Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/WALzEKU-cg5lCYErs2fmlqTYMr8.roa
File: WALzEKU-cg5lCYErs2fmlqTYMr8.roa (raw, json)
Hash identifier: MmoBvbf/RpvNc6stZPsdlD7UuYKIBBbKUait0Vztg9k=
Subject key identifier: 58:02:F3:10:A5:3E:72:0E:65:09:81:2B:B3:67:E6:96:A4:D8:32:BF
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 01921F73FFD114334BFBF328AE9A12ABA31D
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/WALzEKU-cg5lCYErs2fmlqTYMr8.roa
Signing time: Mon 23 Sep 2024 15:15:48 +0000
ROA not before: Mon 23 Sep 2024 15:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 213.134.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 13:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:1f:73:ff:d1:14:33:4b:fb:f3:28:ae:9a:12:ab:a3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Sep 23 15:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5802f310a53e720e6509812bb367e696a4d832bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5b:fb:a6:4f:de:45:77:1d:12:6d:a0:c3:cc:
12:f2:21:e3:57:32:b6:6e:0a:be:c9:c8:c8:ce:0d:
b3:a5:e5:9f:4d:da:66:6f:d9:87:18:14:ad:a2:f6:
e1:13:0a:e8:a5:6d:11:c7:94:03:3f:e3:28:f4:03:
db:ce:7a:a6:88:e4:96:1e:75:dc:ea:ad:9e:b2:86:
47:b8:90:8e:20:e5:d1:56:0a:ea:b3:c3:00:d8:e8:
72:19:8c:bc:0c:9c:c0:be:14:38:02:5b:65:a9:b9:
69:a4:06:9c:bb:ff:f4:03:9e:97:30:56:91:aa:25:
16:7f:b7:d4:16:40:97:1f:39:29:a1:16:0e:a4:e5:
b3:3b:6b:8f:92:17:38:63:7e:ff:67:94:ee:ff:ef:
b5:88:5e:6e:da:b5:ae:60:01:68:f3:27:e3:40:08:
35:dc:f5:aa:8e:15:e2:2a:6f:4f:00:a6:86:0c:a9:
09:0f:f5:a8:9a:a3:80:07:42:c7:96:19:e4:6a:2c:
bf:9d:8b:45:23:b5:4d:44:da:c6:0c:9a:7a:0a:21:
31:36:c8:5a:e7:ab:f4:99:1c:75:0b:97:f6:7d:53:
f6:fa:b7:e4:47:e7:7d:b1:49:e0:69:df:cf:fa:24:
c4:e7:f1:2b:bf:59:4e:80:1e:8c:af:c2:ed:28:84:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:02:F3:10:A5:3E:72:0E:65:09:81:2B:B3:67:E6:96:A4:D8:32:BF
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/WALzEKU-cg5lCYErs2fmlqTYMr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.13.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:da:26:4f:e9:38:39:f7:e6:13:d5:b8:7b:72:74:ab:cf:ae:
c8:d6:13:63:3c:a6:06:a2:80:40:ff:c6:ac:81:e6:f5:cf:20:
53:73:69:4b:c6:f0:ed:85:f5:81:23:73:bd:00:0a:64:64:9d:
ba:66:40:ad:c2:a3:a7:31:83:70:11:e0:49:5a:04:9d:05:ae:
ae:2d:e4:82:72:e3:2e:44:78:2a:f8:bb:ce:94:d1:e4:00:54:
b9:56:fa:99:c1:eb:1e:8b:c6:52:d7:6d:1c:a5:7c:13:12:a4:
cf:1a:b1:ea:08:83:78:34:a3:25:de:49:b0:61:7a:73:7e:a5:
bd:d5:29:45:91:17:b5:04:1c:9f:88:a0:13:4e:37:da:a7:91:
fb:92:52:6d:3f:ad:33:9d:d0:b5:02:d0:f7:ca:b0:11:3a:e1:
d2:dd:11:22:77:13:66:5e:95:7e:3c:a1:83:6a:7c:ee:5a:29:
5e:63:2e:5a:6b:17:c2:93:c7:16:9f:19:07:83:a5:61:86:8e:
40:8d:0f:4c:76:2f:9a:b3:b7:fd:20:05:b3:8d:28:bd:27:eb:
fa:be:d8:56:43:d7:5c:23:2e:d4:1b:cf:50:d6:86:0b:e0:c2:
af:ad:82:68:00:1b:9b:84:d9:4a:d3:68:5c:2e:23:2f:3f:17:
d2:77:55:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 14:45:35 2024 by rpki-client on console-fra.rpki-client.org