Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/wxXcaIeuBI80gIXozC86XSG_VkE.roa
File: wxXcaIeuBI80gIXozC86XSG_VkE.roa (raw, json)
Hash identifier: bhItxIByHjSH5jK3R+x4Lp//XLES5PBfMMwV7r+YoYo=
Subject key identifier: C3:15:DC:68:87:AE:04:8F:34:80:85:E8:CC:2F:3A:5D:21:BF:56:41
Certificate issuer: /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial: 01920496A93C975A78FFF7633C278F24B562
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/wxXcaIeuBI80gIXozC86XSG_VkE.roa
Signing time: Wed 18 Sep 2024 10:03:55 +0000
ROA not before: Wed 18 Sep 2024 10:03:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44684
IP address blocks: 185.33.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:96:a9:3c:97:5a:78:ff:f7:63:3c:27:8f:24:b5:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Validity
Not Before: Sep 18 10:03:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c315dc6887ae048f348085e8cc2f3a5d21bf5641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:a3:f5:f9:a6:31:ce:95:c5:ce:8c:8b:02:
48:e0:12:8d:6f:5d:d8:5f:3f:cf:5f:b1:a2:4e:e1:
c7:a3:3f:50:eb:b7:3d:8b:5e:aa:de:3e:ef:7d:ab:
4b:bc:39:bc:26:c9:fd:51:dd:82:91:cb:12:7e:20:
4a:27:05:c8:8f:58:e0:b2:19:24:bc:bb:ae:52:bf:
bf:57:d0:fd:85:d0:85:00:7f:1e:80:e4:f6:2f:28:
95:4a:d3:59:87:f4:b3:06:48:a6:40:95:a0:c4:f4:
cf:79:4e:9f:9d:15:42:22:5a:b5:9e:cc:0a:b2:83:
a7:dc:89:5b:75:06:d8:44:95:2a:b6:99:f1:d9:bf:
a6:f8:59:52:bb:6a:88:f7:41:e6:37:b5:73:8d:15:
57:6a:86:4b:9b:0c:0a:dc:a8:1d:d6:16:d7:db:f2:
56:2d:e8:c5:a0:bc:a7:8d:03:68:90:9f:c3:ff:03:
d3:10:ff:f1:3d:b9:ba:cc:d2:51:53:d6:87:78:c0:
74:48:c8:5a:15:e8:e9:11:6f:49:65:0a:ca:17:48:
2d:70:2d:91:b9:63:33:45:ca:31:8b:f6:d9:56:59:
0f:d8:69:35:c5:1b:2d:7b:f2:c5:cc:b9:d8:00:d5:
28:0e:99:bc:68:3a:a2:bd:82:fc:2f:16:a1:42:e1:
40:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:15:DC:68:87:AE:04:8F:34:80:85:E8:CC:2F:3A:5D:21:BF:56:41
X509v3 Authority Key Identifier:
keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/wxXcaIeuBI80gIXozC86XSG_VkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.33.27.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:93:b3:f7:6f:3e:36:e9:f4:c7:b7:c5:db:57:3f:ec:6d:c1:
2a:19:9b:1e:78:b9:98:65:77:d2:7c:ad:4e:e8:55:31:2e:8c:
66:02:b3:dc:5f:14:3f:c3:db:63:5e:47:62:b9:68:65:71:40:
9f:96:fd:09:34:dd:f8:99:0c:a9:8f:a6:ab:ea:eb:da:97:fc:
26:a7:96:14:58:26:54:db:30:ce:5e:ea:e8:7b:3d:63:da:3a:
bd:53:65:aa:88:63:cf:af:ec:a9:52:7a:f4:d4:42:e1:5b:e6:
e3:60:66:55:04:bc:34:77:84:0d:b1:3d:9d:35:bf:73:49:77:
75:6f:c8:b8:f9:66:7a:a7:f5:82:28:22:7a:05:3f:e3:05:ca:
d9:85:75:92:1a:f5:ca:ef:97:cc:c3:ce:7e:23:1b:ce:45:97:
0e:ce:30:08:f5:09:c6:de:aa:74:0f:8f:3c:cb:5e:1d:ae:35:
f2:17:8d:c9:ff:7d:17:0a:38:71:8a:29:d7:43:36:61:36:e6:
89:9c:f9:df:6f:a4:8f:e8:55:06:f6:c7:1a:26:f4:be:47:ec:
8b:ca:d3:0c:7b:9e:35:e6:21:58:f7:39:c7:ed:5a:7e:7b:2b:
5f:9f:a9:ab:62:ef:87:37:4b:b9:8f:38:e7:8e:6c:fc:1a:0f:
65:59:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:20 2025 by rpki-client