Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/1-WPwpTGZzJ93rYEBC7FW1IzgvTk.roa
File: 1-WPwpTGZzJ93rYEBC7FW1IzgvTk.roa (raw, json)
Hash identifier: fwcI4FjpDgzoA3g95Wp2FmqtoZBdwzNitbZj+TBBykc=
Subject key identifier: F9:63:F0:A5:31:99:CC:9F:77:AD:81:01:0B:B1:56:D4:8C:E0:BD:39
Certificate issuer: /CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Certificate serial: 018CC64AEE31C46B43E6D7D9028FA7DD6E8D
Authority key identifier: 41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/1-WPwpTGZzJ93rYEBC7FW1IzgvTk.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210336
IP address blocks: 195.242.90.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ee:31:c4:6b:43:e6:d7:d9:02:8f:a7:dd:6e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b8c2f37bd8d7e04e76985a4ced4559d7651c43
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f963f0a53199cc9f77ad81010bb156d48ce0bd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:c5:78:f7:89:b1:38:83:1e:f9:1a:d2:db:
ff:85:83:e7:d1:4d:61:e7:39:50:91:3d:c6:69:f0:
ff:6e:34:02:0b:8a:a6:c3:fe:7f:a7:a7:16:b0:f6:
c9:1b:1c:03:37:bb:a2:95:e3:74:04:61:db:0f:69:
db:27:cc:7b:16:3e:66:20:43:9b:12:0f:6e:cf:27:
55:2c:d9:32:42:7b:04:0b:fb:9d:37:34:35:40:d2:
f6:aa:2b:18:01:00:7a:33:5b:ba:e8:37:6f:bb:62:
6b:4e:12:4a:4d:37:ed:bd:c9:3f:ef:cc:8e:6d:b3:
ef:8d:36:5e:1f:f4:96:29:39:38:6b:36:45:b3:9b:
6a:4e:bf:28:67:9d:61:96:9e:f9:9b:a2:1e:84:d5:
7b:cf:a7:6f:ba:1a:16:df:8d:49:9a:c2:af:7f:eb:
e9:b9:fe:1a:19:2d:8b:ad:b6:be:74:89:1b:06:e6:
98:1b:31:31:80:eb:b0:71:1a:99:aa:09:2c:52:ae:
02:df:49:01:39:06:90:1f:fe:2e:3c:26:dc:45:c2:
4d:aa:bd:a1:1e:84:db:19:0d:04:c2:bb:c7:7d:f9:
22:c4:c9:96:04:4c:c3:e2:06:b5:3d:57:6c:98:bc:
9f:09:a3:c2:c7:df:db:3b:5f:6e:6a:5a:16:74:ee:
58:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:63:F0:A5:31:99:CC:9F:77:AD:81:01:0B:B1:56:D4:8C:E0:BD:39
X509v3 Authority Key Identifier:
keyid:41:B8:C2:F3:7B:D8:D7:E0:4E:76:98:5A:4C:ED:45:59:D7:65:1C:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbjC83vY1-BOdphaTO1FWddlHEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/1-WPwpTGZzJ93rYEBC7FW1IzgvTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3e3b4b-f827-4347-9022-2818f6578d1b/1/QbjC83vY1-BOdphaTO1FWddlHEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.90.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:18:c6:2c:00:73:9c:56:67:b5:6b:c3:96:37:98:b2:27:ae:
2d:1f:4b:1b:cb:72:f7:97:4b:8e:b1:56:8c:df:ee:61:6f:e8:
2e:7f:09:5d:b8:82:2a:29:53:a4:29:ca:c0:b5:0c:42:95:51:
ea:ba:ea:6b:ac:e3:d4:c5:a8:68:68:d7:fc:fc:b1:1f:c4:75:
5d:86:bd:fd:f8:b0:76:4e:fe:50:64:90:ac:46:1d:9e:36:bf:
ff:7b:62:8d:5b:55:28:68:0b:6c:e6:c3:bf:b0:46:05:1f:5d:
eb:68:5f:28:e9:9e:fb:f3:aa:36:b6:9e:5f:ba:4c:b2:0d:64:
19:bb:5b:21:ea:b4:13:84:6c:b6:bf:82:5a:e4:aa:5c:41:72:
cd:72:3c:a7:6e:12:08:df:eb:37:7a:50:6f:44:51:cb:32:e1:
d1:30:d1:a2:12:cd:1d:0b:5d:e9:fe:ea:be:8b:4a:b6:d5:1b:
a9:77:0c:17:50:46:40:cf:0b:01:d0:d5:ed:f4:cf:0d:97:57:
8d:31:76:d6:06:f4:31:da:22:c9:94:ef:8d:98:74:ef:58:00:
1f:bd:94:4d:8f:46:d7:aa:3b:50:7e:e5:f7:a1:fd:cf:57:e7:
2a:fe:a1:db:5c:68:24:eb:ed:15:be:b2:4c:19:c4:a7:88:1a:
f8:76:a5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:28 2025 by rpki-client