Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/wfl-WUPrrDndcGyX0h03MdM-7OA.roa
File: wfl-WUPrrDndcGyX0h03MdM-7OA.roa (raw, json)
Hash identifier: sV+qLDV/weTSZYD8v45B6w/eidML96i59gHMEt2Ixl0=
Subject key identifier: C1:F9:7E:59:43:EB:AC:39:DD:70:6C:97:D2:1D:37:31:D3:3E:EC:E0
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018C5D590EBF6DC4AB78ADFFD046AB886B8D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/wfl-WUPrrDndcGyX0h03MdM-7OA.roa
Signing time: Tue 12 Dec 2023 09:26:06 +0000
ROA not before: Tue 12 Dec 2023 09:26:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203735
IP address blocks: 45.89.62.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:59:0e:bf:6d:c4:ab:78:ad:ff:d0:46:ab:88:6b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Dec 12 09:26:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1f97e5943ebac39dd706c97d21d3731d33eece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:7f:a4:75:ee:21:ae:ca:cd:0f:8c:da:bc:
30:14:0f:44:2e:f5:88:f0:d0:ff:7a:ee:68:3b:ac:
6b:9f:43:f4:1e:c3:01:41:6d:ee:97:08:ba:3e:94:
0c:d6:6e:5e:81:4b:91:8e:0f:26:7e:93:03:0a:98:
ec:f4:11:bc:21:a5:92:36:21:5f:12:73:f9:04:90:
6b:0c:4a:dd:2e:d5:d0:e7:d3:a7:6e:7b:b1:02:c2:
ad:52:78:67:1d:98:e2:53:a5:6a:17:1a:6b:e2:93:
82:62:f9:e8:1f:ef:ab:b3:9e:2a:d4:54:ef:2d:9f:
cf:29:7d:fd:4d:26:87:7b:a8:ac:58:aa:cb:1c:b9:
79:d8:23:16:91:8e:e1:65:2e:f6:ac:1d:1d:aa:61:
87:1f:41:18:fb:4b:e4:66:ab:d2:5a:6d:e0:50:23:
1a:65:7e:06:be:82:c8:8d:54:5b:0b:aa:1a:dd:63:
e9:ea:46:ec:aa:f3:35:1f:f0:5c:ec:a5:9f:f3:9c:
50:df:2c:80:da:8a:17:fe:32:e1:4c:03:20:cf:83:
8f:b7:8b:19:da:bb:0c:5e:a4:89:e7:58:12:a1:7e:
ea:cf:9b:7a:15:6f:4c:17:ee:47:d6:2f:7a:67:93:
cf:7b:fb:ea:7a:44:33:1f:b0:f9:a1:ab:a9:3c:dd:
7f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F9:7E:59:43:EB:AC:39:DD:70:6C:97:D2:1D:37:31:D3:3E:EC:E0
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/wfl-WUPrrDndcGyX0h03MdM-7OA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.62.0/24
Signature Algorithm: sha256WithRSAEncryption
10:0d:36:ab:85:45:34:62:75:44:91:fb:9e:7d:34:30:75:3b:
18:66:0c:90:2d:1b:9d:69:d6:d8:2f:fe:b7:67:b3:d8:86:6b:
21:11:7d:18:a1:e5:77:a5:7b:09:2e:fb:12:da:94:26:a5:1c:
a8:8b:87:3c:9f:85:06:8d:50:51:21:38:d1:07:22:a5:41:16:
6f:1b:6c:b7:b4:36:b6:84:8a:9d:92:14:89:d5:17:85:ed:83:
5f:3f:c1:aa:48:f0:ca:72:5c:a9:49:98:71:d3:d7:06:d7:50:
1b:06:1f:c9:a0:a0:09:24:f6:47:18:71:b5:17:0b:99:ea:8f:
16:d8:92:63:52:21:7d:46:83:a5:12:b0:2f:d6:7b:8d:9d:a4:
11:6b:34:80:fb:24:27:23:0b:15:93:5f:52:79:9a:11:9f:67:
66:9c:2c:f1:fa:c5:00:35:f9:4c:6d:19:bf:a6:5e:fb:6b:15:
e5:1b:a3:68:23:d0:f2:ba:16:50:06:91:d9:49:ca:1b:67:cf:
eb:ab:ab:fa:12:a0:43:6e:36:a0:a9:46:9e:ab:a4:85:19:07:
be:1f:85:8c:a7:4e:aa:70:c5:ea:0d:8b:7a:f0:93:9d:ae:fb:
80:08:2c:80:dc:d4:4e:9d:9e:c7:f1:ee:11:42:2f:98:0c:09:
24:84:20:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:36 2024 by rpki-client on console-fra.rpki-client.org