Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/WwLgWvpCsHquMZzp5LejZ0-KspQ.roa
File: WwLgWvpCsHquMZzp5LejZ0-KspQ.roa (raw, json)
Hash identifier: 2CJG6dsrvqd4WShXYWbV5vvgIzbQjj4kgWS1QaocbsE=
Subject key identifier: 5B:02:E0:5A:FA:42:B0:7A:AE:31:9C:E9:E4:B7:A3:67:4F:8A:B2:94
Certificate issuer: /CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Certificate serial: 01856F66F4F471A8ACE7B7EDCD4E12205671
Authority key identifier: AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/WwLgWvpCsHquMZzp5LejZ0-KspQ.roa
Signing time: Sun 01 Jan 2023 22:14:56 +0000
ROA not before: Sun 01 Jan 2023 22:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60136
IP address blocks: 84.20.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:f4:f4:71:a8:ac:e7:b7:ed:cd:4e:12:20:56:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad109dee6fbdc256df911460ccc915d066a8ff8b
Validity
Not Before: Jan 1 22:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b02e05afa42b07aae319ce9e4b7a3674f8ab294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:fc:1d:ca:96:dd:71:83:1e:07:05:22:dc:
1a:1b:83:2d:51:34:0e:63:11:c8:b2:df:a3:a4:89:
ab:15:ee:5a:22:6a:e7:0a:d8:6c:a8:a7:f7:a0:de:
1c:1d:f8:59:7a:4b:75:ff:f2:6d:43:cd:31:90:cd:
74:ea:8e:7d:15:03:ff:e4:07:61:0f:5d:b4:cd:8e:
56:5e:49:40:46:fc:12:f4:eb:6b:30:d1:6c:74:76:
00:9d:45:0f:fd:7f:b5:08:bf:88:d7:5f:a2:e4:23:
14:b1:c6:cf:0e:3c:53:d4:aa:50:07:34:08:dd:84:
f9:ed:ba:3d:3b:f5:9c:8d:29:dd:c9:30:7a:78:8c:
5b:f3:0e:36:dc:f2:26:d4:42:0e:bf:58:d1:b7:03:
3a:9a:cb:63:33:4a:19:ce:02:88:e3:bf:91:d3:06:
51:19:18:eb:75:d3:4a:e6:b0:31:0d:a6:90:52:b3:
3d:aa:af:8d:57:8d:6a:83:15:85:24:a9:bb:16:0b:
ab:71:12:ff:e6:33:7a:8c:3e:d4:55:54:11:ce:53:
29:aa:87:7d:88:71:77:38:f9:b7:f6:68:d1:18:89:
02:0c:48:fc:41:e2:56:ec:77:78:91:b7:e4:21:b2:
d9:50:14:cd:d5:c0:08:af:28:e5:96:47:9e:04:25:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:02:E0:5A:FA:42:B0:7A:AE:31:9C:E9:E4:B7:A3:67:4F:8A:B2:94
X509v3 Authority Key Identifier:
keyid:AD:10:9D:EE:6F:BD:C2:56:DF:91:14:60:CC:C9:15:D0:66:A8:FF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRCd7m-9wlbfkRRgzMkV0Gao_4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/WwLgWvpCsHquMZzp5LejZ0-KspQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4615be-e566-4253-83ef-f6626b63383e/1/rRCd7m-9wlbfkRRgzMkV0Gao_4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.20.77.0/24
Signature Algorithm: sha256WithRSAEncryption
58:04:95:52:d6:52:6f:70:66:91:f9:5e:b6:ce:09:4b:f7:9a:
95:a4:7f:3d:a3:e4:ee:09:e6:22:a3:d3:c3:72:8b:ff:88:d0:
6b:73:42:05:1e:2d:0b:0a:2e:97:58:6e:ad:f4:2d:01:1d:33:
12:a8:9e:d7:55:4b:eb:12:0c:c9:38:2b:de:3d:0f:1c:e4:6c:
38:5d:ae:7d:d8:ac:b4:b7:c0:03:ec:c3:ab:b7:6f:7f:66:1d:
59:59:22:f3:d5:94:27:a0:33:39:b6:e4:22:9e:bd:fc:62:86:
a4:e4:84:51:05:49:12:ea:19:d4:d2:7e:33:f7:0a:6c:3e:6e:
a1:0e:0a:cb:34:44:d1:61:18:e8:47:15:4f:f9:82:5c:dd:b9:
5a:ed:1b:04:c8:25:c0:82:75:2b:82:a5:b3:35:44:d9:9c:8b:
37:95:88:a6:4e:a9:82:7c:9b:21:86:ec:43:8f:d8:54:49:0b:
71:b7:95:d8:3b:d2:d1:3f:06:e0:f8:1b:5f:1e:18:07:0d:22:
72:c4:1b:d3:45:e2:aa:cf:2f:f4:60:44:71:97:06:54:32:c6:
fd:b7:ed:37:bc:fc:89:78:ef:2a:9c:14:bd:7e:cb:85:35:7a:
12:e5:bb:43:8c:45:dd:8a:e5:a2:55:1f:49:d5:a7:a1:0e:fd:
6a:a4:f7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:14 2024 by rpki-client on console-ams.rpki-client.org