Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/GlxQkCXQfJaio3c8pb8ei_WYNFE.roa
File: GlxQkCXQfJaio3c8pb8ei_WYNFE.roa (raw, json)
Hash identifier: nsDCV3+9ACDQI1rkU6f8VUC+pQ6Gdl5wpAXhIiB9jsk=
Subject key identifier: 1A:5C:50:90:25:D0:7C:96:A2:A3:77:3C:A5:BF:1E:8B:F5:98:34:51
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 0185729F0284D6F452213741E6B51EBD6330
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/GlxQkCXQfJaio3c8pb8ei_WYNFE.roa
Signing time: Mon 02 Jan 2023 13:15:01 +0000
ROA not before: Mon 02 Jan 2023 13:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.97.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9f:02:84:d6:f4:52:21:37:41:e6:b5:1e:bd:63:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 2 13:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1a5c509025d07c96a2a3773ca5bf1e8bf5983451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ed:40:e9:83:c3:32:47:1a:12:d1:0e:01:01:
f2:51:6b:1b:64:71:44:02:39:a3:1f:ea:c6:67:f8:
13:6e:a8:9e:79:db:80:44:cf:93:ae:a6:59:48:d0:
df:10:0d:53:cb:b1:27:45:be:03:95:45:03:1f:49:
f6:72:23:07:09:b2:2f:ff:c9:4b:e0:f0:db:90:5d:
11:dd:88:cc:b1:6b:e8:68:6f:e2:f1:7d:71:dd:87:
c5:5b:ab:0f:e0:32:36:e6:82:9f:c1:b6:0f:0e:58:
3f:d8:bc:ba:2b:06:0f:af:1e:40:59:64:15:47:1c:
78:5c:38:37:88:b2:2e:35:c8:55:12:09:b8:f5:15:
5c:43:1a:5f:5a:44:0e:17:24:5f:f5:cd:31:cc:c2:
6f:40:ea:cd:7a:0a:2f:5d:76:c8:1e:1d:b1:88:89:
ce:3f:b7:47:59:9d:3f:1b:3a:ba:81:70:39:47:01:
6d:79:76:24:72:bd:c6:dc:6a:f8:50:70:2a:ad:2a:
d3:f8:d2:b0:53:96:ac:94:74:cb:a3:37:9c:2b:5b:
f0:79:c1:d3:ae:e9:af:1b:57:0f:ef:e9:a5:82:49:
96:14:1d:17:46:5d:50:97:77:5d:47:16:e7:0c:7c:
2f:4d:0e:a1:f9:19:c7:8a:ec:28:d8:3c:71:7e:6d:
fc:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:50:90:25:D0:7C:96:A2:A3:77:3C:A5:BF:1E:8B:F5:98:34:51
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/GlxQkCXQfJaio3c8pb8ei_WYNFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2c:88:da:54:72:49:1f:6e:8b:55:27:f9:29:0e:df:7d:4e:
3c:e7:a8:d4:2a:a7:29:9e:ff:83:42:99:76:d0:75:ba:0b:b9:
1c:fe:1e:ba:ea:6d:73:0c:5e:8a:1b:68:32:2b:c6:f6:fe:74:
65:d3:99:07:46:d7:05:d4:6e:5d:0f:f7:4d:23:8c:32:a8:93:
31:cf:9d:53:aa:ec:e8:4c:5f:8f:c2:cf:c7:8e:77:5d:1c:71:
6a:20:3d:71:e9:17:e6:43:cf:ba:94:2e:d9:f3:66:e4:64:d9:
32:65:b8:2c:a7:00:a3:e5:f4:b7:5e:65:a3:ee:10:48:f3:d1:
bc:d8:6c:a3:e5:99:1f:5a:0e:a0:a4:ff:b0:4e:47:58:af:98:
f9:03:83:29:6f:49:b2:23:28:c3:da:b7:75:df:86:b3:2f:1a:
b1:11:f2:9f:0d:d7:56:27:33:02:9a:96:5e:db:f8:17:b2:49:
a1:a6:42:77:57:60:47:b5:14:3c:cf:93:b5:42:02:b7:98:1b:
ad:9f:73:f7:df:55:3e:70:af:13:b0:71:14:91:87:cd:d7:ec:
f6:5f:d2:a1:ee:2d:d7:3f:52:d9:c7:9f:57:a9:bb:d1:c8:ce:
d9:dc:85:e8:84:cc:1f:f0:8e:33:92:24:e8:94:65:9d:cb:2e:
5e:1d:e4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org