Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WG_grYfIfrXBR6kPg0r_5VklnSc.roa
File: WG_grYfIfrXBR6kPg0r_5VklnSc.roa (raw, json)
Hash identifier: njCEbxx1wPE6rkhJlkHtIMTQ3WcYkX4xIWbVjLCCiUw=
Subject key identifier: 58:6F:E0:AD:87:C8:7E:B5:C1:47:A9:0F:83:4A:FF:E5:59:25:9D:27
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0190103AE94E898CD2DD18E760A8B1D9AAD5
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WG_grYfIfrXBR6kPg0r_5VklnSc.roa
Signing time: Thu 13 Jun 2024 06:13:34 +0000
ROA not before: Thu 13 Jun 2024 06:13:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jun 2024 12:51:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:3a:e9:4e:89:8c:d2:dd:18:e7:60:a8:b1:d9:aa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 13 06:13:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=586fe0ad87c87eb5c147a90f834affe559259d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:37:14:ca:3a:d7:6a:5b:93:cb:04:22:45:21:
23:b4:83:f1:c4:63:4f:a4:b4:45:89:5f:5f:3b:aa:
fe:2e:6a:ee:30:80:c5:92:a1:cd:42:d4:1b:af:01:
19:15:b8:c3:29:ff:42:86:38:bf:3a:84:ec:1b:8b:
75:ed:79:44:db:96:13:48:ea:4f:95:08:c3:95:4b:
d6:09:3f:86:7f:d7:1b:db:ca:67:d2:9b:21:ac:00:
ed:24:2a:ce:bd:72:02:23:f4:77:95:9f:94:50:ef:
5c:ee:0b:14:f1:23:d8:7d:f9:aa:fb:9d:b6:8b:29:
a7:5c:6b:cf:d6:d1:77:e2:f7:47:97:d7:2f:c7:b7:
7a:16:5b:ca:36:05:42:ac:93:77:62:7c:cd:e2:bf:
a0:0b:78:a4:d3:31:22:56:0c:0d:88:0d:08:d7:f5:
e4:78:48:fe:57:08:4e:76:62:fe:1e:96:4e:ee:06:
71:00:08:cd:cb:51:db:b8:64:6c:35:68:ed:46:37:
0b:67:0b:5b:d6:8b:ad:ca:fc:00:ec:49:4c:c4:c7:
a9:ec:d2:a4:0c:27:40:a1:f9:65:9e:0f:89:96:5e:
59:5f:db:e4:4f:77:0d:8f:03:57:a0:77:93:22:1b:
9c:d8:0c:70:29:b1:9a:b6:11:b5:21:7c:1e:c8:20:
be:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:E0:AD:87:C8:7E:B5:C1:47:A9:0F:83:4A:FF:E5:59:25:9D:27
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/WG_grYfIfrXBR6kPg0r_5VklnSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:1b:d0:9b:86:1a:fa:2c:bc:d3:4b:84:01:91:c1:0c:f0:43:
04:6d:7c:f0:c9:25:f4:6a:cc:36:ac:86:54:6a:c1:00:22:64:
ec:c0:f2:c6:04:cf:21:7f:ff:b1:3b:64:62:27:a2:d7:1b:d3:
d1:bc:36:a2:d0:df:cb:72:9d:2a:2c:46:0e:00:25:28:b6:5e:
8b:da:cd:ac:f1:1e:0c:2b:66:71:b0:8f:9d:d9:df:3a:29:d0:
24:9b:c3:e0:42:48:41:d5:d2:13:be:f6:0c:c6:36:29:5d:75:
5c:ac:a6:28:b7:82:74:92:39:84:e8:74:78:8c:b7:9e:9c:1b:
2d:d8:cc:35:ad:36:d3:e4:e7:05:aa:dd:43:c4:f0:9c:0c:a2:
c2:23:51:c0:45:ff:4e:04:18:65:1c:e2:10:94:3d:7e:78:fc:
e4:20:b7:cb:ef:66:78:e7:14:ad:36:db:cd:d9:42:de:54:ec:
80:81:05:57:54:87:21:f6:2d:b9:82:37:a4:37:b3:df:f2:d0:
57:3f:8a:34:81:a1:2b:ec:2c:8b:a5:cc:4f:60:0c:18:e0:15:
3d:98:d6:a0:c8:74:d9:30:f0:25:b6:75:df:ab:63:84:76:67:
a7:57:70:f4:c8:b5:ff:b8:34:d0:82:d7:95:6d:80:c8:51:35:
c2:01:c5:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 19:38:34 2024 by rpki-client on console-ams.rpki-client.org