Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/WLEs_S4GpDi_iwmEC2jfP5kFizY.roa
File: WLEs_S4GpDi_iwmEC2jfP5kFizY.roa (raw, json)
Hash identifier: 4/JAAE/oy10QiO6/wnBqsut0iC6iKUx/iuHa5oU2xw8=
Subject key identifier: 58:B1:2C:FD:2E:06:A4:38:BF:8B:09:84:0B:68:DF:3F:99:05:8B:36
Certificate issuer: /CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Certificate serial: 018572836E966513AD5BC3C1634CEE115A5C
Authority key identifier: 9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/WLEs_S4GpDi_iwmEC2jfP5kFizY.roa
Signing time: Mon 02 Jan 2023 12:44:54 +0000
ROA not before: Mon 02 Jan 2023 12:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47984
IP address blocks: 91.207.26.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:83:6e:96:65:13:ad:5b:c3:c1:63:4c:ee:11:5a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e8cd7d6a4105750bf8975a7d0b96794c1efe622
Validity
Not Before: Jan 2 12:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58b12cfd2e06a438bf8b09840b68df3f99058b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5d:1f:0d:81:0f:b7:ff:b3:d4:7c:2a:fb:7c:
a1:e0:a3:06:13:34:b2:7b:c0:76:19:99:0f:24:7b:
c4:f1:52:f7:70:b3:dc:9a:07:08:63:34:90:2c:5c:
ce:ad:16:fc:38:0d:b2:6f:a9:e2:0d:dd:11:97:23:
63:ea:f8:b4:7a:96:97:d8:6d:10:ed:27:a0:d9:65:
8d:9b:e3:59:17:e2:17:f4:fb:ee:15:67:fd:57:37:
d7:23:87:65:fa:fb:fa:d7:da:47:0a:b7:2c:c9:66:
25:00:a1:50:c5:9b:d0:1b:60:47:98:47:f6:82:a8:
61:e7:4d:74:a1:75:06:89:3c:72:1b:e5:35:fc:c8:
75:5a:15:dd:64:ff:91:ae:61:f7:58:16:2f:59:73:
2a:55:1c:0b:3a:f2:6f:54:ec:b0:a4:19:91:39:0a:
ec:3e:0b:70:43:19:34:67:20:3b:c0:79:06:ef:fe:
65:d0:2c:c8:53:7d:34:e1:10:de:5d:e3:52:02:8c:
97:2f:da:cf:8e:01:46:cf:7e:8d:ab:0d:3e:e3:3f:
80:c1:0c:b3:66:82:04:0d:cb:68:d2:1c:71:f9:3f:
0c:3f:62:0f:f1:24:5d:c2:8e:6a:33:70:45:b0:76:
88:4f:f0:d7:fd:fb:72:02:e6:66:d5:04:16:43:fa:
ed:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:B1:2C:FD:2E:06:A4:38:BF:8B:09:84:0B:68:DF:3F:99:05:8B:36
X509v3 Authority Key Identifier:
keyid:9E:8C:D7:D6:A4:10:57:50:BF:89:75:A7:D0:B9:67:94:C1:EF:E6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nozX1qQQV1C_iXWn0LlnlMHv5iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/WLEs_S4GpDi_iwmEC2jfP5kFizY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/85c6bd-6a68-4d11-b9cd-8c2df5a5c6d7/1/nozX1qQQV1C_iXWn0LlnlMHv5iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.26.0/23
Signature Algorithm: sha256WithRSAEncryption
03:db:3d:68:18:6a:75:d2:c8:9f:30:d3:78:01:27:5f:19:93:
b0:86:51:e4:92:9b:b9:82:2b:64:c6:01:86:cd:55:51:23:4f:
d6:e5:1d:27:1c:9e:66:da:0a:e0:01:4d:04:82:5d:33:8e:01:
69:33:d2:6c:07:f5:64:85:ce:18:0c:38:e1:77:9a:83:9c:fa:
ce:ce:27:bd:d1:f0:de:0c:9f:27:26:f8:9d:ba:c3:32:04:1c:
a2:a8:8b:c8:64:46:9c:12:23:0e:e9:95:c6:b9:d9:a6:e2:b2:
82:e1:49:ec:eb:3a:fa:ce:6d:ff:e5:17:12:b1:fd:ae:a1:91:
c1:f0:d2:f2:33:61:1b:4b:5f:ea:a7:5c:2f:5f:c5:cd:e4:e5:
00:cc:c0:bb:c4:b5:c6:a6:69:82:9f:ab:44:39:87:b7:c8:11:
b1:8d:a1:83:7d:ef:b0:44:63:3e:73:63:7c:05:fe:69:c5:77:
fe:da:9e:6b:fd:fa:33:8c:eb:92:3d:37:22:0e:cf:94:cd:e8:
d4:d8:6c:9f:76:12:72:b2:2b:d9:e9:32:82:d4:a2:37:d5:b4:
53:6b:d2:14:1d:7f:ac:77:0b:2c:bf:c8:9d:17:dd:55:d0:1c:
b1:6a:94:23:aa:65:73:4e:e1:82:bb:ce:bc:76:73:7c:07:71:
db:fe:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:42 2024 by rpki-client on console-ams.rpki-client.org