Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/WUAEdYl8mE7kfnki6wFuyAXlZko.roa
File: WUAEdYl8mE7kfnki6wFuyAXlZko.roa (raw, json)
Hash identifier: XUCvU8Wlf5vBWBAa5PmR4Xc+I9WA/nPY8P3YHfnidIY=
Subject key identifier: 59:40:04:75:89:7C:98:4E:E4:7E:79:22:EB:01:6E:C8:05:E5:66:4A
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01857054C9A33EBA6EBF044176831938746D
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/WUAEdYl8mE7kfnki6wFuyAXlZko.roa
Signing time: Mon 02 Jan 2023 02:34:42 +0000
ROA not before: Mon 02 Jan 2023 02:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43624
IP address blocks: 5.252.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Mar 2023 17:31:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:54:c9:a3:3e:ba:6e:bf:04:41:76:83:19:38:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 2 02:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59400475897c984ee47e7922eb016ec805e5664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:1a:03:71:55:9d:3d:ab:18:54:fb:f8:de:
3d:ca:1e:47:1e:01:4a:67:7b:8f:42:d1:dd:19:20:
e7:9d:e7:5c:7f:82:16:58:10:6a:9d:04:8d:db:79:
ef:d5:17:2d:89:be:4f:41:8f:8c:4c:e9:8d:16:bd:
59:bc:28:d2:80:46:c7:83:63:38:43:d6:26:99:70:
a2:8a:1e:01:4c:66:c8:4e:58:37:b3:15:97:63:43:
48:d9:39:b4:41:90:d4:e7:eb:5b:f6:69:3b:03:73:
be:d6:50:4f:bd:96:5f:a0:7e:7d:ba:cd:b1:b9:6d:
28:bb:f3:12:b3:a3:20:31:d8:58:ec:26:6a:32:55:
37:da:b0:e6:fe:3d:61:2d:fb:e8:13:c8:b9:6f:68:
19:5a:41:b4:bc:6f:31:ed:02:7c:63:36:d7:86:3f:
85:a9:d6:6b:73:59:ca:63:68:28:95:05:6e:7c:14:
32:93:ab:10:2e:24:92:ef:a3:4c:68:35:37:e4:95:
5e:42:46:12:49:dd:1f:65:09:b3:89:58:18:8b:de:
f1:75:0e:80:15:f6:93:55:47:a7:b4:a5:a6:aa:c2:
bd:94:25:47:67:88:a6:3d:a6:00:fc:c8:f9:b4:80:
6a:68:82:f5:e0:ab:74:bc:53:10:56:0d:9e:56:fd:
d3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:04:75:89:7C:98:4E:E4:7E:79:22:EB:01:6E:C8:05:E5:66:4A
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/WUAEdYl8mE7kfnki6wFuyAXlZko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ed:f5:c3:17:2f:8d:5e:44:7d:41:b3:dc:a1:f1:e9:99:69:
4f:94:5d:ef:1f:5f:71:68:f4:8d:18:d0:ab:52:7b:1e:f1:b5:
ad:4f:37:6b:6f:9e:42:6c:0d:ac:a5:ae:31:7a:7c:ee:0c:2d:
fd:b7:87:46:da:67:c9:05:99:0d:44:a4:71:94:1e:d3:34:23:
b6:7c:68:8e:18:be:cc:60:d2:3b:c1:57:51:34:a4:db:ff:0e:
7c:f7:0e:58:91:57:cc:f9:0f:b5:78:84:1d:fa:ff:40:ef:06:
29:ac:64:90:72:12:b4:3c:60:eb:bc:9e:4a:e0:cd:ec:3b:ef:
0e:05:18:55:6e:1e:19:c1:21:98:16:75:14:93:a6:17:2a:95:
f0:9c:66:72:7d:ec:38:4e:e2:ee:4b:0a:7d:48:28:e6:92:c1:
e2:9e:e2:01:69:b4:32:af:f4:5a:97:7e:e0:fd:15:cd:d9:24:
17:a0:ea:50:dc:69:d2:8c:23:34:85:18:32:2c:46:87:fa:97:
7a:f4:75:ea:38:1f:c0:0a:dd:0d:9b:64:91:f2:84:07:f5:cd:
88:da:92:3b:e0:59:28:8e:61:bc:65:c9:c9:56:5c:93:7b:7a:
0f:f0:97:94:ae:7b:e0:4b:a8:86:a0:dd:b3:9b:a4:7a:89:b9:
0c:80:3e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org