Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WE-Sgc-umuerGPigEQLCnzr-B2A.roa
File: WE-Sgc-umuerGPigEQLCnzr-B2A.roa (raw, json)
Hash identifier: x2XoauD3it0twGvhbzFJJRf3FMS7Q+31A4StPYqoOk8=
Subject key identifier: 58:4F:92:81:CF:AE:9A:E7:AB:18:F8:A0:11:02:C2:9F:3A:FE:07:60
Certificate issuer: /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial: 018ED6462C7BA644892AFA302348AEA32E28
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WE-Sgc-umuerGPigEQLCnzr-B2A.roa
Signing time: Sat 13 Apr 2024 07:05:06 +0000
ROA not before: Sat 13 Apr 2024 07:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:18e:d645:52e7/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 13 Apr 2024 07:13:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d6:46:2c:7b:a6:44:89:2a:fa:30:23:48:ae:a3:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Validity
Not Before: Apr 13 07:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=584f9281cfae9ae7ab18f8a01102c29f3afe0760
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b9:a9:90:05:51:c3:4e:ed:db:ea:40:68:27:
f8:e4:6a:ea:25:ad:0f:1a:5c:60:f2:c7:e2:d5:82:
3f:b0:07:74:77:ee:c8:9e:77:25:c7:c8:92:32:6e:
9a:7c:dd:d4:d1:a8:87:3d:ea:76:c5:24:c0:19:34:
0b:1f:e5:74:0d:8b:54:83:5a:7b:72:36:7d:ae:4d:
5d:94:fc:ad:b3:e2:c9:13:c7:77:1b:d6:5c:eb:fa:
14:b1:3e:3c:a8:68:78:87:8d:b4:71:b0:f5:00:cd:
8b:35:bd:c7:88:53:ff:f7:a1:ea:ca:f3:50:47:f9:
6a:6e:b5:93:83:b3:35:21:06:95:dc:8f:88:65:82:
0d:e0:f4:1d:c8:7a:cc:d4:df:dd:dd:25:17:e8:16:
de:66:86:5b:1a:d3:98:bb:02:73:d1:67:85:51:eb:
da:62:77:02:45:bb:c4:f6:38:32:8d:a5:f2:a2:97:
ae:41:a4:64:2e:b8:68:22:19:20:bb:b5:5a:ca:a2:
54:d0:73:eb:e3:fe:de:e1:06:22:3c:71:6b:40:5c:
60:ff:9d:95:06:77:97:74:e3:2e:6e:0d:0d:16:ae:
31:ed:06:db:5e:b5:ec:b2:66:8b:94:8b:1e:2d:f3:
91:f6:eb:db:4e:ef:9a:15:b6:82:c1:08:56:be:aa:
fc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4F:92:81:CF:AE:9A:E7:AB:18:F8:A0:11:02:C2:9F:3A:FE:07:60
X509v3 Authority Key Identifier:
keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/WE-Sgc-umuerGPigEQLCnzr-B2A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
34:bc:d7:81:c3:3e:e3:12:7b:c2:4f:3f:2c:05:ee:79:48:86:
3b:f3:ea:89:bc:93:7e:63:7b:c3:8e:34:bd:b0:31:d6:53:a0:
ab:f3:80:a1:8d:df:35:85:c8:d4:b6:3c:41:7c:03:38:21:72:
73:ef:e2:73:f7:55:20:70:86:52:06:c7:f3:71:2b:0e:76:dc:
f4:34:70:71:99:33:b7:5a:42:bd:73:48:e1:92:14:61:50:7a:
20:e0:2a:0e:78:6c:49:eb:80:a9:e6:9c:0c:a3:3c:ca:bd:09:
c7:12:6e:8b:39:99:48:33:0f:10:23:2b:da:12:63:f9:31:85:
ec:dc:ba:72:bc:a3:7d:1f:3c:97:41:33:ea:b1:a5:95:1e:30:
65:69:9d:ff:1a:81:5b:d4:b5:51:51:c5:59:d9:a2:0c:52:54:
d5:51:45:08:62:0f:3d:4b:5f:a2:7e:ff:9f:8d:40:61:ac:bb:
d2:b0:8b:48:05:37:f0:6f:7b:1d:49:75:b7:4a:1c:d1:f2:82:
d2:fd:9e:f3:2d:c9:84:7f:b8:c7:b2:9a:77:84:aa:85:38:26:
27:67:ec:6d:1e:78:88:36:2e:5e:33:cb:7f:4d:32:35:88:9f:
b8:a5:26:6b:48:bf:0c:c2:ad:9f:eb:4d:b4:47:3a:df:91:e4:
48:cb:1f:57
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY7WRix7pkSJKvowI0iuoy4oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwNDEzMDcwNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODRmOTI4MWNmYWU5YWU3YWIxOGY4YTAxMTAyYzI5ZjNhZmUwNzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7mpkAVRw07t2+pAaCf45GrqJa0P
Glxg8sfi1YI/sAd0d+7Innclx8iSMm6afN3U0aiHPep2xSTAGTQLH+V0DYtUg1p7
cjZ9rk1dlPyts+LJE8d3G9Zc6/oUsT48qGh4h420cbD1AM2LNb3HiFP/96HqyvNQ
R/lqbrWTg7M1IQaV3I+IZYIN4PQdyHrM1N/d3SUX6BbeZoZbGtOYuwJz0WeFUeva
YncCRbvE9jgyjaXyopeuQaRkLrhoIhkgu7VayqJU0HPr4/7e4QYiPHFrQFxg/52V
BneXdOMubg0NFq4x7QbbXrXssmaLlIseLfOR9uvbTu+aFbaCwQhWvqr8+wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFhPkoHPrprnqxj4oBECwp86/gdgMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvV0UtU2djLXVtdWVyR1BpZ0VRTENuenItQjJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBADS814HDPuMSe8JPPywF
7nlIhjvz6om8k35je8OONL2wMdZToKvzgKGN3zWFyNS2PEF8AzghcnPv4nP3VSBw
hlIGx/NxKw523PQ0cHGZM7daQr1zSOGSFGFQeiDgKg54bEnrgKnmnAyjPMq9CccS
bos5mUgzDxAjK9oSY/kxhezcunK8o30fPJdBM+qxpZUeMGVpnf8agVvUtVFRxVnZ
ogxSVNVRRQhiDz1LX6J+/5+NQGGsu9Kwi0gFN/Bvex1JdbdKHNHygtL9nvMtyYR/
uMeymneEqoU4Jidn7G0eeIg2Ll4zy39NMjWIn7ilJmtIvwzCrZ/rTbRHOt+R5EjL
H1c=
-----END CERTIFICATE-----
Generated at Sat Apr 13 13:47:29 2024 by rpki-client on console.sobornost.net