Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/wcSG7MLniAM0nMCEX0-BDBsUCBs.roa
File: wcSG7MLniAM0nMCEX0-BDBsUCBs.roa (raw, json)
Hash identifier: Fw2KxOoSNmIqLENuaQ3IrDvhQQQQVOs8XT2xUaO/XIs=
Subject key identifier: C1:C4:86:EC:C2:E7:88:03:34:9C:C0:84:5F:4F:81:0C:1B:14:08:1B
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018CC6B7997C178D7307FC9A0CD08269724F
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/wcSG7MLniAM0nMCEX0-BDBsUCBs.roa
Signing time: Mon 01 Jan 2024 20:29:30 +0000
ROA not before: Mon 01 Jan 2024 20:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205906
IP address blocks: 78.109.225.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 07 Jan 2024 06:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:99:7c:17:8d:73:07:fc:9a:0c:d0:82:69:72:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 1 20:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1c486ecc2e78803349cc0845f4f810c1b14081b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:19:d1:33:23:e6:ff:b4:e0:75:84:b7:95:88:
ba:6b:3a:e6:08:86:17:28:7e:8b:1f:9b:b1:07:ce:
02:e0:02:75:8f:fc:24:9a:9e:31:7f:3e:a8:7d:c0:
0f:55:69:a5:ce:c9:b3:bf:9a:a6:17:8c:fd:5d:a8:
11:0d:d9:a6:78:6a:ae:34:38:70:74:b0:b9:c9:05:
a1:14:a4:62:a0:09:e4:b4:3e:11:73:bf:2f:d4:f7:
0e:fc:70:fa:29:7a:b6:2e:fe:3b:ba:04:9e:47:4d:
e9:e4:72:c0:2e:87:d9:fb:74:7e:d2:6d:ed:e9:2e:
52:75:cb:e6:eb:c2:71:7a:9b:32:34:dc:8c:f2:7f:
8b:0e:2f:b0:ce:f2:f8:44:3d:ea:7e:0a:d8:e6:46:
1c:ce:ed:23:60:9e:67:0f:68:5e:b3:b8:e7:ec:49:
73:b4:ca:1f:55:63:15:18:9f:73:2f:54:77:bd:a3:
a3:f0:cb:9b:46:23:c2:4f:a5:3f:d9:be:01:b0:aa:
3e:99:dc:ef:30:82:c7:3d:a8:34:30:b3:73:6e:0f:
9e:5a:bc:1a:cb:69:d7:94:94:04:29:b0:ae:a6:49:
52:05:16:ae:b3:f7:d1:35:8b:b1:4e:ee:e6:2c:aa:
bd:d4:5e:d9:3b:92:ae:92:39:c7:cd:87:69:9c:bd:
55:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C4:86:EC:C2:E7:88:03:34:9C:C0:84:5F:4F:81:0C:1B:14:08:1B
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/wcSG7MLniAM0nMCEX0-BDBsUCBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.225.0/24
Signature Algorithm: sha256WithRSAEncryption
67:99:eb:83:86:55:b2:6e:7e:59:e3:8a:75:c0:4a:c5:6e:13:
0b:38:93:6d:dd:b6:1d:84:29:75:d0:c1:42:fb:88:a6:0c:0f:
f7:f1:92:4a:5f:10:19:ab:16:d7:94:6f:0a:28:13:96:77:a5:
18:10:3c:16:f5:95:20:66:9d:63:85:b6:2e:13:a3:a1:5d:5e:
2d:be:d9:64:e8:a0:90:18:c0:eb:af:d7:fc:94:67:eb:de:e0:
0c:5d:04:d9:67:08:e9:4c:84:4a:08:1c:33:5b:a8:d3:a4:78:
ac:de:a6:c6:6e:11:e0:11:18:ac:cd:6e:da:0d:3e:99:f8:bf:
0b:90:0d:22:09:c6:b6:d8:82:2b:75:82:c1:7c:ef:1d:68:03:
fd:79:c8:52:5d:d5:de:2d:6b:87:17:5d:f2:8c:3d:0f:42:3d:
ee:ce:78:97:a4:2b:c2:62:c9:ff:44:7c:bd:83:5f:a0:dc:b2:
6e:fa:5f:a4:c7:01:0e:07:41:7b:94:e3:6b:45:14:0c:54:05:
0e:e6:26:23:9b:00:7a:7e:f6:e2:06:41:18:6f:89:4c:aa:79:
dc:85:f0:c1:63:9b:2a:1a:d8:37:24:b5:18:f6:39:2b:a6:ef:
ba:f7:5a:11:d2:65:d7:24:61:e6:ec:71:97:e5:b1:03:4c:b0:
35:c6:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:52 2025 by rpki-client