Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/WWMBm9y2XFehnO4qSw7NNeuvZhg.roa
File: WWMBm9y2XFehnO4qSw7NNeuvZhg.roa (raw, json)
Hash identifier: jlcUSo2AQh9b8wxJzGMOirw1NlFZU0Tmqiz7kE7Xfww=
Subject key identifier: 59:63:01:9B:DC:B6:5C:57:A1:9C:EE:2A:4B:0E:CD:35:EB:AF:66:18
Certificate issuer: /CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Certificate serial: 01856C412F8FDB377156D5BD1DA0F88BCF96
Authority key identifier: E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/WWMBm9y2XFehnO4qSw7NNeuvZhg.roa
Signing time: Sun 01 Jan 2023 07:34:49 +0000
ROA not before: Sun 01 Jan 2023 07:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201121
IP address blocks: 2a13:4440::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:2f:8f:db:37:71:56:d5:bd:1d:a0:f8:8b:cf:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e371ce2086805f912f8512b79c5e66a9c9f4d4d2
Validity
Not Before: Jan 1 07:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5963019bdcb65c57a19cee2a4b0ecd35ebaf6618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:a6:06:29:68:7c:3a:c7:fd:b9:59:c1:15:
f7:63:2f:55:92:26:3b:d0:2b:db:97:5f:f8:f9:bc:
5d:5c:37:7a:ef:ce:09:ef:8c:d5:c6:30:e5:45:9a:
fb:4b:08:27:96:ff:09:fa:ea:56:1b:50:b6:10:27:
5b:24:7b:61:e4:4a:03:c3:df:c0:42:db:12:cd:22:
68:ee:f0:55:cb:80:30:dc:d3:80:b6:77:79:19:fc:
eb:03:ba:1a:60:25:d4:44:bf:ca:3b:67:c2:96:15:
3a:da:82:ac:b0:c7:42:61:47:aa:d9:55:b1:78:28:
c4:88:f5:77:e6:53:03:62:0c:ca:02:7a:c2:c4:94:
2b:66:71:80:c5:18:ad:f7:23:61:cb:87:2d:24:ac:
4d:a1:93:62:de:b9:03:c2:93:25:55:34:87:a2:d0:
9c:2e:26:5d:82:d1:5c:4b:76:14:b8:bd:5d:2d:12:
d9:96:26:5a:a2:dc:bf:88:75:a4:6c:a3:89:19:ff:
fb:0f:13:6c:a2:d2:03:4d:11:b0:e2:83:81:d2:0f:
76:c5:c7:ff:4a:2d:62:45:c5:11:a5:36:e3:8f:b0:
42:e2:37:e3:b4:13:53:0f:df:9c:e3:7a:3b:16:6c:
e0:75:2a:41:fb:ae:41:36:04:2f:5b:1b:a2:93:44:
71:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:63:01:9B:DC:B6:5C:57:A1:9C:EE:2A:4B:0E:CD:35:EB:AF:66:18
X509v3 Authority Key Identifier:
keyid:E3:71:CE:20:86:80:5F:91:2F:85:12:B7:9C:5E:66:A9:C9:F4:D4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43HOIIaAX5EvhRK3nF5mqcn01NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/WWMBm9y2XFehnO4qSw7NNeuvZhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6dbdaf-5495-4cc5-b770-73590aa290f1/1/43HOIIaAX5EvhRK3nF5mqcn01NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4440::/29
Signature Algorithm: sha256WithRSAEncryption
2b:e6:7a:ec:39:02:c4:65:94:63:7d:7f:fb:ab:5b:ce:36:4e:
ee:f9:87:5e:96:36:33:1e:11:09:f1:60:40:fa:9d:79:59:25:
d0:a9:58:5f:a4:40:b6:ac:32:77:4a:ce:09:40:a3:b5:fa:0a:
f8:a4:3b:b4:2a:70:71:81:65:8d:06:bc:67:58:a7:3d:6d:70:
f7:63:c9:ba:9a:5e:0b:84:e2:99:77:af:23:c8:e2:98:07:68:
6b:5e:5d:8f:e3:f4:12:1f:1e:ca:bc:33:75:f5:f3:e6:cc:b3:
d2:61:67:3e:d1:5e:81:be:0b:39:19:bb:78:06:b8:64:50:67:
34:21:2b:4a:76:bc:49:e2:06:37:f9:0f:0f:50:1c:ce:0d:3b:
35:13:d3:ca:59:2d:5d:03:ed:2d:c5:a8:44:c9:c4:07:94:ad:
ce:b8:84:80:69:3f:26:c0:4b:15:b6:be:aa:68:da:5e:9c:5c:
fd:c8:57:67:a0:40:a3:ce:ba:69:5b:67:f1:cf:58:17:c0:0b:
1c:03:77:c3:b4:f8:d8:9a:3a:97:ae:5d:44:4c:6c:44:86:75:
39:0a:df:61:cb:e9:49:fa:4a:40:10:3e:a2:7b:78:14:a4:a0:
89:92:0c:ff:b9:51:7d:b7:fd:2e:b1:e0:48:fe:b7:1f:5e:b3:
e6:5a:dc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:35 2024 by rpki-client on console-fra.rpki-client.org