Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wnrkI0ZXkr7q5UPHFYHWA_p_d-U.roa
File: wnrkI0ZXkr7q5UPHFYHWA_p_d-U.roa (raw, json)
Hash identifier: MdSVpQBgwyt5Rh0v7wu7fEG8ritG8fm5KKcy2NTP17Y=
Subject key identifier: C2:7A:E4:23:46:57:92:BE:EA:E5:43:C7:15:81:D6:03:FA:7F:77:E5
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019253AD73AA99A92D2C24995A15AC86C2D9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wnrkI0ZXkr7q5UPHFYHWA_p_d-U.roa
Signing time: Thu 03 Oct 2024 18:38:49 +0000
ROA not before: Thu 03 Oct 2024 18:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Nov 2024 15:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:ad:73:aa:99:a9:2d:2c:24:99:5a:15:ac:86:c2:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 3 18:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27ae423465792beeae543c71581d603fa7f77e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e7:16:75:42:b0:07:cb:78:68:bb:f7:67:af:
f7:fa:55:b6:cc:71:c9:71:09:3d:32:f5:79:31:d0:
a9:66:d9:8a:f0:be:7c:dc:c7:56:18:e2:6f:1e:b9:
0c:bc:95:f9:b9:59:8e:0a:71:13:e3:69:e9:22:33:
9e:12:c1:fe:e8:49:f5:5b:44:37:c7:97:17:5f:a7:
0d:8f:e9:dd:70:43:80:02:e4:a7:50:be:07:28:1a:
1b:77:26:51:31:e2:33:e7:b6:6c:5c:21:09:74:91:
ea:99:b2:89:98:97:63:8d:a8:12:d9:a8:d8:86:52:
23:28:f8:7c:23:6b:1d:57:b3:aa:4e:3a:d9:e4:24:
66:3c:b2:22:e1:1e:a5:4b:93:a8:60:e6:32:15:ac:
b1:16:92:6f:10:9a:ec:e9:b6:0f:97:16:25:05:aa:
44:46:91:2a:1f:54:e0:be:84:ee:35:c1:07:d4:7e:
e3:63:ad:81:49:87:20:da:29:77:67:06:df:78:12:
3f:4e:8f:44:2b:14:c8:a1:5a:3e:e5:4f:df:ad:05:
4d:a6:54:9b:f9:4c:6a:3a:a9:21:b1:fb:3b:d1:aa:
f2:13:b9:25:05:66:42:68:1d:d0:3b:66:f3:1d:fe:
67:c8:8e:d5:dc:ae:f5:ab:8c:f4:cd:ed:e2:b1:78:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7A:E4:23:46:57:92:BE:EA:E5:43:C7:15:81:D6:03:FA:7F:77:E5
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wnrkI0ZXkr7q5UPHFYHWA_p_d-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ca:a3:85:72:8e:b9:9c:6a:e8:c4:0c:7a:c6:3d:a8:36:99:
99:e0:43:6b:4f:c3:79:0d:54:38:9f:c8:6f:9f:4b:bd:ab:07:
20:68:6c:2f:29:83:bd:ef:4f:f6:d2:d6:24:f7:8b:64:1f:e7:
24:73:1d:8d:b7:af:7d:5c:e2:ac:c4:b2:49:b1:92:50:55:de:
7e:db:7b:8f:8c:ab:70:ca:ac:98:0b:ce:a4:9a:5b:b8:db:81:
31:01:32:f8:53:80:d6:4d:78:32:50:93:45:6a:ac:90:9a:fd:
7e:0d:66:04:bc:2c:b0:06:b0:3a:9e:c1:9e:24:70:17:1d:e2:
eb:fa:e5:61:c0:ec:1e:7b:50:b7:ca:cf:7e:7f:b1:d0:bd:fa:
20:fb:73:6f:c4:e4:66:b5:b2:7d:83:e4:77:f7:bb:fb:a3:70:
15:76:44:22:01:b2:79:b9:aa:d7:24:6b:ab:1a:db:82:3d:d4:
8f:63:91:28:40:98:73:83:7f:20:39:ad:e2:4a:9c:fc:04:42:
38:45:e0:78:3d:a6:3d:5f:3c:d9:44:8c:1e:b7:b7:aa:4d:82:
c3:11:b7:8e:b1:4a:38:69:de:73:f1:07:28:db:23:a9:47:18:
42:1b:d6:14:a2:e9:a1:d3:85:de:db:a8:a2:8c:2e:ac:ba:23:
96:75:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 21:19:10 2024 by rpki-client on console-ams.rpki-client.org