Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/WsXAKybx_i67wRJkfIcMdiyRgzA.roa
File: WsXAKybx_i67wRJkfIcMdiyRgzA.roa (raw, json)
Hash identifier: RgRYXZvi39D/P920xEVl72ToFTsEyYNwUfIzUXDU/qY=
Subject key identifier: 5A:C5:C0:2B:26:F1:FE:2E:BB:C1:12:64:7C:87:0C:76:2C:91:83:30
Certificate issuer: /CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Certificate serial: 01856F66E738D0328369FCEF42C31377A72A
Authority key identifier: 8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/WsXAKybx_i67wRJkfIcMdiyRgzA.roa
Signing time: Sun 01 Jan 2023 22:14:52 +0000
ROA not before: Sun 01 Jan 2023 22:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 129.132.0.0/16 maxlen: 16
192.33.87.0/24 maxlen: 24
192.33.88.0/21 maxlen: 24
192.33.96.0/21 maxlen: 21
192.33.104.0/22 maxlen: 22
192.33.108.0/23 maxlen: 23
82.130.64.0/18 maxlen: 18
192.33.110.0/24 maxlen: 24
2001:67c:10ec::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:e7:38:d0:32:83:69:fc:ef:42:c3:13:77:a7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da824bc631ccee1ae99d7103afd2dc74f1e29c4
Validity
Not Before: Jan 1 22:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac5c02b26f1fe2ebbc112647c870c762c918330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5d:9f:5b:cd:1d:71:4c:87:01:39:07:d8:c5:
bc:e8:4d:ae:c8:79:3a:90:ba:b0:4b:05:18:04:2b:
ff:3d:14:95:2c:4d:1b:2b:ca:3f:a1:52:3b:96:90:
43:ed:4c:36:18:d2:13:41:50:3b:4c:3c:99:80:bb:
f8:21:45:13:0d:73:37:f7:e4:05:c3:8b:49:bf:9a:
74:03:1d:49:ab:88:63:26:75:84:f6:9d:d1:9c:cb:
96:21:ae:01:5f:15:ea:79:f9:8e:70:02:0a:20:fc:
47:3e:df:0d:47:84:b8:66:cc:a7:26:7a:c5:4e:a5:
e7:fa:54:55:35:f7:be:45:a6:36:40:5d:dd:ce:fe:
93:7a:62:d8:01:5f:57:09:de:28:1c:7c:5c:7e:c9:
f7:d5:2e:34:a8:3a:a0:e4:3d:7d:eb:90:b9:f0:ab:
c0:a5:c2:af:5b:bb:b8:b3:10:26:df:a8:d2:71:90:
fd:af:44:b1:32:0b:0c:8d:d9:6f:3d:fd:85:95:04:
3a:8c:fe:b6:61:1e:e9:cd:94:cb:b1:1b:aa:8a:7b:
3e:57:cc:a0:a7:7f:1f:34:10:5e:50:7d:10:cb:38:
c2:2d:44:7e:fb:35:49:a4:2b:34:f4:d3:ae:b7:80:
15:14:01:4f:e1:9b:3e:1b:d7:5d:c4:0e:28:55:53:
4f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:C0:2B:26:F1:FE:2E:BB:C1:12:64:7C:87:0C:76:2C:91:83:30
X509v3 Authority Key Identifier:
keyid:8D:A8:24:BC:63:1C:CE:E1:AE:99:D7:10:3A:FD:2D:C7:4F:1E:29:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jagkvGMczuGumdcQOv0tx08eKcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/WsXAKybx_i67wRJkfIcMdiyRgzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1caa79-b8c4-4d08-9bbe-386c1f8b0640/1/jagkvGMczuGumdcQOv0tx08eKcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.130.64.0/18
129.132.0.0/16
192.33.87.0-192.33.110.255
IPv6:
2001:67c:10ec::/48
Signature Algorithm: sha256WithRSAEncryption
62:70:0b:7d:83:04:6e:44:e0:d2:d4:8d:37:d6:2d:f0:e8:e8:
5d:67:e4:e3:4f:12:15:50:6f:8b:e1:dd:40:13:59:2e:fe:45:
c1:81:9f:cb:13:eb:14:4a:5f:a3:67:32:5d:94:3f:e3:69:04:
dc:be:fa:99:fd:da:48:b5:b2:52:82:1b:2d:48:a7:86:6c:ca:
70:fd:5d:d6:70:63:60:27:72:52:e9:f4:6d:36:67:e4:ac:76:
74:0f:fd:4a:8c:be:57:4d:85:0c:c9:3d:bb:d2:5f:29:b0:0f:
77:0b:ff:89:11:de:83:38:74:36:55:bf:b5:4b:8f:ea:85:e8:
07:1f:db:11:a3:cd:9c:42:e4:50:66:bf:29:80:05:79:8b:70:
1c:e6:b4:af:94:8b:02:51:c8:c8:ed:ce:7b:8b:d6:68:2c:9d:
33:c0:40:d3:a4:70:5c:b1:5a:a9:e8:46:48:88:2c:5d:06:d7:
66:79:19:b6:c1:a0:fc:0f:65:af:29:21:e9:fb:71:4e:cf:cd:
bb:7f:37:98:d5:71:ed:9c:a6:f5:ea:a7:e8:70:14:bd:69:63:
09:56:1e:2d:a7:f5:06:73:11:a5:d0:2c:c2:b6:50:cc:ca:3f:
30:04:9c:ec:08:88:ee:65:6d:a5:0d:f2:36:9e:b1:bb:7e:2a:
40:5e:19:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:25 2024 by rpki-client on console-fra.rpki-client.org