Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/Wyyej17cjuqNKmRmCgYUVGWeKZA.roa
File: Wyyej17cjuqNKmRmCgYUVGWeKZA.roa (raw, json)
Hash identifier: 44WnNBuQXsf4Ub3wepv3vhZDc+3As8P+Td573CVHaqk=
Subject key identifier: 5B:2C:9E:8F:5E:DC:8E:EA:8D:2A:64:66:0A:06:14:54:65:9E:29:90
Certificate issuer: /CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Certificate serial: 018DA7F70B917186FAD1EF5AB89F9D861227
Authority key identifier: 07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/Wyyej17cjuqNKmRmCgYUVGWeKZA.roa
Signing time: Wed 14 Feb 2024 14:13:21 +0000
ROA not before: Wed 14 Feb 2024 14:13:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 89.222.36.0/24 maxlen: 24
89.222.37.0/24 maxlen: 24
89.222.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 09:50:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:f7:0b:91:71:86:fa:d1:ef:5a:b8:9f:9d:86:12:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a32999c47eb31d5fbf16ecc3872eaefd43bad7
Validity
Not Before: Feb 14 14:13:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b2c9e8f5edc8eea8d2a64660a061454659e2990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:59:55:ff:b8:e3:a2:09:75:e0:9f:0b:62:6d:
18:41:24:31:ae:0c:f3:47:4f:fb:1a:ea:3f:9b:e4:
12:56:a2:db:e7:43:cd:75:93:72:40:b2:67:4f:a4:
31:a1:47:f6:45:25:bf:36:88:89:79:e6:2c:d1:cc:
85:3b:77:65:0d:15:c8:e8:29:fc:96:4c:cb:1e:0c:
55:03:87:b7:43:ee:ae:dc:30:5b:ab:b4:db:b9:b7:
f7:43:75:b4:60:e7:b6:95:f2:96:cb:3c:74:96:c0:
fd:d9:09:52:19:6e:c0:3c:47:5c:07:a6:e3:d7:5e:
bb:98:0c:13:6a:05:61:69:84:fc:fb:3f:9e:b9:04:
f6:4e:21:60:42:4e:40:30:a2:98:9d:6c:88:69:58:
d5:44:1b:9f:cc:8f:e3:46:fa:c7:d1:0d:43:7a:3f:
01:30:a6:fa:0c:31:52:2e:4b:7b:5f:cb:77:02:ef:
30:8b:6b:3d:c6:a2:a5:8a:fd:ad:46:74:77:53:05:
83:0c:27:a7:44:1c:9c:fd:6c:a6:62:35:37:e3:08:
21:17:d9:9c:44:87:67:67:4f:67:f0:d3:0d:98:69:
34:e4:1e:9a:8a:e6:38:ba:a1:68:e2:41:b2:71:48:
32:27:5a:21:ee:da:74:e1:6a:8f:aa:20:c9:e6:81:
66:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:9E:8F:5E:DC:8E:EA:8D:2A:64:66:0A:06:14:54:65:9E:29:90
X509v3 Authority Key Identifier:
keyid:07:A3:29:99:C4:7E:B3:1D:5F:BF:16:EC:C3:87:2E:AE:FD:43:BA:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6MpmcR-sx1fvxbsw4curv1Dutc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/Wyyej17cjuqNKmRmCgYUVGWeKZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/738179-cf67-4199-b532-2fb2958ab8bb/1/B6MpmcR-sx1fvxbsw4curv1Dutc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.222.36.0-89.222.38.255
Signature Algorithm: sha256WithRSAEncryption
99:d5:09:49:87:37:ed:de:22:27:db:40:72:1c:16:78:a4:b1:
f1:b7:74:3b:c6:43:d4:fd:97:b7:dd:4d:38:dc:e5:ed:fd:78:
70:0a:77:e9:92:70:f1:0c:06:48:77:95:4b:df:79:fe:6d:42:
e1:17:c2:e6:35:90:8f:c0:6e:e3:52:6b:5c:4e:39:bd:90:07:
31:68:3b:9a:24:55:33:08:c8:f5:22:41:83:fb:e6:ef:ff:11:
7d:a0:8d:92:ce:5a:a2:0c:5f:37:c9:9c:71:c8:79:dc:9a:44:
04:89:2b:5e:ae:c5:a7:06:67:83:1d:74:70:33:a9:b7:53:b4:
3d:e1:a2:12:8f:2e:08:15:9e:86:99:7c:fc:71:13:ab:72:f2:
ae:01:25:2a:1c:48:4e:a2:51:37:19:a0:a0:4b:47:20:fc:71:
22:71:3b:4b:dd:4b:b1:d2:29:57:bf:6b:24:63:ab:0d:d6:09:
e1:0c:87:af:49:6d:7a:c1:2a:da:24:b5:67:58:d5:26:6d:88:
f5:bb:93:f3:5c:23:24:10:ed:73:37:f4:dc:da:63:53:85:7e:
01:57:de:00:54:31:f7:2d:03:2e:de:17:48:23:f7:1c:06:f2:
ea:92:87:71:78:f9:de:9c:37:48:60:74:fa:35:63:1b:39:9e:
fc:9f:09:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:51 2024 by rpki-client on console-ams.rpki-client.org