Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/WTOZZ1HE_cM6kktrql-KGVIGRcM.roa
File: WTOZZ1HE_cM6kktrql-KGVIGRcM.roa (raw, json)
Hash identifier: BKuBrDYbvtTUnm1JsVt+fFFBWF40UAt0GbZSdVOV3BI=
Subject key identifier: 59:33:99:67:51:C4:FD:C3:3A:92:4B:6B:AA:5F:8A:19:52:06:45:C3
Certificate issuer: /CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Certificate serial: 0188F6C9A30C9ED58722F30DED203455CA87
Authority key identifier: 97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/WTOZZ1HE_cM6kktrql-KGVIGRcM.roa
Signing time: Mon 26 Jun 2023 08:19:49 +0000
ROA not before: Mon 26 Jun 2023 08:19:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198826
IP address blocks: 91.239.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:c9:a3:0c:9e:d5:87:22:f3:0d:ed:20:34:55:ca:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=975c9ffa65c3c9b57c549e72cd6dc703005b2e0e
Validity
Not Before: Jun 26 08:19:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5933996751c4fdc33a924b6baa5f8a19520645c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ba:20:9a:88:fc:75:63:61:92:60:55:5f:7d:
3f:78:f8:5e:d2:f1:b6:71:88:79:e5:65:34:30:89:
f7:f1:a3:17:47:50:8c:a3:8c:64:29:05:5a:b3:04:
4d:65:8b:ab:e3:5c:7a:8c:2f:7f:88:fb:bb:a4:26:
dd:27:b3:97:c0:5a:ff:0f:5f:3e:dd:e3:6b:2b:1d:
65:89:9a:15:20:d4:81:da:83:83:b0:6b:8b:a1:ba:
a0:3a:d3:38:7a:0e:6c:2a:ea:9b:ab:03:14:7f:88:
e8:1e:9b:d9:53:dc:3d:cc:06:74:11:a6:b9:e7:77:
92:dd:2e:b6:4c:95:2e:6d:51:3a:fd:7a:49:70:72:
cd:e3:c6:c0:61:5c:38:b9:67:a5:20:18:80:5a:22:
0d:6d:4f:58:f3:43:f4:64:1a:ce:2a:ef:ff:7c:de:
09:7a:0b:14:16:fb:5a:d2:f5:d2:3f:e6:02:8b:b7:
55:cf:d6:15:97:6e:a4:46:91:0e:3e:8b:c6:ca:8d:
f3:1e:53:ac:b0:35:b6:30:c5:f5:f2:ec:5c:fb:23:
92:fb:b4:61:ca:cc:5c:58:51:b5:9c:5f:e1:5f:8e:
ba:10:1e:8c:0e:ab:8f:81:39:e5:14:36:5e:50:25:
ad:6a:d5:fc:5e:00:71:f4:c4:84:78:83:da:3a:99:
af:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:99:67:51:C4:FD:C3:3A:92:4B:6B:AA:5F:8A:19:52:06:45:C3
X509v3 Authority Key Identifier:
keyid:97:5C:9F:FA:65:C3:C9:B5:7C:54:9E:72:CD:6D:C7:03:00:5B:2E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l1yf-mXDybV8VJ5yzW3HAwBbLg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/WTOZZ1HE_cM6kktrql-KGVIGRcM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/92ecea-3f3c-4baa-834b-126c7b48b847/1/l1yf-mXDybV8VJ5yzW3HAwBbLg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.112.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:df:48:13:63:51:a4:93:88:fa:25:45:54:7f:b6:e4:b8:65:
ef:60:1b:28:ad:fb:98:44:3d:f4:81:da:e4:e5:01:6b:10:27:
0e:de:c2:e4:33:73:bf:d7:3c:bf:ba:10:ae:af:fe:0e:64:52:
be:14:49:03:58:53:97:17:fb:f4:2e:a7:8c:d0:73:02:d1:4e:
ef:30:d2:5e:d0:68:eb:51:bc:ac:51:87:74:0e:06:ad:70:26:
9a:41:c4:02:4c:04:38:3d:93:4e:d4:d8:77:d8:d2:2e:b3:b5:
7d:1d:44:cf:f2:78:8f:a8:10:34:53:0f:62:24:7b:b6:3d:d3:
0e:6c:71:8e:d3:b9:ad:e7:60:ed:31:a3:22:87:7d:cf:53:c0:
6c:b6:2d:70:57:95:a7:6d:71:91:f8:e8:02:d2:eb:7e:be:61:
e9:56:2c:fc:22:c0:a1:46:41:32:af:32:37:16:12:6b:34:ce:
a7:00:48:1a:55:ca:5e:cd:82:a8:9c:f4:13:1d:67:ac:b9:e1:
db:7c:8c:9a:47:d9:ab:8f:6a:88:25:8c:4e:aa:04:04:55:17:
04:a6:f5:b1:49:4d:06:5c:57:77:d8:f8:9b:bb:9e:da:b6:9a:
53:e5:a5:5b:a1:7b:37:b2:e0:08:35:d2:1b:d4:45:f7:cd:3f:
ac:32:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:56 2024 by rpki-client on console-ams.rpki-client.org