Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WuycIBpbtIZ7rX5WctHY2y8VS_o.roa
File: WuycIBpbtIZ7rX5WctHY2y8VS_o.roa (raw, json)
Hash identifier: Fe9ZsVucRYC3SihghJXDQMIjR73kmxv8ycd+8Rxb7sQ=
Subject key identifier: 5A:EC:9C:20:1A:5B:B4:86:7B:AD:7E:56:72:D1:D8:DB:2F:15:4B:FA
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 018FD4C7FEC9A830C18B02B044FF40CB8EC5
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WuycIBpbtIZ7rX5WctHY2y8VS_o.roa
Signing time: Sat 01 Jun 2024 17:10:27 +0000
ROA not before: Sat 01 Jun 2024 17:10:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 01 Jun 2024 18:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d4:c7:fe:c9:a8:30:c1:8b:02:b0:44:ff:40:cb:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jun 1 17:10:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5aec9c201a5bb4867bad7e5672d1d8db2f154bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:ad:1c:ae:20:ea:26:ae:e0:9a:cf:5d:bf:
0d:07:2b:2a:33:61:cc:62:37:17:c6:39:7d:d8:d7:
62:f0:0e:ab:d3:90:8a:cb:dd:4e:d0:88:18:b9:48:
4a:cf:1e:49:5d:f5:23:95:ec:e2:4b:65:a2:7f:85:
b0:27:e9:fb:04:c9:bc:1a:ec:86:23:75:9c:28:35:
01:3c:88:f7:76:5d:d3:d9:0a:e1:a0:77:11:60:ed:
d3:db:90:c5:76:f8:84:cc:5d:2b:7e:b6:50:c7:08:
d0:c2:1b:53:cc:7a:5e:9b:ba:1b:98:f2:4f:e5:e5:
84:6c:15:32:99:0c:04:ff:a4:2d:d8:8a:4f:c7:49:
3e:a9:7a:2f:ac:55:a9:15:62:06:21:8e:24:9b:34:
6a:17:bc:11:38:7c:89:0d:a6:41:1e:86:7e:d7:91:
3b:82:43:86:9e:66:83:e8:3f:71:80:bd:44:73:cd:
98:e2:be:3f:8d:96:5d:2e:da:3b:07:40:6c:55:f8:
84:ca:e6:2c:20:0c:a4:fc:9d:d2:aa:2b:57:ab:59:
b6:49:2b:81:bc:b8:03:d0:06:e4:55:37:85:bb:34:
6a:c8:60:47:1f:9c:b0:22:5b:b5:0f:4e:3f:1a:bc:
ce:ea:95:ca:ca:3f:5c:68:15:d9:e9:d9:29:fe:68:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EC:9C:20:1A:5B:B4:86:7B:AD:7E:56:72:D1:D8:DB:2F:15:4B:FA
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/WuycIBpbtIZ7rX5WctHY2y8VS_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
8a:bf:25:dc:de:cf:53:67:b1:3d:d4:69:b8:27:c2:58:a8:58:
79:ab:b3:ba:aa:a5:38:e2:88:d1:c5:db:7e:9b:85:d1:f5:71:
b1:2c:83:07:65:27:a1:8b:68:e2:7e:71:29:a4:28:c1:3b:07:
5e:f1:b0:f6:d4:93:3b:19:07:f0:8e:61:d9:f7:9d:3e:90:96:
5b:50:14:1d:e1:96:c7:1a:13:5e:19:46:9f:0d:fb:5d:16:46:
6e:de:43:50:25:9f:87:23:b9:74:fc:6f:a6:60:60:66:6e:99:
e1:09:3b:05:25:ec:af:a5:29:c5:01:39:b5:16:7a:d7:af:9a:
32:33:88:21:ea:ff:8c:bd:9a:63:c0:df:f0:3b:32:5e:57:4f:
33:75:8d:f0:1d:c5:77:e1:ac:d7:41:e4:cc:eb:b9:2b:6b:05:
9a:fa:71:9d:0b:3c:10:b4:2d:0d:20:13:24:98:f2:e7:53:b2:
d9:92:44:f8:69:4e:2b:f4:cb:9b:3c:b7:0b:06:9b:f5:cb:b2:
72:fc:0a:99:90:c9:48:6d:cb:b5:8f:54:40:53:49:e7:5b:61:
41:d2:23:db:a2:95:21:fd:d9:b3:80:d6:2f:46:8e:49:70:f8:
97:a7:54:39:d4:8c:37:93:c8:54:b2:c4:a7:34:59:09:01:7b:
c7:ec:de:d0
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY/Ux/7JqDDBiwKwRP9Ay47FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNjIwNDE1ZDI0OTBhNWVjM2Y2OTI1YjlmNzkwNDBlOGUy
MmRkYmYwHhcNMjQwNjAxMTcxMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWVjOWMyMDFhNWJiNDg2N2JhZDdlNTY3MmQxZDhkYjJmMTU0YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsomtHK4g6iau4JrPXb8NBysqM2HM
YjcXxjl92Ndi8A6r05CKy91O0IgYuUhKzx5JXfUjleziS2Wif4WwJ+n7BMm8GuyG
I3WcKDUBPIj3dl3T2QrhoHcRYO3T25DFdviEzF0rfrZQxwjQwhtTzHpem7obmPJP
5eWEbBUymQwE/6Qt2IpPx0k+qXovrFWpFWIGIY4kmzRqF7wROHyJDaZBHoZ+15E7
gkOGnmaD6D9xgL1Ec82Y4r4/jZZdLto7B0BsVfiEyuYsIAyk/J3SqitXq1m2SSuB
vLgD0AbkVTeFuzRqyGBHH5ywIlu1D04/GrzO6pXKyj9caBXZ6dkp/mjOvwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFrsnCAaW7SGe61+VnLR2NsvFUv6MB8GA1UdIwQY
MBaAFFJiBBXSSQpew/aSW595BA6OIt2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYt
ODgxNDg4ZmZkYmIwLzEvV3V5Y0lCcGJ0SVo3clg1V2N0SFkyeThWU19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wOTgzN2MtOThmMy00YzlmLWFlYmYtODgxNDg4ZmZkYmIw
LzEvVW1JRUZkSkpDbDdEOXBKYm4za0VEbzRpM2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAIq/Jdzez1NnsT3Uabgn
wlioWHmrs7qqpTjiiNHF236bhdH1cbEsgwdlJ6GLaOJ+cSmkKME7B17xsPbUkzsZ
B/COYdn3nT6QlltQFB3hlscaE14ZRp8N+10WRm7eQ1Aln4cjuXT8b6ZgYGZumeEJ
OwUl7K+lKcUBObUWetevmjIziCHq/4y9mmPA3/A7Ml5XTzN1jfAdxXfhrNdB5Mzr
uStrBZr6cZ0LPBC0LQ0gEySY8udTstmSRPhpTiv0y5s8twsGm/XLsnL8CpmQyUht
y7WPVEBTSedbYUHSI9uilSH92bOA1i9Gjklw+JenVDnUjDeTyFSyxKc0WQkBe8fs
3tA=
-----END CERTIFICATE-----
Generated at Thu Mar 13 20:16:52 2025 by rpki-client