Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/wp-4z82lyiyEJqws1swN9B7vWx0.roa
File: wp-4z82lyiyEJqws1swN9B7vWx0.roa (raw, json)
Hash identifier: nyIeIla0LXjivBAg5O/aAr7XfFqbFkTys7biOjMEU/w=
Subject key identifier: C2:9F:B8:CF:CD:A5:CA:2C:84:26:AC:2C:D6:CC:0D:F4:1E:EF:5B:1D
Certificate issuer: /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial: 018D5ED82AC99A3882CAB641B09FDC8C5027
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/wp-4z82lyiyEJqws1swN9B7vWx0.roa
Signing time: Wed 31 Jan 2024 09:27:21 +0000
ROA not before: Wed 31 Jan 2024 09:27:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12822
IP address blocks: 212.108.160.0/20 maxlen: 20
212.108.176.0/21 maxlen: 21
2a02:358::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 09:42:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5e:d8:2a:c9:9a:38:82:ca:b6:41:b0:9f:dc:8c:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Validity
Not Before: Jan 31 09:27:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c29fb8cfcda5ca2c8426ac2cd6cc0df41eef5b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:d6:b6:0b:b8:fd:cc:d5:f0:83:c8:b2:34:
73:f5:34:63:92:ed:7a:16:cd:26:de:cc:0f:57:3c:
fc:c0:c4:fa:69:01:75:fb:59:8f:29:8d:7a:94:b0:
0b:23:59:6e:f5:e7:ff:0d:5d:a0:37:d1:5c:43:ad:
9e:b6:8d:89:a9:89:7a:3e:fe:01:71:c3:0d:f5:ca:
77:92:6f:7e:be:06:de:fc:0b:c7:13:7d:46:82:5d:
c0:3c:ca:7b:a7:22:dc:da:fd:0f:4d:50:b4:8a:bb:
38:6d:58:31:f4:e7:4f:c7:8d:fa:e5:4b:0c:0b:f2:
40:de:55:75:36:08:4e:4c:49:86:f0:01:87:9e:d7:
f0:dd:2d:a2:ce:b5:c5:ca:10:4a:7c:b1:f0:b9:c0:
ea:47:4a:e0:e0:f0:49:98:17:08:44:cf:cf:5b:a1:
52:46:a0:d0:f1:89:13:58:55:e0:4d:4b:e4:ce:8f:
3c:f2:c0:6e:7a:82:5e:ee:26:13:f7:52:a8:ff:3f:
fe:32:67:0c:48:95:fc:69:34:24:af:96:e9:9f:33:
ba:3d:b9:4c:25:27:32:78:7d:d5:8f:ac:a8:d6:50:
75:a4:65:be:04:00:b1:79:21:27:88:f6:5e:d3:20:
f8:1d:f6:51:7e:74:62:f6:25:7f:5d:ba:ea:bb:85:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9F:B8:CF:CD:A5:CA:2C:84:26:AC:2C:D6:CC:0D:F4:1E:EF:5B:1D
X509v3 Authority Key Identifier:
keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/wp-4z82lyiyEJqws1swN9B7vWx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.108.160.0-212.108.183.255
IPv6:
2a02:358::/32
Signature Algorithm: sha256WithRSAEncryption
72:b3:e8:dc:22:ce:07:27:0d:f8:b8:84:d6:f2:7f:16:91:11:
6f:6a:c6:d8:f0:42:66:c8:6c:46:f0:52:11:4b:9b:a9:2a:3b:
70:17:d7:2a:bb:41:71:11:54:e1:62:da:bb:c7:ab:7d:fd:8f:
dd:cc:67:14:90:d9:3b:f2:ca:bd:f1:7b:db:1d:ac:6f:d6:bd:
84:60:8a:38:d2:ca:0e:a3:25:8b:78:db:93:e9:44:c5:1c:eb:
85:76:38:9b:a2:e7:7a:2a:52:c0:72:e7:0f:cd:0f:39:6e:12:
b7:34:ad:6c:0c:aa:ba:4b:50:de:2b:8f:57:91:1f:96:9a:49:
59:9e:2b:96:dd:d7:80:15:37:61:16:cf:94:e9:f5:84:64:1f:
26:a7:30:65:1a:ca:d3:52:42:37:db:72:8e:7c:6f:0c:7d:64:
e6:7b:7e:53:de:b6:a5:eb:66:bf:e2:6d:7d:b5:83:a4:15:a7:
42:7b:15:1d:b4:06:06:a2:ac:64:ca:77:c2:39:76:37:59:05:
20:ad:27:80:e7:e9:43:48:7a:29:4a:57:cc:46:e7:85:dc:b4:
6c:64:c5:e0:36:be:bf:d8:c5:e2:78:5d:33:8c:cc:4b:2a:24:
d8:0c:27:ab:6b:9d:08:ac:80:44:40:9b:01:ca:af:63:3e:d1:
5d:dd:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org