Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/W-KiA3T7iPtyOS5Pl389VFgDkco.roa
File: W-KiA3T7iPtyOS5Pl389VFgDkco.roa (raw, json)
Hash identifier: zRysccU65nF/1VQEpMfBc2Jve763z5zry0HuGzwaitc=
Subject key identifier: 5B:E2:A2:03:74:FB:88:FB:72:39:2E:4F:97:7F:3D:54:58:03:91:CA
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0190EEF580BF8DA52F7F634F99334E26F99B
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/W-KiA3T7iPtyOS5Pl389VFgDkco.roa
Signing time: Fri 26 Jul 2024 12:13:04 +0000
ROA not before: Fri 26 Jul 2024 12:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214477
IP address blocks: 2a12:7740::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Jul 2024 14:46:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:f5:80:bf:8d:a5:2f:7f:63:4f:99:33:4e:26:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jul 26 12:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5be2a20374fb88fb72392e4f977f3d54580391ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:07:7a:91:b0:ea:cb:b8:5d:3e:3f:a3:56:
a3:8f:85:2d:12:13:e6:95:92:9e:56:77:46:2e:79:
59:f6:70:f4:fb:01:6b:36:51:c4:de:2d:a4:cb:55:
9a:f5:1a:d1:9d:4c:0b:e4:f7:15:6e:ce:9a:eb:0d:
08:40:e6:f2:47:e5:93:a3:75:29:68:94:a8:42:02:
06:f3:4f:8a:c5:2e:48:af:5e:68:dc:03:23:00:4d:
90:27:0c:2b:bb:5b:0f:b1:c3:3d:ab:53:17:20:4b:
23:65:12:af:f7:da:b6:b2:b5:f1:14:0c:03:7b:42:
4d:cc:e7:a7:73:cf:4f:17:c1:dc:07:be:1a:82:f1:
05:8b:02:4c:0a:b8:d3:65:93:64:bc:cb:fb:15:56:
ba:db:69:a8:f9:cd:b4:09:20:a4:2f:39:04:24:83:
05:77:e8:76:f6:27:fe:61:c2:0b:e7:22:22:c3:7a:
2b:07:33:ae:eb:e8:cb:1b:e0:13:b5:26:6b:bd:d5:
24:74:2a:46:e6:73:6c:d5:d3:0f:b2:40:fa:3a:0c:
18:6d:4e:6a:6c:e9:1f:c3:61:7e:6b:9a:76:58:34:
6d:2f:69:1f:5b:a6:46:bb:19:66:5f:16:7d:ea:a3:
a4:f2:15:63:55:89:07:a7:1a:51:cd:85:04:4f:7c:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E2:A2:03:74:FB:88:FB:72:39:2E:4F:97:7F:3D:54:58:03:91:CA
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/W-KiA3T7iPtyOS5Pl389VFgDkco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:7740::/29
Signature Algorithm: sha256WithRSAEncryption
ca:db:dd:b4:41:b9:16:77:6e:e3:60:5c:07:99:23:0f:94:09:
2b:16:33:a0:ca:4d:ce:de:63:e6:d8:1c:33:0f:95:71:57:e0:
f7:81:e8:31:89:0f:00:fd:87:fa:98:8a:12:d1:63:61:8a:66:
37:03:0a:ec:56:95:a8:c7:09:2e:ef:ea:93:ab:04:43:60:b2:
63:61:bf:26:5f:84:da:a0:7e:ab:d8:64:c0:f7:1b:9a:80:4f:
91:ec:df:31:43:d6:17:58:df:37:f8:3a:98:eb:39:80:29:9c:
ec:6e:e8:c2:01:92:10:25:40:df:94:e1:36:e2:68:f4:51:e7:
10:69:ae:8e:04:0f:9c:6a:ed:8e:d5:44:ff:e7:40:71:92:22:
84:5e:11:5b:d2:d6:06:8d:7e:ed:b2:a9:dd:8a:3d:af:0e:a1:
9a:49:f5:8c:89:07:8f:85:0a:15:3d:21:57:bb:8a:f4:8b:df:
ea:56:eb:0b:a8:32:1f:aa:2d:27:cb:69:c7:4a:6d:1f:5c:47:
fe:66:fa:f2:5f:43:ac:65:25:9e:d0:eb:bd:c9:9f:43:04:72:
7a:75:74:d8:b4:99:81:7b:a0:f1:40:7e:7d:59:02:63:b3:2b:
3d:18:04:f0:56:8a:43:d2:4f:d9:36:41:cb:03:c1:a6:09:b9:
0f:77:a8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 29 17:07:30 2024 by rpki-client on console-ams.rpki-client.org