Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WUAZ0dDDBMtJhQPltsdNIrPEMiw.roa
File: WUAZ0dDDBMtJhQPltsdNIrPEMiw.roa (raw, json)
Hash identifier: l927XToVeqIilMegx+f+2mYhRWSYu9mX1IZxtVG2XCE=
Subject key identifier: 59:40:19:D1:D0:C3:04:CB:49:85:03:E5:B6:C7:4D:22:B3:C4:32:2C
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018CCFF1049BCEF212E1B89293D365FD444F
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WUAZ0dDDBMtJhQPltsdNIrPEMiw.roa
Signing time: Wed 03 Jan 2024 15:28:48 +0000
ROA not before: Wed 03 Jan 2024 15:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216145
IP address blocks: 5.144.183.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 21:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:f1:04:9b:ce:f2:12:e1:b8:92:93:d3:65:fd:44:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Jan 3 15:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=594019d1d0c304cb498503e5b6c74d22b3c4322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:0c:1e:8a:38:e9:95:da:ed:1d:2b:b9:b8:
c4:55:63:cb:25:46:75:bc:7b:b6:ba:dd:f1:7f:41:
30:b8:b3:08:a0:a7:42:a5:fa:04:a6:c3:92:a4:f6:
54:88:3a:72:44:34:97:b7:b5:e5:16:6e:ff:07:24:
fb:4c:29:7f:57:ac:fb:8b:9b:42:5d:e9:90:18:23:
5c:7d:9e:14:34:ac:01:1e:c5:79:22:a3:72:e5:62:
c2:ec:b8:17:5a:e8:5a:31:0d:2b:f9:bf:40:31:78:
bf:ca:67:66:c7:61:96:c0:f3:ac:f2:4a:8d:49:5e:
ba:02:f2:23:73:e8:19:ec:63:1d:29:f4:64:03:ef:
ee:04:fc:99:3b:b7:d8:65:75:5d:7e:0e:f4:1d:ef:
fa:00:f7:1b:b5:1e:c3:1b:82:60:7e:82:71:71:54:
7e:79:e1:42:6d:ed:13:20:25:08:a1:02:95:48:bd:
b0:60:c7:6b:f9:83:b1:7e:2e:6a:01:0d:4a:40:23:
d1:e1:cd:54:b6:1a:ef:b8:fc:fb:7f:b1:4f:58:a3:
b4:21:95:16:f3:ff:39:ac:4d:ac:1b:c4:60:f0:00:
99:3f:0d:84:cd:4b:e1:bd:df:f2:b2:31:be:17:39:
ec:2b:16:e9:e9:fb:c7:01:89:31:e5:1e:62:6e:dc:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:40:19:D1:D0:C3:04:CB:49:85:03:E5:B6:C7:4D:22:B3:C4:32:2C
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/WUAZ0dDDBMtJhQPltsdNIrPEMiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.183.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ea:7a:69:2c:32:db:95:fa:b7:33:22:9d:87:19:77:61:2f:
42:ec:6d:cb:54:62:0e:d2:ea:95:db:a4:68:9c:6d:31:5f:51:
df:f0:4c:b4:46:e4:c8:3a:7c:6e:da:8c:a5:30:a9:1f:33:92:
6a:4a:68:be:b4:a6:1f:68:60:62:fb:a7:50:ce:0a:4a:40:80:
05:0e:d9:da:94:6c:eb:e0:04:41:83:4b:28:2d:0c:8e:65:56:
dc:6e:d8:73:ed:1c:87:8a:e1:b4:5a:19:03:8d:82:fa:d5:10:
25:d3:30:04:0a:d5:3d:52:28:d5:bc:62:08:86:60:08:39:00:
1d:7c:14:4c:4b:e6:b2:0d:63:21:9a:96:d4:bf:0d:f8:fb:29:
97:e8:42:09:b8:44:d0:70:cf:9c:ba:80:09:f0:4b:b2:9a:01:
73:2f:27:31:b8:70:dc:c1:ed:7e:88:27:af:e6:c7:4c:22:da:
ea:9d:37:5e:58:14:6f:d6:3b:41:72:84:c6:bc:bc:2a:ac:fd:
0e:f7:0b:c2:cc:fa:2d:8f:5c:b2:0b:61:59:08:41:c1:6c:fa:
c1:b6:4b:4a:af:3b:f4:11:a7:97:b3:f9:e8:04:36:ab:d3:aa:
a4:6a:22:f9:07:a8:59:1f:69:e9:21:07:a0:0e:69:90:65:23:
8a:72:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:15 2024 by rpki-client on console-ams.rpki-client.org