Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/wGSSa-JT091UblA4t0OY8VTj3Y4.roa
File: wGSSa-JT091UblA4t0OY8VTj3Y4.roa (raw, json)
Hash identifier: 1rU9GjvE59eacVyNyCgZkJTn4kopxYtAz3gl9FWPFmA=
Subject key identifier: C0:64:92:6B:E2:53:D3:DD:54:6E:50:38:B7:43:98:F1:54:E3:DD:8E
Certificate issuer: /CN=4f8de72e5006af6db55115e1b70932023ceecba4
Certificate serial: 01910D1412145947E06AB7139FE3F5E4AD80
Authority key identifier: 4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/wGSSa-JT091UblA4t0OY8VTj3Y4.roa
Signing time: Thu 01 Aug 2024 08:35:04 +0000
ROA not before: Thu 01 Aug 2024 08:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198421
IP address blocks: 109.206.96.0/19 maxlen: 24
109.207.32.0/20 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0d:14:12:14:59:47:e0:6a:b7:13:9f:e3:f5:e4:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8de72e5006af6db55115e1b70932023ceecba4
Validity
Not Before: Aug 1 08:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c064926be253d3dd546e5038b74398f154e3dd8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fb:e7:8d:87:0c:06:8c:e4:75:5f:79:a4:b3:
c7:54:fc:84:eb:a7:0a:52:2d:5e:42:b8:ce:15:ba:
d3:68:bd:2d:e4:d9:6b:8b:21:1b:2a:9a:d5:13:2b:
50:77:98:3f:70:fa:79:41:00:5a:e0:2a:c9:a5:5a:
97:c9:69:ad:58:a2:5f:34:47:4a:74:a2:c4:97:87:
eb:f8:00:90:20:17:34:c2:56:bc:cd:ba:92:e4:d0:
85:e7:71:2d:f8:4b:e3:5e:ea:2b:7c:b1:b5:0e:87:
42:a4:aa:b9:ae:70:a6:82:10:8e:e9:87:3c:6f:20:
7f:06:2f:f9:de:62:2c:c4:1e:69:a3:74:9a:ed:25:
08:74:95:fb:c7:9f:79:d4:97:cc:b6:ce:53:92:c4:
2d:a4:11:ff:6e:37:c5:82:de:61:f3:78:32:98:bb:
df:0f:f9:52:53:d9:27:3d:11:de:58:a9:ab:13:9f:
97:ec:64:d2:ea:e0:10:0a:3d:b2:c7:7e:77:91:54:
06:9d:24:89:48:3a:2c:81:a5:79:f1:8d:61:c2:53:
cd:7c:9c:8c:09:81:d8:29:1d:17:9b:74:ef:d3:1b:
16:29:82:57:4d:c1:b3:4e:5a:2a:ea:ef:4b:d2:69:
56:20:58:4d:ec:4d:c0:8c:0a:9a:0f:57:fc:00:77:
9e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:92:6B:E2:53:D3:DD:54:6E:50:38:B7:43:98:F1:54:E3:DD:8E
X509v3 Authority Key Identifier:
keyid:4F:8D:E7:2E:50:06:AF:6D:B5:51:15:E1:B7:09:32:02:3C:EE:CB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T43nLlAGr221URXhtwkyAjzuy6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/wGSSa-JT091UblA4t0OY8VTj3Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/8d2d0a-2f70-4859-bb44-5b5078625dea/1/T43nLlAGr221URXhtwkyAjzuy6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.96.0/19
109.207.32.0/20
Signature Algorithm: sha256WithRSAEncryption
41:7b:53:8a:79:19:c9:85:ee:46:9e:12:30:df:e3:53:8e:7c:
2f:51:a4:1c:2d:e9:30:35:6f:55:73:47:b8:8e:26:64:af:0d:
a6:bb:a2:20:ab:8f:42:b7:f1:5f:62:bd:42:a0:59:cd:08:65:
57:3f:ab:e3:11:5c:23:80:80:02:24:a5:e4:03:f0:26:dd:fd:
de:37:90:c9:37:23:bc:a5:07:ba:fb:ca:56:e0:48:a4:61:90:
a7:1e:ef:d8:e1:17:f7:de:8a:34:3c:3c:ae:50:5b:54:46:f4:
32:11:af:75:84:5e:e1:2b:3b:26:c3:4f:0d:bb:38:eb:6c:f6:
e4:00:79:db:be:59:af:92:85:98:ff:a0:ba:76:a4:ea:39:92:
65:3e:3e:0f:54:56:61:c6:57:00:23:73:fa:d3:a8:7f:d8:5d:
0c:b3:9c:80:6d:6a:40:ce:b9:40:57:78:9c:dd:0a:47:78:91:
cf:e9:3e:87:7d:24:bd:e8:b1:b9:c5:fb:a9:65:5d:cb:f8:36:
2e:b4:e5:24:16:ef:7d:42:d0:3b:c8:e5:eb:99:84:b9:ba:23:
10:4e:66:0e:9c:30:f2:8b:61:32:9c:fe:4d:8a:30:5b:9f:6a:
e1:94:9a:fa:72:1b:9a:23:5e:b0:fa:f4:06:ff:c7:a3:0b:39:
ba:f7:3d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 01:57:02 2025 by rpki-client