Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/WWngLWa6Ecw0SlRy8ew1ZxHxb4s.roa
File: WWngLWa6Ecw0SlRy8ew1ZxHxb4s.roa (raw, json)
Hash identifier: 4VOlO/fhjMegykhbhoVt5yyjQp3k+boztdapL2+Fmgk=
Subject key identifier: 59:69:E0:2D:66:BA:11:CC:34:4A:54:72:F1:EC:35:67:11:F1:6F:8B
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 018572B43E850E7D79D45F9A5564FFDDC376
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/WWngLWa6Ecw0SlRy8ew1ZxHxb4s.roa
Signing time: Mon 02 Jan 2023 13:38:13 +0000
ROA not before: Mon 02 Jan 2023 13:38:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8075
IP address blocks: 62.12.56.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:3e:85:0e:7d:79:d4:5f:9a:55:64:ff:dd:c3:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Jan 2 13:38:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5969e02d66ba11cc344a5472f1ec356711f16f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:86:6b:2d:2a:9c:13:33:bf:69:9d:77:83:
bb:56:70:d1:88:03:1a:a7:4a:68:b8:24:ce:da:51:
2d:59:32:76:00:58:93:e4:e4:09:c4:f5:57:2f:a6:
4b:20:e4:4c:87:5d:ea:d6:10:d6:90:ab:f5:fc:67:
3e:d2:66:dc:9a:98:72:cf:36:17:04:56:b8:09:1a:
ed:4d:48:52:98:a0:64:b6:f5:8f:20:e6:ce:61:4b:
57:7e:4c:74:88:47:df:99:e9:1b:02:94:68:c0:51:
ae:14:b8:d2:c1:db:f6:c4:88:81:17:f5:e0:fa:d1:
0b:e4:64:d6:ba:a5:d9:47:73:12:38:6e:c8:be:50:
b1:d5:0c:d7:20:5b:5e:02:04:b8:01:41:33:c4:d8:
17:0b:da:92:f4:34:7a:75:ea:a8:fc:86:70:6f:46:
2d:d6:7f:1f:53:89:52:7d:09:8d:03:ec:aa:5c:92:
83:8a:fc:d1:88:0e:63:00:f9:7f:30:fd:84:bf:28:
5d:83:21:bd:63:cf:43:e4:3b:19:f6:0b:e1:83:1b:
3a:0a:76:48:d3:1b:4a:05:24:48:95:92:e9:d0:b3:
a8:6f:64:81:d9:fa:4d:f7:b9:59:1a:8d:50:f4:5e:
bf:73:fd:9f:f1:f8:89:c6:27:f7:ed:96:6e:4c:61:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:69:E0:2D:66:BA:11:CC:34:4A:54:72:F1:EC:35:67:11:F1:6F:8B
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/WWngLWa6Ecw0SlRy8ew1ZxHxb4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.12.56.0/21
Signature Algorithm: sha256WithRSAEncryption
4d:32:5c:24:b9:47:29:86:be:78:7c:3e:b5:19:e0:fe:f9:35:
38:18:cf:9a:ee:cf:b2:2e:a7:80:0d:47:f8:21:03:a7:53:77:
75:95:96:29:de:6c:e4:24:f8:71:f2:40:0b:0e:25:0a:57:77:
97:70:53:2b:91:bd:bb:60:4e:2c:8e:0f:7b:d3:62:10:d8:d2:
31:fd:97:70:e5:10:40:59:06:e8:6e:4e:e5:bc:62:7a:c4:01:
50:c4:44:71:34:8a:aa:90:ff:05:58:1f:ba:ac:50:1c:8e:cf:
fb:cf:4e:50:40:e3:71:c2:7e:c9:42:d3:cd:0f:15:5f:ac:e8:
3c:11:0b:6c:6d:af:b8:40:04:df:75:56:1a:9c:82:97:e6:5f:
b9:f3:40:49:77:82:c9:23:41:22:a0:a8:5c:b8:13:6c:f0:b2:
c6:62:5c:68:bc:b9:29:f8:7a:7a:4b:ff:94:ae:10:d3:37:1a:
64:12:63:cc:86:65:5e:1c:41:87:0a:53:d3:00:df:9b:c4:77:
d5:52:ac:a2:50:a6:50:37:2d:94:4d:b5:4e:98:6b:f2:8d:20:
86:d1:e1:a3:8b:11:40:3a:4f:4a:4a:78:3c:95:c5:a3:1c:a3:
54:bd:f9:70:ff:46:df:f1:03:7c:e3:24:c0:cc:34:14:a5:89:
44:48:dc:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:20:07 2024 by rpki-client on console-ams.rpki-client.org