Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/WLrd7ESKCIVsZTIkqYvxhalDksI.roa
File: WLrd7ESKCIVsZTIkqYvxhalDksI.roa (raw, json)
Hash identifier: GEijsH+uKu9ygMs39PkSnonxtE7hLGQnLj7iNRzM/Fs=
Subject key identifier: 58:BA:DD:EC:44:8A:08:85:6C:65:32:24:A9:8B:F1:85:A9:43:92:C2
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 0192BA509856C7FCBE1F29A0EA5C09C2FD67
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/WLrd7ESKCIVsZTIkqYvxhalDksI.roa
Signing time: Wed 23 Oct 2024 16:58:16 +0000
ROA not before: Wed 23 Oct 2024 16:58:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215238
IP address blocks: 92.61.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 23 Nov 2024 16:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:50:98:56:c7:fc:be:1f:29:a0:ea:5c:09:c2:fd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Oct 23 16:58:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58baddec448a08856c653224a98bf185a94392c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a1:fb:4c:89:e4:59:6a:78:a1:96:d9:ec:e6:
3c:41:5a:42:14:b4:4c:86:7d:8a:5b:76:a7:6f:09:
c8:63:cd:52:25:5b:02:e8:03:4e:f1:28:53:0f:ad:
e0:4e:e3:85:77:3e:30:b9:68:5a:cc:76:2a:d7:28:
3d:bf:59:4b:2e:48:f7:87:cb:ad:e2:00:7e:9a:65:
60:0b:0e:9c:76:c2:05:e3:af:bb:6c:70:f1:76:ba:
65:14:8e:1d:33:41:9a:d8:63:5e:8f:a3:33:6d:84:
28:21:a3:35:f7:4a:03:c7:e8:3c:ee:35:2f:ee:7a:
37:1d:ff:b6:cb:88:39:81:cd:a0:28:fd:27:ab:01:
e6:5f:b2:a0:f2:35:85:53:0a:03:c8:de:f0:03:15:
78:a4:65:9b:7d:0f:a5:70:c9:83:5d:3f:81:b1:71:
72:9d:3b:52:e0:2e:45:62:df:ca:ac:c0:a4:06:98:
99:03:36:fe:58:f0:95:f9:52:5a:99:ce:73:6f:80:
d8:3b:81:61:17:43:ca:a4:d6:d2:de:63:d6:86:ee:
58:5b:dd:c5:df:58:3c:03:f0:9a:d7:0e:12:8e:f8:
f3:61:26:8c:0a:da:fd:22:84:18:fe:1b:5d:27:27:
ae:29:96:89:74:79:d8:3d:38:fb:89:38:6e:c0:ec:
72:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BA:DD:EC:44:8A:08:85:6C:65:32:24:A9:8B:F1:85:A9:43:92:C2
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/WLrd7ESKCIVsZTIkqYvxhalDksI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.61.103.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:f6:cf:62:74:29:32:e2:dc:fa:f9:61:c4:b6:d1:80:73:c5:
76:d3:c8:7f:c2:f0:c9:1d:9f:bb:bf:a4:38:d9:a1:5b:07:85:
75:54:7e:a8:2e:d1:64:d3:e1:95:db:ac:27:0d:c8:78:8c:1b:
ab:ea:0a:5c:e3:af:b4:97:8d:04:db:06:52:1d:b3:6f:40:c2:
41:dc:53:c8:dc:79:aa:2a:1e:64:03:f3:02:b9:1d:d8:26:f9:
b8:31:29:7b:08:3f:32:88:9b:27:41:3a:45:bb:f1:5e:e4:c5:
ba:56:80:a9:0b:00:3f:b6:ab:32:1b:bb:2c:1f:0c:f5:98:79:
38:71:c7:f4:c2:93:d1:62:78:b6:04:9b:55:46:e4:1f:55:11:
5b:6e:17:ed:4d:dc:3c:9f:6c:01:fe:18:a9:13:7b:76:09:89:
42:98:1e:ec:c0:a0:b3:68:38:82:26:42:25:2b:dd:42:46:bb:
02:7f:63:fe:68:5e:db:f0:80:8f:49:0e:21:ba:a8:bc:c3:b8:
57:9a:9d:6b:9c:bb:36:0c:ff:7d:92:f9:23:bf:f9:a4:b9:fb:
2c:ec:c8:59:5e:8a:0e:ed:88:88:3d:e0:85:e8:d3:9d:ba:bc:
99:96:2c:9a:a3:8a:4f:2c:27:8b:1e:9c:76:15:07:f1:29:e9:
b2:36:81:2c
-----BEGIN CERTIFICATE-----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Generated at Sat Nov 23 18:47:56 2024 by rpki-client on console-ams.rpki-client.org