Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WbCP5qks7S05NQtafL7GwkFtZyI.roa
File: WbCP5qks7S05NQtafL7GwkFtZyI.roa (raw, json)
Hash identifier: qIBzDj+pmRAQ8sWVucHAuLLNDQh2fS05to/cdHsSgxc=
Subject key identifier: 59:B0:8F:E6:A9:2C:ED:2D:39:35:0B:5A:7C:BE:C6:C2:41:6D:67:22
Certificate issuer: /CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
Certificate serial: 0190A7CE9E42BED4C31F6B7E067F94BADB7E
Authority key identifier: 58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WbCP5qks7S05NQtafL7GwkFtZyI.roa
Signing time: Fri 12 Jul 2024 16:37:34 +0000
ROA not before: Fri 12 Jul 2024 16:37:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3257
IP address blocks: 193.24.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:ce:9e:42:be:d4:c3:1f:6b:7e:06:7f:94:ba:db:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58153fb20b9c8f8ccf6c398f4d61b21707e1bbe2
Validity
Not Before: Jul 12 16:37:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b08fe6a92ced2d39350b5a7cbec6c2416d6722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:6b:4c:d0:a3:41:c5:a5:e4:ee:89:d3:16:48:
95:47:d9:f8:16:1d:16:10:14:10:bd:40:d3:b4:15:
ec:91:87:0e:f8:cb:2c:d9:4f:d0:c6:0d:5d:5a:85:
0f:be:13:5d:5e:fa:3b:14:8d:dd:ae:ef:72:25:62:
a4:b5:2c:63:90:8f:6d:f2:02:50:bd:b2:e7:dc:0c:
5e:fa:d8:30:b9:f6:29:14:6f:d7:34:60:a7:79:2c:
a4:10:06:e6:1b:b4:c5:7e:c0:9c:72:f1:65:b9:71:
e1:00:bf:15:77:3c:c2:b2:22:45:d3:4c:d7:b7:d7:
16:45:1c:0b:11:49:3f:2e:ce:92:a8:e2:6c:b5:d2:
f4:47:1a:5a:d8:0f:7f:89:61:79:bb:48:38:25:34:
d5:8a:a7:5d:6e:99:e8:fc:1c:9c:2b:cd:25:c3:84:
db:5e:51:00:1a:f2:c2:53:ab:bd:84:8b:18:7a:69:
bd:9c:f6:5b:19:95:04:02:64:86:23:e5:7e:7f:8e:
81:13:ff:55:cf:b9:0c:54:e6:3f:56:5d:1c:82:5b:
68:65:71:3b:ac:71:7d:fa:9b:fb:ae:2b:c5:77:e2:
01:30:2b:a1:e8:ae:b9:dc:31:53:5c:0c:00:e9:15:
0c:48:74:42:03:2e:a2:ef:07:51:4f:3c:00:e5:5c:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B0:8F:E6:A9:2C:ED:2D:39:35:0B:5A:7C:BE:C6:C2:41:6D:67:22
X509v3 Authority Key Identifier:
keyid:58:15:3F:B2:0B:9C:8F:8C:CF:6C:39:8F:4D:61:B2:17:07:E1:BB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBU_sgucj4zPbDmPTWGyFwfhu-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WbCP5qks7S05NQtafL7GwkFtZyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/4901f3-8934-4e90-aaf7-6761d2784d8d/1/WBU_sgucj4zPbDmPTWGyFwfhu-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.24.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:8f:15:04:ae:6b:dc:c7:90:2f:30:f1:de:ab:65:23:5c:8d:
