Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wwpSCkvc-_EO2bz7oVKAYjfrjWs.roa
File: wwpSCkvc-_EO2bz7oVKAYjfrjWs.roa (raw, json)
Hash identifier: VBH6MkSFy7G3asAN0gIUanCe8+mjKLhYkosDaa/Lvh8=
Subject key identifier: C3:0A:52:0A:4B:DC:FB:F1:0E:D9:BC:FB:A1:52:80:62:37:EB:8D:6B
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01942220097CB171C45DE341C052755766C1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wwpSCkvc-_EO2bz7oVKAYjfrjWs.roa
Signing time: Wed 01 Jan 2025 13:48:32 +0000
ROA not before: Wed 01 Jan 2025 13:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 14.102.232.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
94.229.210.0/24 maxlen: 24
94.229.212.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Jan 2025 17:29:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:09:7c:b1:71:c4:5d:e3:41:c0:52:75:57:66:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jan 1 13:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c30a520a4bdcfbf10ed9bcfba152806237eb8d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:d6:d3:e4:81:74:27:9f:82:d8:89:86:06:
fd:b7:f8:c6:e3:4d:5b:96:e7:9f:19:e9:c3:f4:a8:
74:d3:12:16:a4:41:ae:3a:b9:a0:c3:d6:90:2a:8b:
42:a4:0b:38:b0:00:69:71:b5:6b:43:11:09:10:e1:
61:14:3f:57:db:b3:42:5f:25:da:3d:3a:c2:ec:88:
87:28:c7:5a:02:f9:4d:d6:d4:80:f9:2f:b2:f0:59:
dc:c9:03:e8:11:54:9e:5f:2f:40:ae:f4:7d:28:51:
7e:3f:72:ae:71:a9:0c:6c:8f:ab:27:2c:8c:d1:11:
df:08:0b:1c:81:30:83:e5:4a:3d:67:bd:ec:d0:23:
c4:af:7e:a0:81:f6:4d:50:95:25:02:cb:c8:de:e9:
a8:f6:f5:be:e8:2a:c6:90:50:45:ef:a9:3e:51:4c:
bb:e6:a4:6c:f7:44:0d:d2:11:cc:f6:44:ad:51:05:
b0:70:e1:82:c7:4e:50:91:1c:de:18:ae:6c:33:5f:
53:ee:4c:90:cc:c8:00:b5:f6:03:5f:ea:8e:9e:e1:
3c:3a:8f:b7:12:34:15:35:a3:9d:3e:c9:40:e3:b7:
2d:91:33:85:b5:12:8a:4b:59:6d:0f:be:f8:78:c1:
33:09:55:de:96:45:e8:20:90:b8:9d:f7:c5:1c:09:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0A:52:0A:4B:DC:FB:F1:0E:D9:BC:FB:A1:52:80:62:37:EB:8D:6B
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/wwpSCkvc-_EO2bz7oVKAYjfrjWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.232.0/24
77.111.96.0/22
94.229.210.0/24
94.229.212.0/24
94.229.223.0/24
Signature Algorithm: sha256WithRSAEncryption
41:de:a2:af:90:65:b5:3f:69:b2:b3:19:db:61:72:69:74:64:
eb:1c:06:b4:f8:e7:2c:92:4c:b5:4f:bd:4f:2b:c7:2a:7f:32:
3c:2e:0e:97:63:f9:29:f8:1f:5d:9b:d4:4e:93:68:f9:9a:ee:
ac:7a:38:9f:f4:e1:46:aa:92:03:0a:9c:65:22:9f:fb:6c:fb:
4c:24:2c:d2:af:cd:8f:68:dc:de:d9:89:70:dd:42:f0:5d:10:
a7:05:79:06:a0:f3:e1:85:18:98:2e:7d:ec:5b:29:c6:e5:42:
8a:8f:94:5c:6f:3f:4c:ea:b9:d7:a6:2f:f0:0e:86:e4:ec:ac:
e7:e7:12:56:21:74:4f:7a:46:2e:94:4c:a8:9b:91:22:b9:48:
82:9e:ff:ef:69:8e:61:8c:23:c4:40:4b:dc:cf:27:09:96:9c:
1f:a8:a0:81:a3:33:a4:5f:a4:72:69:e5:56:cd:7f:c2:7c:5b:
f5:ad:f9:dc:23:60:ba:77:50:5e:54:f3:65:97:28:70:64:3e:
6d:2d:cb:7f:15:be:fc:36:23:e6:92:ca:9b:f3:e9:e9:18:e8:
fc:5c:32:17:48:3a:54:46:db:f0:a4:25:96:8b:54:54:66:5a:
ba:54:2e:2c:ea:dc:41:38:cf:a1:30:59:fc:0f:fc:5f:33:b8:
7a:dd:90:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:25 2025 by rpki-client