Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/wlQ5JMi6TyJT9-KuvbSh6VzPPIw.roa
File: wlQ5JMi6TyJT9-KuvbSh6VzPPIw.roa (raw, json)
Hash identifier: FWBp/9nfYQcCEpsEXQBltscIbfTtctkZSuDVjYHNAUc=
Subject key identifier: C2:54:39:24:C8:BA:4F:22:53:F7:E2:AE:BD:B4:A1:E9:5C:CF:3C:8C
Certificate issuer: /CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Certificate serial: 018FC37E90AA0F39E88853632ECE29A2127D
Authority key identifier: 8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/wlQ5JMi6TyJT9-KuvbSh6VzPPIw.roa
Signing time: Wed 29 May 2024 08:36:42 +0000
ROA not before: Wed 29 May 2024 08:36:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31004
IP address blocks: 91.230.140.0/23 maxlen: 23
91.230.140.0/24 maxlen: 24
93.157.32.0/21 maxlen: 23
2a00:4bc0:2000::/44 maxlen: 56
2a00:4bc0:2100::/40 maxlen: 48
2a00:4bc0:2300::/40 maxlen: 48
2a00:4bc0:2400::/40 maxlen: 48
Validation: Failed, certificate revoked on Wed 29 May 2024 08:56:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:c3:7e:90:aa:0f:39:e8:88:53:63:2e:ce:29:a2:12:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f2824c61357dc344bbdf35b83577459b9d3fc44
Validity
Not Before: May 29 08:36:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2543924c8ba4f2253f7e2aebdb4a1e95ccf3c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7b:67:fb:13:16:60:e0:c7:26:55:0d:6a:33:
a0:99:28:34:8f:bd:30:e0:b9:15:7e:0f:2d:ab:52:
f0:c2:66:d1:c3:7c:ac:02:4e:b6:ae:63:ac:db:5c:
30:05:08:17:88:aa:f2:33:18:d4:c4:3f:ff:84:d6:
f1:3f:d6:b2:40:0c:ef:89:67:4f:64:b7:cc:2f:4c:
bd:2a:a0:6f:9d:3f:03:a6:fc:14:ce:ac:5c:6f:33:
58:58:89:3e:bb:86:22:74:12:7f:4e:77:57:2e:3d:
38:b9:a8:41:8f:f7:b7:25:07:60:eb:db:69:d7:dd:
04:d1:92:7c:bd:90:48:14:92:90:c3:46:8e:fa:89:
fe:f1:45:b5:58:38:1d:6f:0e:fc:50:4b:7a:01:5c:
ea:a0:7a:2d:b2:a7:fa:38:be:42:3f:11:9a:52:38:
5d:5c:8a:e8:84:cd:b7:5a:1c:04:2e:90:9c:d9:b0:
71:6a:61:6a:c5:d2:56:ce:40:6e:ad:bc:1a:2c:4d:
6a:a8:60:74:dc:3d:93:67:e4:19:ae:2c:73:a9:f7:
0c:ca:b4:1b:9e:08:ae:1a:7b:1b:5e:38:26:f1:6e:
c6:33:ef:01:93:1f:de:59:c7:eb:3f:62:6e:a0:1b:
4f:17:65:c4:e6:a1:13:d5:d0:2c:36:47:e9:11:86:
34:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:54:39:24:C8:BA:4F:22:53:F7:E2:AE:BD:B4:A1:E9:5C:CF:3C:8C
X509v3 Authority Key Identifier:
keyid:8F:28:24:C6:13:57:DC:34:4B:BD:F3:5B:83:57:74:59:B9:D3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jygkxhNX3DRLvfNbg1d0WbnT_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/wlQ5JMi6TyJT9-KuvbSh6VzPPIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/652eb4-321c-48c0-9272-3ae711af034b/1/jygkxhNX3DRLvfNbg1d0WbnT_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.140.0/23
93.157.32.0/21
IPv6:
2a00:4bc0:2000::/44
2a00:4bc0:2100::/40
2a00:4bc0:2300::-2a00:4bc0:24ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:b1:07:88:83:8e:71:d2:74:d7:5a:e4:c1:b2:7a:38:ea:44:
da:b2:36:63:2e:0f:75:cf:9e:19:e1:50:ae:56:c3:ee:b5:ec:
dd:44:47:a2:55:41:d4:84:03:98:19:60:f8:60:60:81:14:c6:
e9:c3:97:f2:36:fa:97:e8:b3:9f:c6:16:db:a6:d5:d8:ce:44:
0a:69:05:63:87:b8:d0:6d:e8:52:3f:a9:5b:32:82:5d:46:05:
78:70:fa:89:2e:ef:ce:83:8b:df:a3:9e:87:db:6e:2d:80:98:
9c:6b:6a:76:09:43:fc:4b:52:e5:7c:fb:29:84:96:de:62:54:
18:92:c8:6f:14:e7:0f:09:ca:34:f1:d2:6d:74:f0:1f:22:b3:
6f:1e:95:6f:72:a0:d0:ca:7a:a5:0d:31:96:c4:63:08:ea:d6:
49:d1:6e:1b:2e:d9:cb:11:44:8f:76:7b:46:a3:f2:0b:36:1a:
23:6a:f0:6b:2c:4d:14:80:06:82:21:c7:04:ca:c2:64:a2:b9:
9c:7a:02:44:27:0e:0f:33:e2:99:43:36:ab:fa:93:1e:d0:f3:
14:6c:c6:bc:ae:29:99:07:85:a0:b4:97:d5:7d:2f:6b:85:66:
ff:0a:13:37:4c:da:13:c7:9b:87:be:b9:c4:e7:a6:a7:71:f7:
cc:8c:1b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:46 2024 by rpki-client on console-fra.rpki-client.org