Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WDy_WWCQDmTlPuu2sdXiPVrFW98.roa
File: WDy_WWCQDmTlPuu2sdXiPVrFW98.roa (raw, json)
Hash identifier: m6Wr5+qcJZe/i3/YLvnPU6OwfCFl8eEuwt/A/JmRxfE=
Subject key identifier: 58:3C:BF:59:60:90:0E:64:E5:3E:EB:B6:B1:D5:E2:3D:5A:C5:5B:DF
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018DEBA6B9F0DF0EA971E6954AB0EDDAF8A3
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WDy_WWCQDmTlPuu2sdXiPVrFW98.roa
Signing time: Tue 27 Feb 2024 17:39:48 +0000
ROA not before: Tue 27 Feb 2024 17:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 5.144.179.0/24 maxlen: 24
5.144.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 May 2024 19:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:eb:a6:b9:f0:df:0e:a9:71:e6:95:4a:b0:ed:da:f8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Feb 27 17:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=583cbf5960900e64e53eebb6b1d5e23d5ac55bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:cb:6f:14:73:6c:09:d9:67:ff:cc:75:ea:33:
56:1b:9b:cf:d5:92:2e:4f:f4:a1:87:e1:56:aa:2d:
fe:83:d1:90:b5:f8:71:31:6b:f5:5d:5c:8a:ea:85:
92:f4:ab:9f:a6:9f:81:06:6a:d3:40:49:c1:93:4a:
61:a4:74:86:42:bc:b5:56:16:a9:69:39:0a:df:73:
35:eb:ba:65:dc:d8:bd:9c:3a:38:91:b5:e4:33:9b:
ef:95:31:9c:8c:b3:9f:ae:68:0d:00:0d:df:b7:b5:
64:cd:5f:c8:5b:8a:ee:ce:37:c4:b8:7c:e6:f1:5f:
76:01:32:a8:5c:c1:7f:d1:9d:1e:86:3b:78:b6:60:
ea:85:b9:fc:cc:03:e7:5a:e7:41:79:06:76:e4:72:
60:07:84:f8:46:8b:75:0b:49:30:63:02:76:c7:be:
b4:38:23:6a:b3:65:9b:2e:76:7b:b6:30:7a:00:71:
a6:e8:2a:db:69:6e:2d:62:9c:1f:22:fe:47:56:51:
56:80:12:ef:b1:a5:66:b6:a5:21:b5:b1:7c:a3:95:
67:69:dd:d2:a4:37:18:1f:e4:5b:7d:18:33:fb:6f:
1e:6c:ce:91:df:9a:61:5f:90:f5:0e:b4:3e:5f:68:
94:15:ff:ab:d6:2a:ea:49:ff:2a:4d:c1:41:13:7e:
32:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3C:BF:59:60:90:0E:64:E5:3E:EB:B6:B1:D5:E2:3D:5A:C5:5B:DF
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WDy_WWCQDmTlPuu2sdXiPVrFW98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.179.0/24
5.144.181.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:11:11:d9:31:32:15:68:b7:7e:ff:7f:fa:52:8e:40:60:8d:
f1:e6:5f:e9:3a:ff:7a:72:b7:5b:e4:dc:38:79:57:2b:50:59:
38:39:d6:7a:91:f3:27:c3:7c:3e:57:e3:68:ca:1a:51:03:7d:
a0:f4:84:5c:50:45:46:60:a7:e4:bf:48:04:60:c8:67:c4:ce:
d8:e2:c9:e3:2f:1e:26:8d:a3:5e:6e:d0:37:05:f9:0b:34:77:
87:90:94:b6:c1:55:83:2f:1c:ce:6d:7c:f4:5f:91:07:7b:b6:
6e:73:20:45:2d:e5:74:f3:9f:ec:ee:8c:91:03:24:b6:d4:73:
2a:3c:09:43:e4:b9:11:3e:a0:69:a0:95:41:1c:43:ce:c4:6e:
7f:1c:5f:4b:52:11:32:af:4b:02:1a:4e:e0:c4:14:55:6b:51:
a7:54:ea:94:ac:f9:91:58:f4:e7:31:91:32:0b:02:bb:56:fa:
b4:d8:a9:ab:cc:c1:e3:9b:c2:9f:39:09:4b:15:90:f1:64:ed:
c2:12:f0:b7:78:22:ac:e1:41:59:be:42:2e:80:7d:5a:2c:25:
a3:c2:71:d7:de:3d:25:3b:b7:93:c8:fb:1a:b6:28:e1:e1:51:
4c:a7:30:bd:82:50:9f:44:91:d2:ff:70:ac:65:8c:e1:f3:3f:
18:0e:75:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:23:52 2024 by rpki-client on console-fra.rpki-client.org