Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wyrBwIG-2wyl_TB5vZoLNclEzn0.roa
File: wyrBwIG-2wyl_TB5vZoLNclEzn0.roa (raw, json)
Hash identifier: Yv8I03AnUk8ca2N0sXlTZWkEODBp3Y+eT6gqdRAKcRI=
Subject key identifier: C3:2A:C1:C0:81:BE:DB:0C:A5:FD:30:79:BD:9A:0B:35:C9:44:CE:7D
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 018CC348E179320DF68428E3F39BE3436C89
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wyrBwIG-2wyl_TB5vZoLNclEzn0.roa
Signing time: Mon 01 Jan 2024 04:29:42 +0000
ROA not before: Mon 01 Jan 2024 04:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60542
IP address blocks: 185.217.39.0/24 maxlen: 24
91.243.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 11:24:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e1:79:32:0d:f6:84:28:e3:f3:9b:e3:43:6c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jan 1 04:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c32ac1c081bedb0ca5fd3079bd9a0b35c944ce7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:d2:e5:9d:10:ea:b6:85:63:18:3b:f3:d1:
7c:a7:02:77:39:57:26:aa:e3:d3:4c:ae:95:e4:51:
24:95:df:87:38:81:ee:b9:d9:32:ed:1f:31:d5:65:
de:20:f7:70:3a:c6:4b:71:5d:d7:70:e0:69:a0:16:
6b:50:04:39:1c:d0:d4:11:1a:e5:c0:56:5a:41:e2:
35:26:06:b4:31:bc:f7:f9:fb:57:62:97:c4:3c:a9:
a4:2d:68:05:0c:1b:fe:3c:99:14:ea:fb:45:2d:65:
06:c7:45:da:ca:57:12:19:75:27:2c:a8:4e:63:a7:
d4:03:a9:3a:14:4a:54:96:fc:b8:5b:45:26:59:6e:
73:67:4d:45:ad:ad:55:d1:91:59:60:ea:93:c8:8a:
16:f1:2f:d4:0d:1e:cc:3a:ac:52:3a:c0:50:74:c0:
5c:ab:8c:16:41:a0:08:c3:4f:28:9d:12:54:7d:52:
74:70:d8:f7:29:13:bd:6a:2f:67:f6:b9:d5:c5:d6:
c7:b0:2a:e7:ca:8a:ce:f3:84:7c:8d:19:5f:69:ed:
82:3f:87:a2:17:5f:15:d2:ce:0f:71:ff:e9:d3:b6:
ca:5c:f4:b7:b8:92:96:dd:98:17:df:e4:fd:41:df:
59:25:78:ac:78:7b:ad:29:c9:66:df:84:a3:14:0a:
35:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:2A:C1:C0:81:BE:DB:0C:A5:FD:30:79:BD:9A:0B:35:C9:44:CE:7D
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/wyrBwIG-2wyl_TB5vZoLNclEzn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.119.0/24
185.217.39.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f2:e1:47:ed:b0:72:72:ae:a8:42:ab:e9:07:a2:b4:6b:f5:
1f:e3:c9:ef:92:62:0f:de:ed:82:09:f5:d4:ae:5b:8c:7b:c9:
18:be:e1:6f:65:d1:47:ff:91:39:52:6c:61:99:7c:c1:f0:21:
68:de:2e:e5:18:2d:a8:cb:cb:86:30:24:03:1b:68:73:86:1c:
3d:77:dc:eb:e4:c4:b7:65:52:2e:cb:2d:2c:cf:00:12:d9:58:
f6:22:06:a5:32:c0:31:88:4f:67:8b:99:df:d9:04:81:20:a1:
d2:25:28:fc:75:37:f1:a2:22:17:52:a7:ed:4d:54:86:99:0d:
91:de:32:72:2b:68:fd:e8:08:5d:86:64:d9:d7:58:a2:25:8d:
a8:99:cf:6d:27:c6:6d:b4:db:d0:97:5c:9d:63:6b:a6:41:6e:
a0:b5:d1:eb:86:c6:0b:42:24:71:57:08:d8:17:f4:48:d2:41:
63:bd:e7:51:97:be:8c:65:a4:24:71:97:e6:c4:3c:8f:52:33:
14:c9:65:72:a0:8a:da:93:09:dc:06:00:19:db:dc:86:2a:61:
7b:f2:4d:03:93:aa:73:4c:79:d8:e6:f7:65:d7:05:2e:3b:70:
ba:85:75:6b:6a:52:d8:b9:b5:3b:a8:bc:b0:10:e7:7e:8a:52:
57:66:77:39
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSOF5Mg32hCjj85vjQ2yJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjQwMTAxMDQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzJhYzFjMDgxYmVkYjBjYTVmZDMwNzliZDlhMGIzNWM5NDRjZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxzS5Z0Q6raFYxg789F8pwJ3OVcm
quPTTK6V5FEkld+HOIHuudky7R8x1WXeIPdwOsZLcV3XcOBpoBZrUAQ5HNDUERrl
wFZaQeI1Jga0Mbz3+ftXYpfEPKmkLWgFDBv+PJkU6vtFLWUGx0XaylcSGXUnLKhO
Y6fUA6k6FEpUlvy4W0UmWW5zZ01Fra1V0ZFZYOqTyIoW8S/UDR7MOqxSOsBQdMBc
q4wWQaAIw08onRJUfVJ0cNj3KRO9ai9n9rnVxdbHsCrnyorO84R8jRlfae2CP4ei
F18V0s4Pcf/p07bKXPS3uJKW3ZgX3+T9Qd9ZJXiseHutKclm34SjFAo1AwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMMqwcCBvtsMpf0web2aCzXJRM59MB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvd3lyQndJRy0yd3lsX1RCNXZab0xOY2xFem4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/N3AwQA
udknMA0GCSqGSIb3DQEBCwUAA4IBAQCk8uFH7bBycq6oQqvpB6K0a/Uf48nvkmIP
3u2CCfXUrluMe8kYvuFvZdFH/5E5UmxhmXzB8CFo3i7lGC2oy8uGMCQDG2hzhhw9
d9zr5MS3ZVIuyy0szwAS2Vj2IgalMsAxiE9ni5nf2QSBIKHSJSj8dTfxoiIXUqft
TVSGmQ2R3jJyK2j96AhdhmTZ11iiJY2omc9tJ8ZttNvQl1ydY2umQW6gtdHrhsYL
QiRxVwjYF/RI0kFjvedRl76MZaQkcZfmxDyPUjMUyWVyoIrakwncBgAZ29yGKmF7
8k0Dk6pzTHnY5vdl1wUuO3C6hXVralLYubU7qLywEOd+ilJXZnc5
-----END CERTIFICATE-----
Generated at Mon Feb 5 14:22:06 2024 by rpki-client on console-ams.rpki-client.org