Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WiYqNlJLfwDMGZV7GGJy8movltI.roa
File: WiYqNlJLfwDMGZV7GGJy8movltI.roa (raw, json)
Hash identifier: wyHs51Emfz1oeLlCKZJvAvHohSLpGHV65dtj3Tg3/jY=
Subject key identifier: 5A:26:2A:36:52:4B:7F:00:CC:19:95:7B:18:62:72:F2:6A:2F:96:D2
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF97AF6FD89FD9025FEBBB5826F9C05
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WiYqNlJLfwDMGZV7GGJy8movltI.roa
Signing time: Mon 02 Jan 2023 00:54:59 +0000
ROA not before: Mon 02 Jan 2023 00:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56661
IP address blocks: 92.247.100.0/23 maxlen: 23
217.79.40.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:7a:f6:fd:89:fd:90:25:fe:bb:b5:82:6f:9c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a262a36524b7f00cc19957b186272f26a2f96d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:49:ad:c8:4f:cc:1d:3c:9e:8b:98:ad:6f:cf:
af:f1:40:18:81:2f:5b:9b:8d:ad:0b:8c:3b:6b:df:
ad:ce:49:2c:54:09:dd:9c:6b:4f:15:14:d2:6a:dd:
e7:8e:33:97:64:b7:83:ba:60:1a:cb:ec:d9:04:3e:
0c:d3:40:4a:99:e4:04:c4:38:8a:cf:dc:8c:73:bc:
12:68:fc:bc:46:40:79:47:ce:39:47:e8:ad:c8:56:
fe:79:5a:cb:44:22:71:e6:c7:f9:21:dc:fb:5e:8b:
ac:87:3a:0f:bd:a0:6f:7a:dc:d9:f2:1c:a8:b6:e4:
cc:38:bf:fc:25:2f:08:0f:f2:41:2a:b9:1e:be:c1:
77:6f:80:d7:d6:ea:b3:4f:e7:d4:03:91:ff:74:4e:
59:d1:d5:62:4f:2a:d3:db:7b:a9:f2:06:17:48:11:
97:87:c6:48:29:95:d9:b6:4f:15:26:37:cb:c1:b1:
05:a5:a2:94:bc:06:d3:ad:f0:47:48:db:7d:29:38:
2d:ea:51:dc:da:d0:91:6a:c2:e4:07:11:e4:e4:29:
6b:11:d5:9a:ba:07:e8:04:8c:b8:b2:3f:67:53:94:
f8:83:67:35:b3:2a:34:d6:28:19:56:aa:8a:07:2e:
2f:cb:7a:64:2a:05:fd:75:bb:60:0e:e9:c7:75:0b:
5e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:26:2A:36:52:4B:7F:00:CC:19:95:7B:18:62:72:F2:6A:2F:96:D2
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/WiYqNlJLfwDMGZV7GGJy8movltI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.247.100.0/23
217.79.40.0/24
Signature Algorithm: sha256WithRSAEncryption
98:02:a2:3f:0b:d9:f3:85:26:f5:1a:33:58:18:43:41:dc:2a:
c5:92:59:89:49:7d:22:71:e6:de:21:2c:8f:d8:0b:f1:25:fd:
c4:42:11:7a:16:0c:08:f7:17:f9:89:ba:7b:b4:97:79:35:bd:
73:1b:5c:25:48:ec:72:11:2f:21:7a:f0:d0:bd:e4:73:0c:0a:
bd:09:84:5a:90:43:a4:82:66:96:28:a4:b2:7a:d3:3e:62:59:
fe:02:0b:62:71:8f:31:4c:b7:78:a8:ea:27:f0:0c:47:af:8f:
7f:36:b4:66:58:3e:2a:a1:b5:d3:cd:2b:6c:51:dc:aa:9b:32:
b4:60:1d:a8:ab:8e:d6:cd:0d:2a:09:0f:86:2c:86:f2:35:6b:
09:d9:0e:94:02:3c:89:c0:15:5a:23:db:a6:70:a2:7f:5d:15:
e4:bc:3b:05:73:33:6a:1a:72:bb:eb:23:46:6c:3e:d1:9b:6d:
ca:74:c6:eb:93:50:83:61:e2:b5:ad:e6:2a:91:23:bf:29:fe:
e5:c5:f5:60:79:dc:3a:b0:be:c2:ea:e1:06:84:c5:50:a2:87:
41:4a:c2:b7:a3:db:c4:d0:9c:e3:a8:08:d8:47:3f:d3:ba:04:
30:5a:20:96:66:31:e3:7d:b5:f7:91:df:62:04:9a:62:26:6a:
d2:5a:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:44 2024 by rpki-client on console-ams.rpki-client.org