Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WLdme0wrhq8YXW4gutJNfiKcycM.roa
File: WLdme0wrhq8YXW4gutJNfiKcycM.roa (raw, json)
Hash identifier: a6cwArZ6x5pAN6bMMUhtzTaGgNercA62Epb5CD3SbXU=
Subject key identifier: 58:B7:66:7B:4C:2B:86:AF:18:5D:6E:20:BA:D2:4D:7E:22:9C:C9:C3
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019037ED434E7CF0564EBB5718B053937C7A
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WLdme0wrhq8YXW4gutJNfiKcycM.roa
Signing time: Thu 20 Jun 2024 23:13:34 +0000
ROA not before: Thu 20 Jun 2024 23:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 21 Jun 2024 00:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:37:ed:43:4e:7c:f0:56:4e:bb:57:18:b0:53:93:7c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 20 23:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58b7667b4c2b86af185d6e20bad24d7e229cc9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:04:7d:56:38:eb:77:c7:b5:6f:aa:da:3e:fc:
8c:9d:bd:e8:7e:13:a4:c8:c8:9f:89:9c:e3:94:df:
86:b7:b7:61:86:b6:9f:b2:62:b2:4d:19:a5:57:a5:
ea:ed:25:f2:4f:9c:54:46:13:18:44:64:7f:94:67:
26:20:9a:d4:ec:8a:e8:4a:08:4d:9a:a3:b7:6c:bb:
59:85:d7:0b:77:e3:24:91:7e:19:cd:61:97:08:e7:
b2:81:f2:35:57:69:d3:e7:6a:f1:88:dd:03:c1:96:
fe:cb:c8:43:f4:34:23:5e:2f:7e:4a:59:19:8c:fe:
f8:42:88:93:2c:c0:36:14:c8:e6:71:bc:4d:7e:26:
6a:de:e5:e8:d1:ce:7c:42:22:85:ae:dd:12:60:f6:
fc:9a:2c:0c:9b:3e:93:bb:6b:ac:75:ef:d0:d3:41:
cc:01:ed:86:70:b8:ea:0d:37:06:f1:fa:de:19:40:
90:e7:f4:78:70:ca:33:15:07:54:e6:31:4e:26:58:
0d:47:6b:3a:ea:7f:3d:61:d4:5b:93:b7:5c:ee:20:
95:78:a4:2d:65:e2:22:3d:c2:54:eb:00:f9:40:a6:
c5:46:6f:f2:4a:9a:69:01:9e:59:3f:c3:19:f2:01:
10:0c:d6:82:ca:8b:e8:56:c7:77:42:1e:a1:39:e9:
e0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B7:66:7B:4C:2B:86:AF:18:5D:6E:20:BA:D2:4D:7E:22:9C:C9:C3
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WLdme0wrhq8YXW4gutJNfiKcycM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
02:bd:64:6e:ad:99:9d:99:25:9c:b5:12:3b:03:d1:38:b0:4e:
49:8f:4b:68:01:fb:14:d4:e4:8b:9d:e8:f9:aa:ee:61:16:e5:
1b:8e:47:f7:af:c9:97:ee:10:ab:ca:74:0c:b4:3d:8c:09:1a:
4d:5c:c3:29:8d:f1:db:0f:98:94:1e:2c:5d:06:70:52:fb:9d:
49:60:3b:d7:cd:1b:47:2e:48:e3:90:3d:ca:c5:82:07:44:d5:
0f:c0:23:e9:02:87:be:d6:02:f5:b3:b4:87:bc:49:42:88:75:
4f:e5:08:98:67:ff:9b:a7:38:8e:75:0a:03:08:82:e4:e2:b3:
d5:1e:bd:04:6e:f8:65:37:0e:ce:e4:4a:1c:96:9b:88:7d:13:
72:f7:cc:47:5e:98:94:fb:57:cb:fa:e2:13:fd:7c:8a:b5:16:
ef:f0:0c:fc:55:4b:3d:aa:be:c8:a7:49:19:a3:f1:f7:56:5f:
96:61:75:2a:22:3a:77:b7:e0:47:dc:1d:bd:69:16:ac:5a:3a:
ad:b6:e8:01:fe:b9:a1:be:75:0a:f0:7c:b1:3e:f9:0e:94:ba:
86:83:ed:55:1d:70:ad:44:8d:de:3a:50:d0:2f:29:e2:ba:50:
d1:5e:c1:ff:97:2d:a4:be:78:b6:ae:07:17:4e:06:ad:9b:ef:
f2:98:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 02:21:12 2024 by rpki-client on console-ams.rpki-client.org