Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/WalLIIkNXtkVAqG-vhYgbVze0Fw.roa
File: WalLIIkNXtkVAqG-vhYgbVze0Fw.roa (raw, json)
Hash identifier: RZNJ2TeLRRmk4uOBaUW8F1BOBcSmJ3Fl/AOIcxMSYpY=
Subject key identifier: 59:A9:4B:20:89:0D:5E:D9:15:02:A1:BE:BE:16:20:6D:5C:DE:D0:5C
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 01856B6EB65B89A5E0BC59B1FFEBF5585ED5
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/WalLIIkNXtkVAqG-vhYgbVze0Fw.roa
Signing time: Sun 01 Jan 2023 03:44:55 +0000
ROA not before: Sun 01 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21263
IP address blocks: 5.154.178.0/24 maxlen: 24
5.154.177.0/24 maxlen: 24
2a0e:1d00::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 03 Feb 2023 10:58:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:b6:5b:89:a5:e0:bc:59:b1:ff:eb:f5:58:5e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Jan 1 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59a94b20890d5ed91502a1bebe16206d5cded05c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:5a:df:2c:9c:37:00:38:e4:9c:2f:57:ba:
52:94:07:80:a7:1d:b1:21:24:70:6f:24:fd:64:bc:
1f:23:68:85:f8:26:ad:0c:e8:4d:e3:1d:d4:0e:47:
45:8a:12:7b:18:c7:55:b9:07:56:ab:a3:1d:04:48:
e6:7b:0c:89:4a:9d:9f:4b:93:b3:b8:f5:00:d8:f7:
61:c5:ea:70:29:a3:04:5e:c2:39:42:88:52:c2:d4:
a7:b2:41:14:35:6f:4e:90:fc:ef:85:0f:d6:2f:2e:
55:da:4b:75:3d:ea:23:27:ff:e6:96:fe:f5:04:18:
e5:82:33:d4:68:db:78:ec:dc:2e:dd:1d:c6:fa:ec:
df:19:37:78:7e:25:9e:ab:a2:a3:27:ba:02:fd:f6:
ce:44:02:3a:cb:8e:ff:fc:8b:81:d5:5b:48:46:35:
56:11:c0:05:45:f2:86:eb:c4:5d:e0:b8:53:70:8c:
67:18:b4:68:2f:a5:a0:0f:2e:e0:eb:9c:79:9f:89:
57:3f:fe:ce:7f:1f:78:63:19:1b:93:93:58:da:fd:
b6:5d:b7:4b:ba:fe:61:d7:8f:1f:9d:61:58:f0:a8:
18:72:28:76:a3:95:c0:54:9b:2d:6e:de:0a:e9:16:
72:be:bc:4c:9d:e8:64:06:af:0a:c6:84:bf:31:ae:
65:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:A9:4B:20:89:0D:5E:D9:15:02:A1:BE:BE:16:20:6D:5C:DE:D0:5C
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/WalLIIkNXtkVAqG-vhYgbVze0Fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.177.0-5.154.178.255
IPv6:
2a0e:1d00::/32
Signature Algorithm: sha256WithRSAEncryption
b9:36:b4:5b:cb:58:ef:b7:56:60:95:85:7d:d8:7d:bf:58:95:
d9:1f:ee:b5:46:3b:13:64:b6:2f:68:fb:20:ba:a2:82:20:d5:
3c:37:d3:07:aa:1a:22:36:8c:fb:a6:41:83:51:4a:5e:83:78:
1d:41:90:93:f5:30:80:4c:be:31:96:3d:55:f3:ce:db:48:5f:
05:17:45:0c:30:ff:df:cc:38:c8:57:e1:27:b5:c7:a7:6e:00:
b5:f5:33:aa:1b:f0:e7:e8:cc:71:3e:54:c8:27:8b:f9:06:08:
34:2e:a3:6b:ed:00:44:5b:77:21:83:e5:10:f1:05:2b:93:a5:
ce:18:7e:45:3d:0f:7d:77:e5:dc:da:c4:06:8d:d6:7c:5a:4d:
65:0d:4e:fc:89:3b:e6:31:92:2b:7d:4a:f1:24:64:fe:6e:50:
16:1c:19:6a:af:88:57:a6:5c:87:45:08:ff:17:70:a5:aa:49:
03:be:ff:12:8f:0c:f6:d6:18:44:41:93:d4:4e:cc:c6:b1:79:
a6:40:6d:f4:46:19:43:89:c5:b8:3c:90:ed:1c:dc:d0:99:c5:
e0:52:f6:e2:b5:96:c9:59:d9:d6:c6:b6:28:f3:3b:d5:27:34:
3e:ef:c9:1f:30:0f:8c:2f:0c:0d:69:c7:6a:b9:89:b4:b7:9c:
73:f8:01:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:08 2024 by rpki-client on console-ams.rpki-client.org