Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WcPu0mqT0o6AeHPwgTs9qGZdCDE.roa
File: WcPu0mqT0o6AeHPwgTs9qGZdCDE.roa (raw, json)
Hash identifier: zDrxx3hdqPsbrYkT8+XXcuqN+LxrVtzvewC8dzcLQBI=
Subject key identifier: 59:C3:EE:D2:6A:93:D2:8E:80:78:73:F0:81:3B:3D:A8:66:5D:08:31
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 0194236A5AA208455C55B6613F7A5C1901AC
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WcPu0mqT0o6AeHPwgTs9qGZdCDE.roa
Signing time: Wed 01 Jan 2025 19:49:20 +0000
ROA not before: Wed 01 Jan 2025 19:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 399114
IP address blocks: 193.22.157.0/24 maxlen: 32
193.22.158.0/24 maxlen: 32
Validation: Failed, certificate revoked on Wed 12 Feb 2025 02:08:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:5a:a2:08:45:5c:55:b6:61:3f:7a:5c:19:01:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 19:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59c3eed26a93d28e807873f0813b3da8665d0831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:4f:e6:2a:0f:db:db:63:e3:14:7a:78:d9:
4c:c1:bd:e0:f6:54:b6:fe:a2:f7:aa:29:01:86:a4:
24:1a:8d:4b:85:f4:b6:7a:79:14:c2:41:9c:f7:72:
c6:f3:ac:8b:16:58:31:87:fa:2c:d8:06:9a:5e:4c:
a8:8d:3e:eb:cf:bc:1f:0f:55:29:d2:d4:4a:d9:a2:
45:95:6f:04:c5:24:02:bc:04:2f:f7:f4:25:89:e8:
cd:fe:00:5f:f6:4a:22:49:fd:a4:9c:e1:34:52:1a:
d5:90:ed:c9:39:52:8e:f9:10:57:5c:d5:41:55:a0:
6a:ee:e1:43:72:58:8c:6d:7d:b8:88:5f:ab:3d:e1:
98:99:af:d7:f5:e9:66:6a:da:59:57:7f:75:a8:a3:
53:e5:e6:1f:62:ca:2f:08:04:5f:d7:0e:79:59:16:
00:88:3c:6d:66:4f:42:64:7c:f1:20:94:73:ac:b5:
55:c7:f5:1c:a4:89:d9:ae:cb:91:8a:65:db:81:d9:
9d:ec:86:2c:d3:7e:02:80:2c:51:2c:35:d0:23:d9:
94:29:6e:59:95:1d:78:c2:f8:41:8d:0c:bf:61:1a:
7f:ea:ff:bd:aa:a4:01:c2:6e:9f:5d:fd:a7:62:f9:
cf:21:af:d0:43:19:b9:d3:9d:8d:16:cb:5d:bf:2d:
d7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C3:EE:D2:6A:93:D2:8E:80:78:73:F0:81:3B:3D:A8:66:5D:08:31
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/WcPu0mqT0o6AeHPwgTs9qGZdCDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.157.0-193.22.158.255
Signature Algorithm: sha256WithRSAEncryption
71:80:c9:2a:e6:51:1e:e4:9a:07:e0:7f:fc:82:8f:a8:86:f3:
6b:46:c9:dd:ec:8c:d7:1e:26:43:9e:50:91:a0:be:0c:5d:92:
92:e4:f1:3f:ee:22:da:66:92:66:35:33:56:09:e0:0f:39:05:
6a:3b:55:61:9b:e8:1f:d0:a4:f3:57:99:84:79:5f:af:77:63:
a7:60:38:a6:c4:ea:7b:1c:6a:e8:23:25:50:a3:ff:18:5b:5e:
06:23:3f:42:fd:a5:c6:4b:7d:d9:9a:36:e2:84:74:53:49:2a:
e8:ef:86:28:c5:b1:20:ed:23:9e:87:b6:89:ee:4d:36:6d:4d:
0d:9f:f3:8b:1c:bd:96:ee:3e:6a:98:90:c7:18:5f:6f:54:de:
cf:6b:2d:16:88:9b:d8:4c:c5:59:8c:63:b8:65:de:1e:bf:35:
fd:c1:98:b7:13:8c:95:38:84:6c:61:47:c5:9a:8d:05:5c:ba:
8f:a3:24:53:a5:2f:0f:64:47:3e:0f:15:9b:6b:cf:e7:46:b3:
a2:d3:4e:8f:e2:c1:27:d7:b9:8e:40:09:e5:01:11:72:cc:ee:
48:2e:33:a3:fd:61:2a:55:b9:d8:e7:d2:22:ac:56:98:be:59:
60:22:68:bf:6f:64:45:72:0c:f2:6f:41:50:59:22:12:3d:ff:
d2:2a:f7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:12:32 2025 by rpki-client