Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/wyN5ADXvI9SA7TlvV4V6AHlSm9I.roa
File: wyN5ADXvI9SA7TlvV4V6AHlSm9I.roa (raw, json)
Hash identifier: v6/Y83BAmjaASKO2zJd3zxPg8YPPWUJrrnHStIePymM=
Subject key identifier: C3:23:79:00:35:EF:23:D4:80:ED:39:6F:57:85:7A:00:79:52:9B:D2
Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial: 019133E0A0D723FB0B56B7BAF624CCF8585B
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/wyN5ADXvI9SA7TlvV4V6AHlSm9I.roa
Signing time: Thu 08 Aug 2024 21:24:04 +0000
ROA not before: Thu 08 Aug 2024 21:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57230
IP address blocks: 87.236.210.0/24 maxlen: 24
87.236.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 11 Aug 2024 15:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:33:e0:a0:d7:23:fb:0b:56:b7:ba:f6:24:cc:f8:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Validity
Not Before: Aug 8 21:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c323790035ef23d480ed396f57857a0079529bd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:be:9d:ec:fb:09:52:45:d0:b8:a4:8a:b6:51:
85:a8:f6:cd:bd:d8:66:7f:57:11:e4:5b:c2:d9:a7:
c2:fa:19:e7:a3:b6:2e:07:31:14:cb:70:91:6f:7c:
0e:0e:e6:8d:ee:1f:36:2c:6b:d6:fe:ad:8f:f1:90:
90:aa:98:de:e6:df:4e:6a:40:af:dc:79:20:f9:be:
04:36:d4:3b:a3:d8:ee:93:3f:67:d6:47:0e:03:b5:
da:e7:3d:e1:94:de:69:d4:dc:39:b2:84:17:0b:11:
58:01:7e:fa:37:f5:e4:e6:70:86:6b:65:f6:cd:b5:
e6:3f:08:59:19:6a:b7:03:9c:60:41:bf:45:3f:51:
e9:f0:2b:d9:2e:e2:81:16:15:72:38:fb:65:b4:b4:
e3:f4:16:01:3a:16:90:b1:61:ef:7a:a6:69:5f:25:
6c:60:3b:2f:25:fa:02:ae:1e:b5:93:fe:d0:94:87:
29:8a:3d:89:76:9a:89:f6:d0:97:73:49:c3:dc:95:
23:d9:03:0b:09:32:e7:18:ec:0b:23:94:9d:1a:64:
74:3d:5a:75:b2:ea:88:b2:e3:9c:dd:1a:2c:95:dd:
9b:94:53:fc:f3:2b:b4:4f:73:e0:73:f6:d6:5e:b3:
e4:a5:73:59:e2:88:12:89:df:f7:2b:8d:23:f7:c6:
ca:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:23:79:00:35:EF:23:D4:80:ED:39:6F:57:85:7A:00:79:52:9B:D2
X509v3 Authority Key Identifier:
keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/wyN5ADXvI9SA7TlvV4V6AHlSm9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.210.0/24
87.236.212.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:6b:0c:c0:dd:bf:f1:eb:4a:b2:34:d9:60:84:69:43:2b:03:
1c:f3:69:32:57:00:30:92:68:a3:6b:31:79:7c:2b:3f:76:2a:
41:91:30:18:ff:ca:98:de:fe:76:f9:cc:d7:8d:5e:9e:d3:a8:
f0:9c:a5:64:54:c1:82:8a:fc:93:59:f6:9b:2e:71:74:78:9b:
4c:26:da:50:41:65:5c:64:bd:26:c1:ee:00:9b:b9:44:48:83:
d3:45:30:65:a7:2f:16:55:41:24:56:50:a2:34:d2:b5:11:a6:
40:65:52:c9:85:14:25:c7:ab:10:db:fb:10:81:78:29:9f:2e:
ba:5b:17:1f:bc:67:55:af:52:9f:89:ef:03:75:c0:01:d2:b1:
e3:21:9a:d8:9f:9e:f1:52:9a:cd:24:85:90:f3:da:bb:4e:e7:
d1:da:56:f6:e7:f8:2b:35:be:0f:74:95:af:8c:5d:a1:9c:7a:
06:e5:25:50:81:d7:5f:2e:ac:5c:18:ef:15:cc:97:1e:ac:42:
b9:be:1d:d7:76:79:9f:ad:b1:8e:8a:2b:1f:55:a6:3e:9a:cd:
06:a7:8a:9d:28:c3:99:ba:ee:f3:23:74:32:56:43:7a:b0:a1:
84:d4:35:66:9b:02:cc:7d:7d:ec:93:31:91:c5:8a:5f:33:79:
d3:5f:41:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 17:36:01 2024 by rpki-client on console-ams.rpki-client.org