Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/cwDto22naMWHp5DmshggcLftFIY.roa
File: cwDto22naMWHp5DmshggcLftFIY.roa (raw, json)
Hash identifier: 3TUr7fk/O+jVbMceErvxAWklv2FQ1LqIcHmfh3niY3Y=
Subject key identifier: 73:00:ED:A3:6D:A7:68:C5:87:A7:90:E6:B2:18:20:70:B7:ED:14:86
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018DF37CA54330967D929A8DC5437278C7D0
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/cwDto22naMWHp5DmshggcLftFIY.roa
Signing time: Thu 29 Feb 2024 06:10:48 +0000
ROA not before: Thu 29 Feb 2024 06:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 193.43.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Mar 2024 08:37:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:7c:a5:43:30:96:7d:92:9a:8d:c5:43:72:78:c7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Feb 29 06:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7300eda36da768c587a790e6b2182070b7ed1486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:4d:8c:0a:17:42:8e:2e:d8:46:1a:21:2d:
30:ac:2c:e8:8e:28:a3:1b:a5:32:a0:55:0d:c0:6a:
58:79:30:df:d7:4b:75:dc:cd:26:b4:c4:0b:36:4c:
bb:1c:3d:2e:ec:1d:5b:fa:67:dc:c4:28:9a:6d:e0:
aa:e8:06:29:cf:b4:44:8a:59:3e:37:1c:2b:5d:a1:
91:93:14:69:5f:e0:a4:2c:1e:19:09:73:fd:67:cf:
b5:76:db:9d:0a:6c:94:bf:a7:2a:32:58:cc:3e:71:
6d:c2:af:d9:92:48:da:cf:f8:e5:7c:0a:7b:65:37:
1e:94:19:67:d4:11:92:88:81:1c:aa:56:87:d5:4a:
33:d8:a5:a5:bd:7f:fb:a0:38:7d:ba:53:a1:db:6c:
ea:0b:34:d7:0e:12:a2:b8:22:ef:ca:79:26:70:c3:
4a:07:2d:19:3f:d1:c5:66:23:cd:f6:42:e8:4f:a7:
85:d5:b7:67:07:28:c8:34:cd:3b:fc:d5:df:ab:d3:
bb:1e:e7:97:ba:00:6d:09:86:97:71:8d:76:9e:4f:
cc:68:3d:06:ad:fd:b9:86:ae:53:27:65:31:ac:57:
a4:01:72:c5:3a:c7:24:0a:45:7f:9e:2f:ad:b7:b3:
6a:02:70:26:28:d4:21:d6:6f:88:dc:5e:6e:73:ef:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:ED:A3:6D:A7:68:C5:87:A7:90:E6:B2:18:20:70:B7:ED:14:86
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/cwDto22naMWHp5DmshggcLftFIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:eb:5e:03:a6:cc:8b:be:d5:b9:8d:60:27:b5:9f:26:0a:0f:
7f:cc:51:fb:5c:82:c3:39:fb:ea:90:73:8e:4b:4d:92:38:7e:
df:36:66:d2:80:71:1c:f7:54:38:6e:ef:c1:99:ca:70:5a:3b:
8c:18:1c:b8:3a:87:3c:7b:a1:59:8c:58:2b:cc:8d:81:a1:5a:
83:34:6c:03:3f:b1:1b:5b:c2:8e:f9:94:7a:6d:0a:c0:03:8f:
4d:57:00:ad:46:2a:5a:61:2c:10:26:82:8d:dd:60:2f:15:d0:
8f:c0:5c:45:ea:38:87:0d:4d:cc:73:bd:f7:39:07:18:b1:e0:
9f:d8:23:1b:6e:c9:b3:78:f3:75:90:13:21:a3:32:6c:42:cb:
0d:b5:4a:ee:0c:d7:e9:58:8a:f5:2f:c2:1b:ac:c9:46:cd:26:
c9:ca:8a:78:b5:0b:e3:27:d8:0e:d7:7b:3c:e4:77:ed:31:7b:
d1:33:48:1b:21:c3:bf:64:74:09:80:af:27:bd:6f:09:71:7b:
3b:76:d9:fc:89:f6:47:5c:a5:40:6a:9b:f5:b8:0f:03:bb:db:
94:5b:e6:a7:5e:31:2f:59:04:b0:9a:e1:23:4d:3a:e5:29:eb:
52:c4:46:1a:96:36:81:b2:56:f8:37:a3:93:7c:bb:df:bb:36:
09:53:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:38 2025 by rpki-client