Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WP94vh1VzLEU3548apeDFwP0pZg.roa
File: WP94vh1VzLEU3548apeDFwP0pZg.roa (raw, json)
Hash identifier: 0HdsYaTcZAUPt/FRsyqHijHeHZ2QhqRYgwT+LJONa+8=
Subject key identifier: 58:FF:78:BE:1D:55:CC:B1:14:DF:9E:3C:6A:97:83:17:03:F4:A5:98
Certificate issuer: /CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Certificate serial: 018FE203E1338C1719E4B09937E56C388632
Authority key identifier: 5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WP94vh1VzLEU3548apeDFwP0pZg.roa
Signing time: Tue 04 Jun 2024 06:50:56 +0000
ROA not before: Tue 04 Jun 2024 06:50:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5400
IP address blocks: 2a0c:8480::/30 maxlen: 30
Validation: Failed, certificate revoked on Thu 02 Jan 2025 17:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e2:03:e1:33:8c:17:19:e4:b0:99:37:e5:6c:38:86:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ac3e2bdb63296d5f0f3afe95bd1545117a5b149
Validity
Not Before: Jun 4 06:50:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58ff78be1d55ccb114df9e3c6a97831703f4a598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:61:68:ae:44:6c:b4:43:de:31:1a:84:ab:
bc:14:f1:8b:78:e4:3f:13:ae:4b:cc:89:d2:36:4a:
48:da:98:7e:c8:9c:25:1c:c5:70:17:02:76:e4:e5:
21:05:e8:1a:08:13:93:c2:0d:84:f5:3e:5d:5c:9c:
0c:65:a7:11:aa:f2:58:83:5c:f1:0d:be:c6:9d:db:
f7:09:a1:ea:b7:d7:57:11:7f:3e:08:15:25:6c:2b:
ff:ea:04:63:01:29:63:b9:8d:3f:4c:68:5f:2d:42:
92:4c:27:36:b8:aa:6f:5c:9a:06:8e:21:1c:70:cb:
94:89:f8:3d:fb:37:6d:df:0d:79:84:a2:7a:bc:16:
ec:e1:73:9d:9a:b8:49:76:60:f8:82:09:3e:ce:fc:
51:dc:0a:b2:63:bd:de:d4:87:14:ae:89:71:c1:e6:
07:68:c7:03:35:62:9c:41:c2:f7:82:b7:dd:c6:6f:
20:50:5b:3b:54:fd:c2:99:51:fd:b8:55:f7:1e:f5:
74:ec:fc:f6:b4:1c:fe:bd:09:9d:2c:64:e2:cf:2d:
94:71:00:5c:c9:95:32:13:ba:8d:ce:3b:1d:cf:7e:
ec:eb:63:70:28:dc:fd:71:db:a4:b1:63:1e:79:fa:
f8:7e:18:e6:c3:ab:9a:b4:1e:ed:61:83:dd:f6:bb:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:78:BE:1D:55:CC:B1:14:DF:9E:3C:6A:97:83:17:03:F4:A5:98
X509v3 Authority Key Identifier:
keyid:5A:C3:E2:BD:B6:32:96:D5:F0:F3:AF:E9:5B:D1:54:51:17:A5:B1:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsPivbYyltXw86_pW9FUURelsUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WP94vh1VzLEU3548apeDFwP0pZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/be0715-3bb2-44f4-bbf6-240698fbddff/1/WsPivbYyltXw86_pW9FUURelsUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:8480::/30
Signature Algorithm: sha256WithRSAEncryption
13:a8:db:74:68:9f:5d:97:04:60:91:b2:f5:75:7d:46:97:ba:
53:1d:57:59:12:f8:a6:75:fc:ec:a7:18:ff:8e:3d:d1:40:65:
f3:59:64:02:01:28:bf:2b:49:6d:7c:f4:71:3a:69:c5:d2:7f:
ee:84:b9:41:b7:8d:6e:28:fe:08:92:a9:f3:e9:10:92:f4:d1:
ec:6f:05:6f:4b:0c:2e:87:59:f8:6c:cd:40:a9:62:af:19:64:
b5:fd:87:1e:94:15:58:e0:fa:5c:e8:d5:80:31:06:4a:19:5b:
5e:3c:7d:63:9c:f8:b2:bb:0c:2d:fa:b2:19:38:30:f0:89:89:
e7:54:4b:b9:e5:e5:b5:c7:1d:e9:63:2b:5c:71:28:3a:42:3a:
89:2d:9d:d6:f1:b0:96:e9:ea:fa:a3:2b:00:d4:a4:2c:91:31:
ed:dd:70:57:8d:fd:2e:f1:eb:26:22:be:bb:ff:10:a6:a2:45:
30:a7:f3:c6:83:7f:fe:a3:06:4e:c2:8c:13:11:0d:3e:87:15:
28:c5:16:87:00:fa:36:c1:6c:7c:2f:19:e2:c3:d8:c4:92:ff:
1c:a3:80:de:ea:16:dc:37:18:04:c3:e6:57:d6:b1:19:15:30:
67:0f:02:17:9f:b0:8d:16:ad:7e:5c:3f:e4:2d:db:d0:a0:80:
dd:70:e9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:37:44 2025 by rpki-client