Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WyW-Ss4qqgC7vQH3EnDNGS-xt3E.roa
File: WyW-Ss4qqgC7vQH3EnDNGS-xt3E.roa (raw, json)
Hash identifier: Xtk+M4+pwfT0UDSRf680eI5MsoXmKqWRRVaJpYrgqcI=
Subject key identifier: 5B:25:BE:4A:CE:2A:AA:00:BB:BD:01:F7:12:70:CD:19:2F:B1:B7:71
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 01856F42E2E148E059CA7EAB37F70AA5B1E4
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WyW-Ss4qqgC7vQH3EnDNGS-xt3E.roa
Signing time: Sun 01 Jan 2023 21:35:32 +0000
ROA not before: Sun 01 Jan 2023 21:35:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211747
IP address blocks: 2a0e:8f02:f01d::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e2:e1:48:e0:59:ca:7e:ab:37:f7:0a:a5:b1:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 21:35:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b25be4ace2aaa00bbbd01f71270cd192fb1b771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:06:05:dd:fd:17:5a:87:c6:94:e8:6b:e4:
df:c3:a7:1e:07:9b:7e:46:5e:bc:0c:8f:0b:15:bf:
38:4f:11:13:28:d7:e0:01:b2:3a:71:df:0a:e5:46:
90:1b:9a:98:c3:4c:d8:54:ae:82:3b:c6:43:ba:01:
85:ba:5f:6e:33:1c:eb:3d:39:b1:47:d5:0b:04:14:
a0:f5:4b:0c:8b:6c:48:4f:b8:ce:f7:b4:97:b7:c2:
bb:73:d3:27:cb:4d:9f:29:de:e6:88:93:07:ac:7a:
25:e9:d6:3e:63:87:e7:8f:fa:c7:9c:e2:be:47:32:
a1:99:47:71:9a:ac:78:df:99:fb:8f:9f:c7:5d:82:
ac:e0:8c:43:92:a9:7b:29:f3:5e:e6:df:ce:32:dc:
55:c0:9e:55:d5:5b:92:be:65:1a:c2:71:ec:88:66:
cd:48:ab:e7:27:6a:3e:31:03:ab:21:68:5b:14:06:
e4:03:08:7f:30:d9:8c:55:6c:98:29:72:ed:91:7d:
ce:20:87:82:bc:9d:94:0e:87:75:aa:4b:44:3b:f5:
74:54:3a:82:ef:cf:d5:1c:47:46:1d:1f:27:1e:c3:
58:6e:49:1c:9f:c7:c4:e7:cc:0b:36:e5:6e:2b:b0:
e2:d8:77:7a:98:52:fc:ea:aa:df:85:08:c5:2f:8e:
27:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:25:BE:4A:CE:2A:AA:00:BB:BD:01:F7:12:70:CD:19:2F:B1:B7:71
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/WyW-Ss4qqgC7vQH3EnDNGS-xt3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f01d::/48
Signature Algorithm: sha256WithRSAEncryption
a0:e1:5a:3e:1e:c7:bd:cc:5d:3b:40:06:83:16:a2:e1:94:ac:
8d:00:9b:5f:ff:88:ac:08:4f:c6:a5:38:a2:a1:1b:06:d3:ba:
01:0c:55:53:8c:90:85:d8:18:7c:6b:ed:5b:03:28:21:2b:39:
50:36:e0:9b:7f:45:3f:79:79:4a:7e:57:36:9a:e1:53:7f:77:
b1:7a:92:94:bf:4b:26:7e:11:fe:77:d5:b0:2e:2b:ae:3c:e7:
4c:fd:82:e9:a0:88:f9:3f:e1:e9:2c:0b:b4:24:f0:f8:db:21:
1e:b2:65:61:e5:e6:97:b3:9f:d7:e5:e0:77:ec:45:84:57:11:
b1:dc:04:18:49:b4:65:86:9f:b8:84:05:91:36:dc:f7:73:42:
9b:3f:f1:44:4a:fa:bf:42:f9:3b:bb:8b:41:ac:57:03:fd:17:
df:63:f1:e5:99:6f:7c:88:61:ba:95:f5:ac:f6:8f:3e:64:7d:
b7:4b:86:e7:29:3e:3a:2b:ee:27:ec:9f:e5:22:75:f1:1c:7d:
0c:c4:7d:b2:c5:ec:2f:f8:af:80:e5:1b:99:ce:f4:4f:5f:f9:
43:9d:2f:d5:84:29:8a:a3:89:06:ad:09:b0:e0:10:17:be:b8:
00:0f:24:b8:09:24:4e:c5:be:54:b1:f8:02:43:43:95:32:23:
c4:bd:2e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org