Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/WTYnKlHVPyi8o59ZkIGj7fz0Mgg.roa
File: WTYnKlHVPyi8o59ZkIGj7fz0Mgg.roa (raw, json)
Hash identifier: e8FgTschWBZFWkNZ0Vtyh68/bU049zTNthz9BsBqgVY=
Subject key identifier: 59:36:27:2A:51:D5:3F:28:BC:A3:9F:59:90:81:A3:ED:FC:F4:32:08
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 018570797BE1DF634BAA3E81D9602A9A8290
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/WTYnKlHVPyi8o59ZkIGj7fz0Mgg.roa
Signing time: Mon 02 Jan 2023 03:14:47 +0000
ROA not before: Mon 02 Jan 2023 03:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207701
IP address blocks: 5.11.31.0/24 maxlen: 24
2a01:7a8::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7b:e1:df:63:4b:aa:3e:81:d9:60:2a:9a:82:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Jan 2 03:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5936272a51d53f28bca39f599081a3edfcf43208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:08:10:fd:84:b4:15:20:fd:b7:76:39:97:09:
86:e2:03:b7:ed:e3:ed:b9:4a:51:f1:77:91:9d:4e:
12:89:da:48:7b:7e:5d:a8:9f:b4:14:09:48:0e:4e:
c2:4d:d4:c4:4e:dc:66:c2:2f:0b:af:a4:fc:ed:5c:
31:28:31:f1:4d:bb:59:6c:29:3a:a6:c8:e1:7b:91:
99:45:f0:5a:93:c7:b4:b6:41:4c:e1:03:16:c1:6a:
91:da:72:d9:16:44:db:2f:d5:77:fa:41:1d:d2:55:
ce:8f:7b:69:ea:3e:f3:89:7e:c7:fb:23:3e:41:4d:
aa:f3:84:9c:03:76:77:e5:63:16:d5:70:fc:87:51:
03:83:64:85:6a:8e:73:88:6f:0d:e1:4c:d0:73:92:
77:38:c4:34:3a:ed:1e:af:d3:f1:97:22:03:e3:4d:
a4:e7:a8:a5:2e:90:a4:0d:a6:3d:19:16:59:71:4f:
35:e4:26:54:c9:88:ef:31:b5:98:97:08:13:ef:3c:
ee:35:95:3b:51:fd:18:1c:38:70:24:bf:65:0c:2a:
0e:37:7e:18:01:90:ec:c1:2c:cd:40:61:cc:97:46:
00:e2:51:be:70:6c:10:84:9c:14:36:9a:06:41:5f:
cf:e9:7a:a7:fb:9e:fb:78:39:db:ee:80:cf:e7:c0:
3f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:36:27:2A:51:D5:3F:28:BC:A3:9F:59:90:81:A3:ED:FC:F4:32:08
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/WTYnKlHVPyi8o59ZkIGj7fz0Mgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.31.0/24
IPv6:
2a01:7a8::/48
Signature Algorithm: sha256WithRSAEncryption
b7:55:e0:e1:a6:12:84:03:07:21:d0:89:ac:b2:d8:ac:bc:fc:
b5:81:53:0d:38:6e:f3:c3:90:21:33:44:70:fd:8e:95:d3:f2:
65:f2:fe:4b:4f:c0:74:76:a0:3c:3f:0d:3c:e1:74:0e:69:ff:
dc:f9:16:e9:76:41:c9:d0:01:47:36:d2:e4:5e:02:47:b2:dd:
a9:41:90:6b:1f:b9:33:0d:41:c5:94:4b:c2:52:44:7b:ee:4a:
e3:c0:ae:9d:29:ad:91:44:77:81:1a:91:20:79:e2:27:e5:90:
e2:9b:12:ea:e2:79:ed:0a:e8:54:92:83:93:47:6a:dc:b1:48:
12:06:17:9f:d7:76:ed:7a:27:9c:6b:e6:d2:85:55:d7:59:16:
a5:f7:f5:ea:45:52:3c:7b:57:43:16:27:5a:92:4b:7f:83:4a:
fa:7a:af:3b:e6:2c:65:77:4d:cd:84:a9:68:80:da:15:b2:d0:
1c:d3:a1:62:7b:aa:f1:7d:0f:b1:48:f1:08:ba:f6:29:20:10:
26:a6:b4:3b:f1:9b:66:b7:ed:ac:c4:38:dd:e6:2e:94:5b:38:
2e:f3:42:21:2e:f0:68:c9:d1:16:02:78:bb:e0:64:2b:39:b5:
95:86:65:b0:26:8a:0f:f5:a0:20:2a:ba:4c:a3:81:d6:f7:47:
3d:ca:ce:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:02 2024 by rpki-client on console-ams.rpki-client.org