Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wz1ybl5x3KMeJ3i2ESHNcu_w2yM.roa
File: wz1ybl5x3KMeJ3i2ESHNcu_w2yM.roa (raw, json)
Hash identifier: cnq4AD3f397vOcC4CHx7MUphW5RvSXt6B5VCtanO/Z0=
Subject key identifier: C3:3D:72:6E:5E:71:DC:A3:1E:27:78:B6:11:21:CD:72:EF:F0:DB:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018AA7B6CE9989000BB4047A2DF4E435CF21
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wz1ybl5x3KMeJ3i2ESHNcu_w2yM.roa
Signing time: Mon 18 Sep 2023 09:54:50 +0000
ROA not before: Mon 18 Sep 2023 09:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 89.45.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Oct 2023 13:28:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:b6:ce:99:89:00:0b:b4:04:7a:2d:f4:e4:35:cf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 18 09:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c33d726e5e71dca31e2778b61121cd72eff0db23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:46:72:1a:70:0f:00:7e:37:87:0a:b3:a6:df:
20:27:fb:8a:b5:db:b1:9d:1d:f2:75:b7:79:5a:8e:
c9:c3:81:d6:ca:dc:6e:d4:2d:be:e3:53:7f:8d:43:
4c:f3:c0:df:5a:6a:0c:74:de:f6:80:bf:18:83:75:
ae:0f:7c:2c:2f:fc:fc:60:0c:11:fd:e3:9f:d8:6f:
3e:17:64:b3:7c:06:6e:b8:8b:a0:65:ba:12:9a:6c:
39:e2:d9:a1:8e:83:a6:05:54:77:b1:c7:8e:03:85:
8d:b0:c6:a3:79:3c:40:bb:e3:01:3e:2d:eb:36:21:
6b:4c:15:5d:c7:a8:9d:e0:6a:fc:47:3a:7d:c4:49:
b7:c9:52:c6:79:23:a9:81:58:c1:eb:58:e2:6f:28:
e3:13:b1:80:96:86:8b:e0:ce:fd:a1:3c:d9:02:91:
e9:05:90:dd:99:7c:42:57:43:04:94:4c:f9:8d:9e:
c1:ce:6c:94:b6:6c:c8:e9:2f:d8:b6:cc:3d:de:48:
04:9a:04:95:15:d2:ce:7a:32:8c:d4:12:bd:68:97:
36:23:92:a1:da:7e:db:52:63:09:25:8b:28:55:7d:
41:84:83:e3:a6:2f:6e:ce:0a:e4:46:39:db:e0:4b:
6f:57:3a:65:75:65:26:b4:27:bc:d6:10:66:f1:db:
12:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3D:72:6E:5E:71:DC:A3:1E:27:78:B6:11:21:CD:72:EF:F0:DB:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wz1ybl5x3KMeJ3i2ESHNcu_w2yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.45.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:17:69:f5:08:0c:f1:12:b0:9e:aa:77:76:93:9d:a2:30:d3:
12:0b:f5:cc:14:3a:8a:5b:46:f5:af:ce:73:b8:e4:3c:8e:83:
43:dd:d8:20:81:9e:31:c3:08:69:a8:fd:25:d5:1f:22:3c:36:
bc:c6:62:4b:9a:bb:1d:41:97:29:be:0d:0b:01:0c:21:c8:f0:
c3:94:48:ee:b4:ba:9b:56:62:9f:39:20:9e:c2:25:ed:58:a4:
c3:b7:64:3c:bd:6b:34:41:d5:80:6d:2f:d0:06:15:21:05:17:
2b:56:56:80:6f:a4:47:12:9f:a4:db:18:a7:42:d1:54:6a:a5:
df:f4:fb:32:f4:53:db:8f:e3:36:66:2d:47:7b:a2:1d:a0:74:
ad:68:e8:76:26:71:c6:b7:f6:68:f9:ee:f8:36:2c:11:50:71:
2d:d2:96:1d:be:fa:ef:65:6f:f1:1f:a5:65:b3:9d:1d:0a:d3:
13:9b:c5:2d:7b:6e:54:5c:5c:2b:cc:c2:8a:7c:19:52:24:03:
a0:8e:fb:54:3b:59:2f:e5:fe:82:a0:c6:cf:b9:ae:c8:1b:41:
97:b2:c7:2c:76:3a:09:82:bf:2b:e2:6e:41:75:ea:94:94:91:
fe:7e:32:ea:35:0e:be:f7:11:3e:39:f6:df:e3:89:94:83:31:
0e:5a:78:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:15 2024 by rpki-client on console-ams.rpki-client.org