Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wnrEotUR0Oo2oLoB8Ff1_p6KsuM.roa
File: wnrEotUR0Oo2oLoB8Ff1_p6KsuM.roa (raw, json)
Hash identifier: 8TXmcPRF1uHoxLRq9y5vuor9aNCQbTBDcYbbLshxeMU=
Subject key identifier: C2:7A:C4:A2:D5:11:D0:EA:36:A0:BA:01:F0:57:F5:FE:9E:8A:B2:E3
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 018A64DAFD67417F9DB5BE987B84C43EE955
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wnrEotUR0Oo2oLoB8Ff1_p6KsuM.roa
Signing time: Tue 05 Sep 2023 10:19:47 +0000
ROA not before: Tue 05 Sep 2023 10:19:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.72.116.0/22 maxlen: 24
89.185.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 15 Sep 2023 07:04:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:64:da:fd:67:41:7f:9d:b5:be:98:7b:84:c4:3e:e9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Sep 5 10:19:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c27ac4a2d511d0ea36a0ba01f057f5fe9e8ab2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a9:e1:db:6c:e9:17:dc:16:de:54:bc:2b:5a:
09:44:3e:36:08:78:c3:ff:f9:45:a1:30:15:4e:58:
c5:56:e3:98:b4:65:b7:d6:33:89:55:84:af:57:68:
4a:47:27:f1:c5:1f:a7:e0:33:f2:aa:4e:3e:57:52:
e9:fb:4c:19:f4:7b:82:27:79:29:ea:a5:22:3f:49:
80:2d:c4:88:dd:11:63:7e:16:56:d5:6f:0a:56:8b:
0f:ca:b8:04:54:29:93:87:0e:81:c3:73:a8:6f:b3:
cd:25:d5:f9:18:ab:67:91:1a:a0:48:34:26:3a:d1:
f4:2b:e3:3f:3a:82:d5:cb:26:e3:ab:ca:bb:77:4a:
a2:ee:53:a5:d7:e1:0e:15:fb:b3:56:e2:be:ff:d8:
d1:9b:96:4e:09:a6:a6:5d:00:cc:4a:bb:da:9d:62:
2a:c6:1c:84:97:9d:8e:69:07:8d:29:9b:31:74:67:
9f:1f:16:1a:61:e4:51:ef:9e:3c:96:17:76:a5:1a:
e4:c2:0e:40:91:a8:ae:2c:e3:9b:dc:4d:43:9c:de:
fb:51:df:3a:e5:d3:b7:05:f9:d3:2d:c6:3b:4f:8f:
fa:57:9e:a0:f5:bb:e2:44:fa:91:d6:b2:ee:0a:30:
56:5a:cf:40:c4:be:21:10:1b:18:3a:d3:49:8a:4d:
62:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:C4:A2:D5:11:D0:EA:36:A0:BA:01:F0:57:F5:FE:9E:8A:B2:E3
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/wnrEotUR0Oo2oLoB8Ff1_p6KsuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.0.0/22
109.72.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:7f:66:50:15:ee:9a:da:2f:b0:93:11:5e:20:55:96:bd:13:
d9:7b:02:14:ba:a3:24:d4:10:33:73:2a:52:1b:e5:53:b3:fa:
10:58:c7:95:35:6c:30:44:37:b4:5c:cf:b7:3a:db:d6:e3:25:
0e:ca:4d:b4:f8:c3:52:35:78:49:59:a3:7b:d8:23:3e:f8:83:
70:0c:af:d2:98:5e:ee:27:b6:b5:2a:05:14:3d:7d:4c:71:b3:
f0:d9:50:77:ed:eb:64:a2:6a:41:e5:47:4f:f2:2f:d5:97:f6:
0e:1b:6c:a8:c2:08:07:79:9b:0b:5b:16:ae:f5:00:9c:17:55:
d1:f6:5a:2c:66:7a:01:c5:77:38:77:b7:e4:c8:9b:c7:82:0b:
35:ed:7c:ef:64:a5:7c:63:51:87:d0:0e:fb:51:ab:81:52:3d:
9a:ac:33:a2:14:a3:06:26:5f:91:b1:04:74:7a:6e:32:8d:40:
2d:8e:d5:37:a0:f0:01:a7:c1:5d:9b:5c:21:1f:0a:fe:e6:ff:
b6:67:7c:6a:a5:6d:a6:67:cd:6b:c1:b2:9b:5f:00:ac:c9:64:
fe:7b:40:a4:fc:f3:c6:73:41:d3:e5:50:4b:ae:c8:21:5d:e2:
b6:bd:b5:55:45:9c:e9:a3:75:9e:9e:be:27:f0:54:a2:03:3c:
30:d0:71:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:15 2024 by rpki-client on console-fra.rpki-client.org