Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/WglNaOS4IT2aUsadhhct8K9bDrc.roa
File: WglNaOS4IT2aUsadhhct8K9bDrc.roa (raw, json)
Hash identifier: j2XHy2uhtCTFSN/TDgFvi15eSo6tpPOcXh9/lmO7iAM=
Subject key identifier: 5A:09:4D:68:E4:B8:21:3D:9A:52:C6:9D:86:17:2D:F0:AF:5B:0E:B7
Certificate issuer: /CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Certificate serial: 018CC425005E4D3F4059578E41BDB149529D
Authority key identifier: 87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/WglNaOS4IT2aUsadhhct8K9bDrc.roa
Signing time: Mon 01 Jan 2024 08:30:08 +0000
ROA not before: Mon 01 Jan 2024 08:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 193.169.59.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 01:49:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:00:5e:4d:3f:40:59:57:8e:41:bd:b1:49:52:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=875fc80242d2e69ebd0f22b5e3cc457594ae90ac
Validity
Not Before: Jan 1 08:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a094d68e4b8213d9a52c69d86172df0af5b0eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:16:37:c0:70:82:2d:18:8d:3b:e8:e0:6d:5d:
ef:70:a8:e2:19:7a:1a:80:e0:09:8e:6d:4e:79:1f:
34:fd:18:f3:07:b0:b3:b2:7b:b1:c1:25:de:5a:21:
6b:fb:0f:62:5e:98:9a:3c:dd:a8:fc:2f:5d:fa:23:
4e:a0:2f:fb:0a:83:b2:e3:41:4c:ce:d5:88:93:de:
16:d4:cd:bf:17:c1:6c:cd:0b:e2:72:0f:f7:b1:49:
a1:5a:b7:16:78:21:de:5b:7d:08:ee:5c:49:a8:76:
c4:b9:20:ea:83:ae:c8:a2:10:99:52:07:03:90:76:
47:be:87:b7:47:d2:48:66:d6:76:04:25:ed:d2:29:
64:48:d3:d6:6b:8f:38:8a:5c:6e:9c:67:59:24:32:
7c:d4:fe:2e:39:7a:d5:ca:e0:6a:10:62:7c:de:a9:
36:41:dc:8b:40:67:1a:ea:b0:3a:39:5f:05:b9:52:
51:6f:a9:80:f2:26:03:62:75:f3:8b:c1:14:0b:d3:
1b:1a:98:04:f8:8f:a4:cf:03:aa:f3:3f:12:2e:0b:
28:5b:fb:66:cd:6c:de:6a:a6:ea:87:d7:28:3b:a9:
66:11:d8:00:38:3c:a6:c4:a7:0a:3c:75:84:a6:bb:
f6:f5:25:ac:e6:0b:6c:64:c8:82:71:14:38:0a:3d:
be:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:4D:68:E4:B8:21:3D:9A:52:C6:9D:86:17:2D:F0:AF:5B:0E:B7
X509v3 Authority Key Identifier:
keyid:87:5F:C8:02:42:D2:E6:9E:BD:0F:22:B5:E3:CC:45:75:94:AE:90:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h1_IAkLS5p69DyK148xFdZSukKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/WglNaOS4IT2aUsadhhct8K9bDrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/61025f-43da-437d-b010-cc49e534db00/1/h1_IAkLS5p69DyK148xFdZSukKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
89:b4:94:92:9b:46:3f:31:ab:bd:ca:fa:57:0b:9a:73:e1:cc:
26:fa:4d:d7:8c:c8:eb:50:99:dd:e3:55:39:65:7d:73:5c:92:
5c:5d:7d:94:78:4a:da:41:18:01:b9:97:67:75:1e:d4:7d:e1:
06:b4:78:e8:f1:4d:3d:56:55:22:97:b1:65:ae:45:82:00:ad:
c8:97:41:f9:01:e1:10:9c:db:bd:94:0c:bc:26:03:68:92:76:
25:d1:32:fb:e7:14:9a:4f:46:bc:74:a3:d0:85:5c:ea:4d:bd:
1b:da:c3:04:43:3b:53:6b:49:70:40:24:64:64:3e:44:95:0a:
37:39:a3:03:f7:c3:34:69:ee:d6:05:b4:e5:d2:30:22:b5:61:
1c:25:62:08:91:51:fe:40:0d:ac:a3:38:58:62:ef:09:2f:ae:
84:88:1e:45:6c:ff:00:2f:6c:6e:d4:fa:49:00:cd:a9:34:a7:
be:1a:f8:af:51:ed:a5:9a:26:07:f6:04:1b:2a:1e:80:96:ee:
97:50:c8:ff:ad:da:bc:de:0b:dd:b6:f1:94:3e:4e:b4:0d:01:
a6:a6:ae:54:6b:38:89:8d:9e:79:a4:4f:75:b0:35:67:d2:13:
1f:f1:4b:31:33:12:6c:27:8b:12:60:5b:46:66:87:7a:7b:fc:
c6:31:29:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:58 2024 by rpki-client on console-ams.rpki-client.org