Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WuqFf-y2pA8W-6LqiN3vN39ISjw.roa
File: WuqFf-y2pA8W-6LqiN3vN39ISjw.roa (raw, json)
Hash identifier: mlm3nC3e2vVfHeZi1vJekMHjVXDTL6hlfGiO7gBqNnc=
Subject key identifier: 5A:EA:85:7F:EC:B6:A4:0F:16:FB:A2:EA:88:DD:EF:37:7F:48:4A:3C
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01936F997C6C43C7958AED37FBF67FE5E9F3
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WuqFf-y2pA8W-6LqiN3vN39ISjw.roa
Signing time: Wed 27 Nov 2024 21:49:09 +0000
ROA not before: Wed 27 Nov 2024 21:49:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56485
IP address blocks: 93.127.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Nov 2024 12:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6f:99:7c:6c:43:c7:95:8a:ed:37:fb:f6:7f:e5:e9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Nov 27 21:49:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aea857fecb6a40f16fba2ea88ddef377f484a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:8a:0f:08:a5:ee:2f:b2:4f:6e:6d:8e:58:
5d:9d:f3:05:ed:db:8e:c7:18:1b:50:75:d8:98:d4:
54:38:6d:00:7d:2a:4d:8a:c0:90:74:74:74:f0:8c:
7b:19:c3:4c:6c:8c:61:a7:32:9c:a4:a1:c1:6e:49:
27:e1:04:20:57:37:e0:08:90:0a:49:10:55:a9:27:
43:fc:f2:62:53:dd:23:77:9f:95:24:83:49:04:81:
dd:61:ef:dd:e8:48:5e:3f:3e:4a:39:01:d5:65:1f:
06:ef:c5:96:79:43:77:39:48:1c:3e:33:ce:6d:f9:
af:cd:2c:27:c7:db:bb:f8:54:59:f3:79:7c:14:45:
93:54:81:82:96:e9:71:61:41:1e:b1:26:b3:4d:16:
0c:e8:a2:45:84:1d:76:2d:2f:34:c5:b6:ec:a9:5a:
a9:4d:8b:4d:d0:59:df:68:0a:9c:9a:56:42:dc:6f:
94:73:c8:8c:94:43:d0:e5:92:6c:29:d3:d0:1f:de:
1a:a3:c1:7a:f8:b6:81:be:cf:4c:90:04:2d:e7:9f:
06:fe:2a:01:50:a7:e0:62:58:02:80:47:b4:c1:1b:
65:b4:ac:00:66:47:f1:6f:62:b0:85:ae:ae:b9:a6:
c0:fe:8f:2f:d2:fe:70:f8:58:36:51:89:67:b6:9b:
fa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EA:85:7F:EC:B6:A4:0F:16:FB:A2:EA:88:DD:EF:37:7F:48:4A:3C
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/WuqFf-y2pA8W-6LqiN3vN39ISjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.175.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:35:8e:2a:c7:c3:a1:fa:17:29:65:40:e4:80:99:65:72:7d:
52:96:c2:d7:72:c6:e5:1d:61:9e:49:31:3b:62:c6:67:0d:75:
36:30:66:12:e1:f7:2a:52:0d:4b:32:23:9c:b7:a6:1c:eb:38:
db:b4:22:9f:df:dd:d7:9a:a7:d9:3b:3d:42:55:7c:e0:06:b8:
c8:b2:7e:d8:e2:ec:54:f4:c8:df:0b:c6:89:45:2d:ad:a8:f5:
53:8b:54:1c:33:4a:2b:99:00:5a:22:e8:15:1a:92:4e:60:86:
b0:e8:b0:0b:03:fe:d9:e0:4e:11:03:ac:04:d9:3f:a2:b5:3c:
e5:a9:0b:5d:51:dd:56:82:89:8b:85:a8:bc:22:15:64:b0:e8:
88:c5:00:d9:95:b4:be:70:d9:5f:c6:b3:7b:5f:75:6d:ed:6d:
8f:12:85:4c:1d:8b:ff:43:73:8b:8c:c2:6a:a3:1c:57:14:f1:
e1:0b:6f:97:0e:67:6a:0a:f6:de:40:b5:10:78:f4:60:a5:ca:
2e:8c:ad:fa:be:79:24:d3:21:3a:11:13:91:7e:32:6a:84:ac:
43:41:d1:6f:b0:81:df:4e:da:0d:6f:10:d0:14:f2:64:5d:5b:
c5:12:72:55:ba:39:1e:09:54:1a:3e:b2:03:d0:52:57:e1:0e:
8c:91:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:18:55 2025 by rpki-client