Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/WsL-cRPIw4XwHVbIy08u5yCMKdk.roa
File: WsL-cRPIw4XwHVbIy08u5yCMKdk.roa (raw, json)
Hash identifier: Q0T78rJLu8VcH/0uzO4aWBhLXPnlRnIiPkwjFtL6RkE=
Subject key identifier: 5A:C2:FE:71:13:C8:C3:85:F0:1D:56:C8:CB:4F:2E:E7:20:8C:29:D9
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 018CC94AD97B2EE0BEE8015D564F61BCFACD
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/WsL-cRPIw4XwHVbIy08u5yCMKdk.roa
Signing time: Tue 02 Jan 2024 08:29:34 +0000
ROA not before: Tue 02 Jan 2024 08:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216014
IP address blocks: 77.247.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 15:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4a:d9:7b:2e:e0:be:e8:01:5d:56:4f:61:bc:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Jan 2 08:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ac2fe7113c8c385f01d56c8cb4f2ee7208c29d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:28:e5:30:56:51:36:07:fb:e2:ca:71:16:
12:d6:d8:05:4f:bf:b8:e1:7e:fa:58:f3:55:c2:86:
e4:0b:23:7c:d3:8c:31:57:63:6d:4b:dc:77:97:3c:
b0:2b:cb:93:67:db:08:5b:88:09:d0:e9:01:46:1b:
f8:4f:a6:8f:5f:a4:75:4e:5a:0e:33:42:43:16:ee:
b5:45:40:18:a9:a1:6b:20:19:ff:d6:11:4d:ae:ea:
ac:3d:a4:48:e8:58:e3:a2:eb:a8:30:e6:8a:fe:99:
81:bd:a2:06:84:52:6e:c3:ae:a3:76:6c:89:5a:f0:
90:1c:cd:13:8b:d5:ec:52:d7:b5:15:25:3b:d1:ae:
3e:f4:30:f2:29:fb:55:bf:bd:79:69:00:bc:a9:52:
53:72:89:e8:3d:f6:12:e7:51:90:0b:f9:6f:2e:36:
61:bb:79:16:e0:fe:2a:43:49:18:ad:25:51:cb:ae:
66:36:76:0c:82:2d:b4:02:56:b1:b1:62:7e:8e:d3:
6f:87:19:60:8d:0e:06:1f:e5:86:3b:94:18:59:c1:
90:fa:11:54:f0:fc:ed:24:63:0a:5f:38:c9:58:3b:
cc:a7:58:7c:42:63:5e:af:a0:a2:73:2f:05:e7:70:
21:fc:4e:51:ae:d9:e6:9c:90:26:64:a2:fb:84:ab:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C2:FE:71:13:C8:C3:85:F0:1D:56:C8:CB:4F:2E:E7:20:8C:29:D9
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/WsL-cRPIw4XwHVbIy08u5yCMKdk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8a:f1:14:d5:9a:67:3f:74:b1:76:09:74:e8:9b:f6:b7:b6:
85:ea:31:03:0d:cb:a2:ed:d4:68:13:9e:54:bd:f7:e9:f5:64:
71:02:21:6a:81:64:f1:24:25:f4:2c:3d:59:f3:44:97:bb:6e:
d4:45:fa:5f:f3:ee:e4:a7:9b:d4:3f:5c:79:93:aa:a2:d4:0d:
dd:4a:f8:1d:2a:83:c9:46:14:c3:58:f7:b3:e1:67:ab:52:2e:
1b:ef:13:cc:77:46:b3:69:21:fb:d1:e1:fd:f4:c3:8f:bb:5a:
c1:5e:d3:5b:92:42:2e:9b:76:d9:01:87:aa:ef:47:c7:1a:ed:
9e:22:e4:cb:1e:16:45:b4:25:3d:ae:85:6f:ed:71:6a:5b:3f:
7a:88:a0:96:f1:d7:6a:f8:25:cc:45:54:10:e4:6a:8d:8f:05:
33:b8:0f:36:61:85:38:e5:57:69:83:d6:90:30:e9:5a:fd:1e:
0b:75:89:e3:65:b2:32:ad:d3:31:29:90:a2:f2:20:63:18:43:
d2:32:3f:f4:82:cf:0d:f9:ba:4f:f8:8c:61:dd:e6:fe:72:d3:
0f:33:0e:18:fd:dc:58:0a:0e:d9:ad:77:92:36:f0:03:66:04:
1d:2f:d0:3f:ac:fa:f7:38:81:76:a4:ea:be:87:55:2e:69:3a:
90:60:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:39 2024 by rpki-client on console-fra.rpki-client.org