Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WgLj2laojbzYixEemeV_O9U8x8U.roa
File: WgLj2laojbzYixEemeV_O9U8x8U.roa (raw, json)
Hash identifier: nvSlcD8nV529vSp73XYfsGQej67sH1wh2bhZO1HdNQg=
Subject key identifier: 5A:02:E3:DA:56:A8:8D:BC:D8:8B:11:1E:99:E5:7F:3B:D5:3C:C7:C5
Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Certificate serial: 0190531A5A86A815F4A1222241BE7498B94A
Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WgLj2laojbzYixEemeV_O9U8x8U.roa
Signing time: Wed 26 Jun 2024 05:52:34 +0000
ROA not before: Wed 26 Jun 2024 05:52:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51082
IP address blocks: 2a06:b3c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Jun 2024 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:1a:5a:86:a8:15:f4:a1:22:22:41:be:74:98:b9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3
Validity
Not Before: Jun 26 05:52:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a02e3da56a88dbcd88b111e99e57f3bd53cc7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0c:b1:c7:c4:66:d0:d9:a4:19:92:f4:40:40:
d7:c4:1c:e6:9d:79:b9:8b:74:07:cb:6d:4e:75:62:
44:0b:c3:96:41:5f:d0:34:d8:70:3f:17:39:7f:ff:
7b:47:6f:21:d4:61:5c:b7:13:e8:b9:fa:ae:14:db:
c5:6e:56:c0:34:f3:ea:69:55:3b:99:bb:90:ab:8a:
71:00:fd:0a:e8:f7:5c:1a:e2:6d:0f:61:fd:c6:63:
04:35:09:82:4a:c4:fc:77:52:2b:7c:e7:1e:83:cd:
8d:57:a8:eb:a7:ab:e1:ba:f7:f5:67:ec:65:76:93:
95:ac:a0:14:ce:76:19:a8:9e:4e:16:66:22:41:25:
9e:a3:67:e0:af:e5:84:7b:d8:f0:17:aa:be:11:57:
6e:44:96:d2:d5:4f:b8:13:3a:10:3e:a2:69:05:0a:
8b:c9:87:69:c9:ef:28:20:72:b9:5e:47:98:37:6b:
13:ff:aa:2e:ee:67:a3:0b:c8:a7:b2:41:71:b7:d1:
11:4d:ad:09:79:e7:f0:f7:00:cf:a9:18:a4:29:de:
4c:1b:8c:d2:b6:6c:dd:d5:46:93:28:e9:85:2d:1a:
56:ea:9d:9e:19:39:c6:35:f8:db:7a:72:39:d7:da:
5b:a7:e4:ce:82:52:a0:4c:66:e2:c7:61:19:ad:42:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:02:E3:DA:56:A8:8D:BC:D8:8B:11:1E:99:E5:7F:3B:D5:3C:C7:C5
X509v3 Authority Key Identifier:
keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/WgLj2laojbzYixEemeV_O9U8x8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:b3c0::/29
Signature Algorithm: sha256WithRSAEncryption
29:4f:ba:42:a2:ff:0f:6c:91:97:ee:2e:52:1b:40:5d:46:a5:
51:58:06:cd:a5:2c:49:f0:a6:93:80:64:cd:3d:55:0a:e5:6c:
3a:18:15:25:45:20:b3:78:e6:4c:16:2d:ec:b1:db:d3:a0:50:
35:16:aa:4c:a2:a2:46:08:d5:70:74:74:0c:a5:69:d2:50:15:
32:d9:05:af:de:15:73:8d:71:71:e4:86:5b:b7:21:5f:05:da:
68:87:bc:89:58:ba:81:12:90:e2:83:9c:a7:80:b7:de:c3:22:
e9:11:26:f3:52:f1:8b:26:85:57:f6:3b:ba:ab:4f:0a:b0:8f:
09:3e:99:6c:ce:31:91:90:03:d7:f5:f4:83:bb:fd:8b:33:59:
10:54:cf:6e:3e:35:48:76:7b:75:74:c0:54:73:2f:b6:14:2e:
e8:bb:04:19:92:d1:95:00:d8:4a:e8:da:4d:94:04:7b:49:21:
ea:1e:57:41:5b:52:14:2e:e2:80:77:43:3b:1e:a0:95:e9:c5:
d5:02:b0:2c:89:73:83:43:07:79:1c:0d:d8:44:bf:08:a3:0f:
42:e7:bc:2f:16:cd:f7:b1:7d:66:8e:68:7e:da:12:dc:87:e6:
dd:66:b0:1a:6c:18:9f:7c:d3:a0:84:60:82:ba:ed:7d:01:e7:
6d:f1:5f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 27 10:23:52 2024 by rpki-client on console-fra.rpki-client.org