Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cwiSaxBuZVS7l6cCt2t3OQRVUl4.roa
File: cwiSaxBuZVS7l6cCt2t3OQRVUl4.roa (raw, json)
Hash identifier: 5VszcIhEZiCGwQJnqbb6Y/xvnBrQGB7qnuPYsCPvEkw=
Subject key identifier: 73:08:92:6B:10:6E:65:54:BB:97:A7:02:B7:6B:77:39:04:55:52:5E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0193B02434AA366A5E03A34A8A660B4B3983
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cwiSaxBuZVS7l6cCt2t3OQRVUl4.roa
Signing time: Tue 10 Dec 2024 10:36:22 +0000
ROA not before: Tue 10 Dec 2024 10:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 94.156.118.0/24 maxlen: 24
94.156.120.0/24 maxlen: 24
94.156.121.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Dec 2024 12:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b0:24:34:aa:36:6a:5e:03:a3:4a:8a:66:0b:4b:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 10 10:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7308926b106e6554bb97a702b76b77390455525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:bc:9a:64:55:23:b2:49:17:d8:1a:4b:13:
ac:5c:e8:f6:0e:1d:3b:ae:bd:87:00:5f:ca:f0:ce:
d2:10:d2:f7:c2:8e:30:d0:12:4d:40:cb:d2:6b:6d:
a2:f4:a6:c0:51:13:83:a3:91:ae:39:e7:81:c2:c4:
4e:28:24:13:79:77:f7:1d:12:92:b5:1f:ab:f4:0c:
7c:28:ba:50:03:c1:31:d6:82:fd:cb:70:75:d7:ad:
a8:32:b8:4b:74:f0:c6:bd:be:c5:04:36:a0:14:82:
3b:c7:12:6f:b7:64:35:e7:56:bd:89:c3:f3:2e:66:
37:dc:b0:fb:23:54:5d:cb:32:84:73:d7:5c:63:38:
41:7a:a5:10:ae:e9:8d:80:73:5a:09:b5:10:49:f5:
09:f6:72:82:7f:ff:9e:5c:df:17:3d:fc:3b:c8:f1:
27:ae:23:09:fa:9c:59:be:38:bd:c3:d9:71:57:0e:
f4:65:c6:e0:70:32:5a:1d:a1:d5:43:81:b1:12:cc:
98:98:37:71:27:13:b6:f8:83:0e:c9:b4:c6:26:00:
be:02:30:76:bb:5f:10:0d:2f:f0:6f:ed:45:24:08:
69:6b:b2:75:b3:35:95:2e:35:0f:30:54:e0:72:e4:
99:d1:5c:df:3c:79:17:e6:ba:3e:52:3f:5d:63:1d:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:08:92:6B:10:6E:65:54:BB:97:A7:02:B7:6B:77:39:04:55:52:5E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/cwiSaxBuZVS7l6cCt2t3OQRVUl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.118.0/24
94.156.120.0/23
Signature Algorithm: sha256WithRSAEncryption
79:01:ba:1b:23:21:5d:e7:03:2f:19:8e:9d:dd:04:9e:7c:39:
e9:73:a7:16:b6:54:15:9b:05:0f:60:bd:08:96:bb:16:94:a0:
3b:80:20:cc:e7:0c:13:98:8c:ee:81:91:a2:63:1c:71:38:67:
36:ab:4a:df:ef:f6:92:b5:68:86:1b:38:53:42:b7:93:6c:d9:
dd:31:60:ad:92:25:4e:88:3d:2c:8f:6e:31:f1:0c:b0:fc:3d:
ed:56:ed:f0:bd:ae:4a:5e:a9:20:92:02:34:06:e7:8f:9f:a7:
78:43:93:1d:c4:bf:f8:a1:5b:d9:49:e7:57:fd:78:1a:0c:40:
09:74:9c:0b:cd:21:c5:bd:24:c7:c2:d6:1c:18:77:0c:89:79:
64:69:b9:b6:74:15:67:12:65:3a:3c:3a:87:bb:78:f0:5b:49:
61:67:dd:4a:1c:20:7e:90:37:61:bb:ac:76:51:0f:8e:15:d3:
c8:5b:fc:0f:f3:d6:31:6a:f3:2d:3b:eb:d0:bc:43:f2:3d:a7:
e0:3e:4d:07:34:13:78:7d:d4:e0:ea:59:92:58:e3:c9:73:29:
92:02:2e:9e:7e:d7:4e:09:eb:31:85:0f:74:73:f1:a5:2f:3e:
3b:75:a5:99:46:ad:73:5e:4f:56:59:c3:04:bd:e0:c8:4d:31:
11:bb:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:56 2025 by rpki-client