Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/WJBj1Ngqf7-owkaPzEdr7794DWw.roa
File: WJBj1Ngqf7-owkaPzEdr7794DWw.roa (raw, json)
Hash identifier: sClbIW0UJWZo7FuGDE3M/hsBKV0OGwfxxsdopDJNKx4=
Subject key identifier: 58:90:63:D4:D8:2A:7F:BF:A8:C2:46:8F:CC:47:6B:EF:BF:78:0D:6C
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 01937697581365FB575C4B20DE2FF62EE1B9
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/WJBj1Ngqf7-owkaPzEdr7794DWw.roa
Signing time: Fri 29 Nov 2024 06:24:10 +0000
ROA not before: Fri 29 Nov 2024 06:24:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 140.150.8.0/24 maxlen: 24
140.150.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:49:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:76:97:58:13:65:fb:57:5c:4b:20:de:2f:f6:2e:e1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 29 06:24:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=589063d4d82a7fbfa8c2468fcc476befbf780d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9b:a2:ac:e0:a6:0a:a4:68:de:6b:76:17:36:
bb:40:72:9c:03:52:25:f9:cc:c2:b7:84:6b:9d:01:
d4:b0:3c:12:9f:bf:23:1c:d7:30:76:00:00:7b:6e:
73:3b:03:eb:44:26:19:9b:c4:3b:ce:14:37:8a:e4:
57:f6:7f:d1:7b:59:8c:8c:f1:a9:34:f6:35:4d:89:
c0:4b:0e:03:1a:25:ee:20:b3:ba:a5:a6:b6:f6:60:
88:a5:48:98:7e:28:04:a9:f0:aa:9e:bb:62:c5:71:
d2:08:55:e6:e8:8f:85:57:31:4e:6c:88:9b:71:6e:
57:99:e0:87:38:60:36:3a:4a:2d:9e:b5:30:f5:66:
a8:4f:df:55:a0:a7:3f:7a:ee:af:6d:2b:3a:70:c7:
8f:c2:64:46:10:4f:2f:87:ff:27:48:84:88:0e:db:
7d:6b:ae:b2:59:ad:69:f2:34:37:eb:72:f3:14:d6:
64:5b:e0:b1:fa:c6:e5:0d:83:6f:de:86:14:82:39:
4f:b8:76:b7:90:22:6f:9a:f7:17:0a:a2:b2:df:87:
ea:c8:02:af:4f:ce:ae:20:ec:4f:bb:58:48:1e:6c:
b7:9b:10:ef:34:ed:f4:11:0d:49:a9:e0:cd:ca:db:
32:12:4f:6c:d0:8b:d5:ca:93:5f:df:4b:69:ad:05:
ec:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:90:63:D4:D8:2A:7F:BF:A8:C2:46:8F:CC:47:6B:EF:BF:78:0D:6C
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/WJBj1Ngqf7-owkaPzEdr7794DWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.8.0/24
140.150.13.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5d:1a:9d:7a:07:21:08:db:c2:32:9a:b2:60:03:d0:53:55:
27:e2:12:2e:a7:89:85:d3:50:8c:13:eb:2b:13:b6:10:53:80:
4d:91:77:6f:e9:de:6f:73:09:76:f2:00:4c:dc:0f:45:12:96:
b3:f8:79:36:8a:09:69:33:43:ed:bf:9b:d0:81:0f:64:29:16:
41:d1:85:f2:e1:bf:a9:7e:0e:bc:18:a7:90:0a:93:41:7c:00:
a7:44:ba:6d:f0:ac:bd:87:d0:3a:eb:e0:44:d2:07:e2:8b:60:
cc:38:2f:ec:ad:f5:d6:5c:c6:08:09:2e:5f:65:48:07:be:65:
b4:bf:96:56:ce:62:3d:9c:e8:72:05:55:69:3b:01:d9:34:d2:
f1:a0:4e:e0:0d:63:d2:5b:3f:75:ef:f1:74:88:b2:5a:f2:2f:
be:b8:8b:2a:e7:3f:a8:b1:b7:32:02:f3:50:2a:ab:3d:43:da:
c4:88:bf:b0:e0:82:e7:10:38:13:c8:34:b2:6c:8c:d7:1d:81:
5d:52:c4:37:04:cd:51:4f:5e:86:6b:ea:8b:25:63:7a:cc:06:
7b:05:2c:dd:af:90:c2:1c:fb:7a:2e:a0:f3:e8:98:d9:cc:57:
fa:03:ca:3f:3d:05:a8:7d:b4:5d:6c:50:74:10:b2:70:45:b1:
f7:8b:f9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:18:06 2025 by rpki-client