Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WWGHEVaqf2BWmFUX2w99_CGjrfg.roa
File: WWGHEVaqf2BWmFUX2w99_CGjrfg.roa (raw, json)
Hash identifier: V0NqOp25uSDvIG4PJau1cDDReYp+sO/7B8YU3ZWQj1Q=
Subject key identifier: 59:61:87:11:56:AA:7F:60:56:98:55:17:DB:0F:7D:FC:21:A3:AD:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AF04094B196324F47DF9843F495E7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WWGHEVaqf2BWmFUX2w99_CGjrfg.roa
Signing time: Tue 24 Jan 2023 16:09:48 +0000
ROA not before: Tue 24 Jan 2023 16:09:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210980
IP address blocks: 2a0e:b107:ae0::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:f0:40:94:b1:96:32:4f:47:df:98:43:f4:95:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5961871156aa7f6056985517db0f7dfc21a3adf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:49:a2:ac:94:81:f4:ca:3c:03:30:fd:4f:
cd:48:c3:1a:d0:47:ee:3e:06:59:fb:52:0c:b4:59:
ea:e4:c8:ed:f1:4e:5a:cc:53:23:29:33:65:25:2e:
2d:03:6f:ab:fd:83:e7:01:58:b8:84:b0:c7:ce:c8:
9c:78:4c:09:14:ab:91:1d:7f:c1:df:3c:b3:e7:d5:
58:df:e1:dd:92:76:6b:85:77:a2:7e:ed:ef:c2:6d:
19:49:d9:2f:4f:ad:9b:a8:d5:b7:9e:fa:25:02:eb:
9a:65:7b:a3:6a:57:79:dc:7c:7f:6f:c9:5c:44:a3:
a2:df:ea:f9:37:19:a2:c9:93:41:d6:8f:7b:59:6e:
e4:23:24:34:2b:50:b2:7c:05:ec:52:47:02:bd:db:
01:66:ea:f5:96:b0:8b:a7:14:54:81:b7:14:c0:5d:
d8:e9:e4:a8:5e:b3:94:1d:27:a6:3b:20:0d:5f:83:
a1:d3:6f:ef:a1:e3:0b:2c:0b:df:d6:55:9d:77:f4:
55:fd:79:72:64:02:09:08:66:64:6c:ae:15:dc:26:
e4:45:4c:d9:7a:46:a4:f6:27:d1:57:4b:18:2a:f0:
26:a1:6c:27:99:2f:57:7e:ec:de:7d:68:88:eb:35:
c0:11:8a:a6:b1:65:82:53:d3:9d:d8:41:1a:31:f0:
65:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:61:87:11:56:AA:7F:60:56:98:55:17:DB:0F:7D:FC:21:A3:AD:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WWGHEVaqf2BWmFUX2w99_CGjrfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:ae0::/44
Signature Algorithm: sha256WithRSAEncryption
41:c2:d8:0b:51:8b:0d:a8:56:64:00:7b:5f:91:e6:de:1c:e6:
59:2b:cd:40:4a:4d:b1:3a:a0:4b:45:8c:b1:8a:80:0d:83:f2:
8c:ab:d9:e0:96:6a:7d:39:ce:b6:00:24:35:10:c9:70:a2:52:
aa:95:83:a4:19:d6:7e:41:10:78:ac:fc:93:42:f8:44:71:8f:
b3:d8:9e:c5:a1:74:77:c9:92:ff:4b:75:14:38:65:41:c5:3e:
fc:e0:79:eb:c9:aa:cd:cf:4c:f0:f0:94:ca:03:45:3a:90:b2:
c2:14:a0:ad:39:d5:21:3e:f2:c7:f4:13:0a:4f:d1:53:36:44:
0f:7f:a3:f0:8b:d2:a8:2a:19:bf:75:35:fa:eb:37:95:b2:2e:
9e:ae:09:36:bb:90:d2:6f:bb:ab:76:04:2b:b3:c8:c2:16:87:
a2:15:36:dd:0b:06:16:6a:ab:2c:28:3e:cc:ef:2c:46:6f:4b:
47:53:41:80:2f:b4:9a:ca:2e:99:3b:23:66:83:0d:9a:64:d6:
31:d5:c9:5f:0c:de:de:56:f0:5e:e7:22:56:27:f6:7a:87:de:
07:74:f5:cd:41:57:01:a1:76:c1:67:c2:e6:da:12:3f:f0:eb:
e4:5f:e1:c6:fa:04:6a:74:02:f7:38:49:0f:18:d5:a8:79:ae:
26:64:43:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:31 2024 by rpki-client on console-fra.rpki-client.org