9e:4e:25:9e:cb:e3:82:1f:00:dc:c6:cf:e9:04:22:d6:09:4a:
04:c8:67:05:a1:bf:49:c2:4f:83:1e:dd:dd:f5:e5:69:5c:24:
d6:8b:8e:da:51:5d:62:09:1d:ed:c2:f4:18:5f:7c:2e:d1:e8:
0c:6e:b1:d5:ed:82:3f:ec:00:92:e7:89:7d:af:a1:2f:d0:27:
71:d5:75:b7:6a:78:16:fb:48:a4:3e:66:f0:e5:9c:86:73:b2:
08:87:ad:7d:90:66:4c:45:cd:d5:b1:56:89:63:59:1c:d3:cf:
27:a9:c0:a9:34:f0:70:73:0a:bf:39:05:bd:d0:30:eb:9e:9d:
45:9c:c4:c3:76:dd:a6:77:8b:97:21:45:41:af:8e:e0:6e:65:
e6:e6:e4:5a:07:04:4b:1b:9b:de:3e:2a:16:e4:c7:13:06:1a:
7d:d0:8f:b0:cb:bf:7c:ef:0c:a1:11:ed:63:73:79:8a:3d:29:
2c:be:eb:cf:66:f7:4a:57:d5:8a:ce:be:75:a2:35:ae:a1:cf:
7a:c3:74:6b:0c:15:bb:db:b3:20:f3:2c:2d:a5:76:71:c3:a6:
d5:0d:94:94:a0:0e:35:89:43:ba:b8:3b:35:01:ff:71:ea:df:
ec:dd:e0:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCnzp5CvtTDH2t+Bn+Uutt+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTUzZmIyMGI5YzhmOGNjZjZjMzk4ZjRkNjFiMjE3MDdl
MWJiZTIwHhcNMjQwNzEyMTYzNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWIwOGZlNmE5MmNlZDJkMzkzNTBiNWE3Y2JlYzZjMjQxNmQ2NzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52tM0KNBxaXk7onTFkiVR9n4Fh0W
EBQQvUDTtBXskYcO+Mss2U/Qxg1dWoUPvhNdXvo7FI3dru9yJWKktSxjkI9t8gJQ
vbLn3Axe+tgwufYpFG/XNGCneSykEAbmG7TFfsCccvFluXHhAL8VdzzCsiJF00zX
t9cWRRwLEUk/Ls6SqOJstdL0Rxpa2A9/iWF5u0g4JTTViqddbpno/BycK80lw4Tb
XlEAGvLCU6u9hIsYemm9nPZbGZUEAmSGI+V+f46BE/9Vz7kMVOY/Vl0cgltoZXE7
rHF9+pv7rivFd+IBMCuh6K653DFTXAwA6RUMSHRCAy6i7wdRTzwA5VzezQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFmwj+apLO0tOTULWny+xsJBbWciMB8GA1UdIwQY
MBaAFFgVP7ILnI+Mz2w5j01hshcH4bviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny80OTAxZjMtODkzNC00ZTkwLWFhZjct
Njc2MWQyNzg0ZDhkLzEvV2JDUDVxa3M3UzA1TlF0YWZMN0d3a0Z0WnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny80OTAxZjMtODkzNC00ZTkwLWFhZjctNjc2MWQyNzg0ZDhk
LzEvV0JVX3NndWNqNHpQYkRtUFRXR3lGd2ZodS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRh/MA0G
CSqGSIb3DQEBCwUAA4IBAQBujxUErmvcx5AvMPHeq2UjXI2eTiWey+OCHwDcxs/p
BCLWCUoEyGcFob9Jwk+DHt3d9eVpXCTWi47aUV1iCR3twvQYX3wu0egMbrHV7YI/
7ACS54l9r6Ev0Cdx1XW3angW+0ikPmbw5ZyGc7IIh619kGZMRc3VsVaJY1kc088n
qcCpNPBwcwq/OQW90DDrnp1FnMTDdt2md4uXIUVBr47gbmXm5uRaBwRLG5vePioW
5McTBhp90I+wy7987wyhEe1jc3mKPSksvuvPZvdKV9WKzr51ojWuoc96w3RrDBW7
27Mg8ywtpXZxw6bVDZSUoA41iUO6uDs1Af9x6t/s3eCB
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:12 2025 by rpki-client