Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WRUN-bRhwq7MslqIDVyGB5QKhpM.roa
File: WRUN-bRhwq7MslqIDVyGB5QKhpM.roa (raw, json)
Hash identifier: GElUZc7TmIJscZIWk0AbOXmGsI99tZLZLpJMJsNS7Mo=
Subject key identifier: 59:15:0D:F9:B4:61:C2:AE:CC:B2:5A:88:0D:5C:86:07:94:0A:86:93
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42D79B7529EC276DBA541E031B9419
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WRUN-bRhwq7MslqIDVyGB5QKhpM.roa
Signing time: Sun 01 Jan 2023 21:35:29 +0000
ROA not before: Sun 01 Jan 2023 21:35:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210826
IP address blocks: 2a0e:8f02:f039::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:d7:9b:75:29:ec:27:6d:ba:54:1e:03:1b:94:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59150df9b461c2aeccb25a880d5c8607940a8693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:70:0b:f3:39:a5:cd:e6:e1:f8:ee:1d:54:79:
ae:4e:ed:37:31:23:c8:f3:df:df:5c:30:c5:7c:35:
9c:2b:cd:f9:62:30:b2:41:f4:85:6e:bc:c8:7a:ea:
fd:10:26:49:4e:d2:62:2f:b7:48:52:04:2a:fb:5a:
f7:7f:ce:07:ce:1b:80:8e:58:2b:c5:c5:0f:80:7d:
d7:dc:92:22:0a:67:66:31:05:5d:05:3c:6d:0a:10:
2f:38:7f:c1:9d:5d:71:a0:2f:91:11:c9:e6:ec:44:
2d:5e:01:d0:c2:05:9d:ed:9f:26:a7:00:87:dd:24:
d8:f9:34:b4:0f:78:2d:82:aa:67:d9:b1:7a:f8:d1:
d8:5f:63:88:a0:c1:82:00:d7:8f:48:df:d3:f3:a8:
1c:ae:8c:87:4c:f4:f0:a6:9f:45:01:2a:e7:17:66:
7f:32:d9:32:84:49:3e:aa:c3:3e:cf:b8:22:a8:f7:
ec:f3:42:30:43:81:ca:d2:09:61:84:83:a6:5f:32:
54:a2:70:f9:00:7f:12:0d:6d:ba:74:b2:8c:93:0a:
69:7d:21:c2:5e:f8:65:04:00:c1:f2:39:af:37:ad:
02:a1:59:c0:9a:f1:0e:f1:5b:e5:0c:43:e3:47:6a:
ab:6d:62:69:55:b1:3e:dd:26:ae:7d:4b:ea:67:72:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:15:0D:F9:B4:61:C2:AE:CC:B2:5A:88:0D:5C:86:07:94:0A:86:93
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WRUN-bRhwq7MslqIDVyGB5QKhpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f039::/48
Signature Algorithm: sha256WithRSAEncryption
4c:ed:76:48:47:1f:b9:0e:04:93:df:a3:74:8e:2a:6f:b8:b4:
91:74:d4:73:da:89:81:84:63:3c:ba:9b:57:32:ce:a4:60:9c:
53:9c:68:34:0a:4f:cd:a9:8a:e3:4f:96:14:31:85:7b:9c:a4:
17:24:85:55:b6:29:d9:b9:6e:26:dc:6d:47:46:bb:71:1e:23:
76:45:9e:b6:ab:a4:8c:ef:61:29:63:f9:6c:5d:7f:8d:30:45:
a4:bb:50:c6:6c:74:1a:8c:cd:6c:48:28:53:ef:20:d3:1a:77:
b1:e6:47:15:79:c6:28:38:c6:87:1e:d4:c7:36:00:ce:28:a6:
27:a3:ba:4a:a9:4a:d6:30:2f:38:19:8f:1f:5b:95:7e:d9:2d:
f9:d2:8f:58:8a:a6:ae:a9:7f:b3:31:c7:40:3a:2f:83:d9:4b:
31:e5:de:33:14:f1:0b:1f:20:a9:47:fd:42:9e:f1:df:2f:3b:
d3:e4:34:7e:43:41:30:35:04:60:bf:19:55:75:86:a0:a3:7a:
45:33:84:49:e0:85:94:40:7a:ed:cc:bb:ce:9e:80:87:69:2a:
80:db:16:0c:8a:ba:1c:a8:22:48:63:cc:22:9b:61:0a:ae:5f:
42:00:56:49:fa:22:bb:8a:b5:da:ac:52:ce:ff:16:80:e5:d8:
6e:7c:bc:5b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVvQtebdSnsJ226VB4DG5QZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjMwMTAxMjEzNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTE1MGRmOWI0NjFjMmFlY2NiMjVhODgwZDVjODYwNzk0MGE4NjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknAL8zmlzebh+O4dVHmuTu03MSPI
89/fXDDFfDWcK835YjCyQfSFbrzIeur9ECZJTtJiL7dIUgQq+1r3f84HzhuAjlgr
xcUPgH3X3JIiCmdmMQVdBTxtChAvOH/BnV1xoC+REcnm7EQtXgHQwgWd7Z8mpwCH
3STY+TS0D3gtgqpn2bF6+NHYX2OIoMGCANePSN/T86gcroyHTPTwpp9FASrnF2Z/
MtkyhEk+qsM+z7giqPfs80IwQ4HK0glhhIOmXzJUonD5AH8SDW26dLKMkwppfSHC
XvhlBADB8jmvN60CoVnAmvEO8VvlDEPjR2qrbWJpVbE+3SaufUvqZ3KjHQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFkVDfm0YcKuzLJaiA1chgeUCoaTMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvV1JVTi1iUmh3cTdNc2xxSURWeUdCNVFLaHBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvA5
MA0GCSqGSIb3DQEBCwUAA4IBAQBM7XZIRx+5DgST36N0jipvuLSRdNRz2omBhGM8
uptXMs6kYJxTnGg0Ck/NqYrjT5YUMYV7nKQXJIVVtinZuW4m3G1HRrtxHiN2RZ62
q6SM72EpY/lsXX+NMEWku1DGbHQajM1sSChT7yDTGnex5kcVecYoOMaHHtTHNgDO
KKYno7pKqUrWMC84GY8fW5V+2S350o9YiqauqX+zMcdAOi+D2Usx5d4zFPELHyCp
R/1CnvHfLzvT5DR+Q0EwNQRgvxlVdYago3pFM4RJ4IWUQHrtzLvOnoCHaSqA2xYM
irocqCJIY8wim2EKrl9CAFZJ+iK7irXarFLO/xaA5dhufLxb
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:00 2024 by rpki-client on console-ams.rpki-client.org