:60:81:ce:cb:1c:88:53:e4:f1:b6:b3:3d:
66:ee:a8:0f:ab:ab:c4:9a:96:17:82:05:da:5b:09:f5:6f:6d:
aa:4b:e6:60:db:83:cb:ae:aa:2b:3f:4f:61:58:ce:99:76:31:
62:34:1c:23:92:89:b9:c4:55:f5:32:bb:9d:2c:c5:9a:67:43:
cb:d2:85:d7:e4:68:b4:bc:7c:07:87:0f:ac:4b:68:63:fd:44:
8e:df:2e:2c:ec:17:9a:1f:bc:f2:1d:26:10:30:ff:92:d9:ce:
7c:36:6f:6e:69:32:c0:70:ba:30:0a:56:47:f8:ac:f8:6e:1d:
12:21:cc:a2:a5:24:1c:8a:a0:9d:7b:2b:5e:f7:14:c1:4d:5c:
d9:d7:86:da:b4:53:4c:ff:b3:f2:f6:c0:fe:9a:47:b4:ca:a0:
62:68:61:5c:b2:c2:07:84:9f:c3:60:4c:fc:eb:9a:7a:0c:67:
ee:63:a6:e0:c3:57:8c:d1:e9:6a:c1:14:c2:9c:e6:e1:22:25:
c0:ec:2f:87:fb:2e:bc:5c:fc:4e:89:43:f5:ea:18:26:8f:56:
71:32:84:c1:f8:25:f2:e0:2c:d0:0f:fc:8f:0b:4e:81:09:c8:
a5:52:ec:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:44:31 2025 by rpki-client