Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/WBWRS1SCC4lSkddEWdVkXMr-_xQ.roa
File: WBWRS1SCC4lSkddEWdVkXMr-_xQ.roa (raw, json)
Hash identifier: 1orRg7xdZKGVQtfgKW/ZCvWZFgDsps8YuVBOetvzml0=
Subject key identifier: 58:15:91:4B:54:82:0B:89:52:91:D7:44:59:D5:64:5C:CA:FE:FF:14
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 018C433D874AF1778B9905F6042A5DA24C45
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/WBWRS1SCC4lSkddEWdVkXMr-_xQ.roa
Signing time: Thu 07 Dec 2023 07:45:54 +0000
ROA not before: Thu 07 Dec 2023 07:45:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32787
IP address blocks: 89.147.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:43:3d:87:4a:f1:77:8b:99:05:f6:04:2a:5d:a2:4c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Dec 7 07:45:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5815914b54820b895291d74459d5645ccafeff14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:79:b1:49:61:02:76:24:4b:b2:9e:44:57:e4:
78:6d:c6:71:d9:2f:93:bd:97:64:d5:c1:cc:f1:7b:
81:35:3d:00:b6:28:1b:5d:47:da:a3:3e:5f:5b:c7:
ea:03:6d:cc:d6:58:96:ad:0b:72:09:cb:c1:a2:80:
a8:55:41:6c:3d:85:53:37:2d:cf:6d:d3:de:90:53:
c3:40:b6:c5:55:c6:40:ca:2b:b8:e8:1e:cd:39:11:
92:62:da:14:29:74:2b:22:b1:ae:f3:c4:a7:b0:a9:
81:5b:65:63:bb:08:52:f5:58:59:f4:dc:bc:77:b8:
ff:39:fc:6d:c3:60:bf:79:7d:ad:1d:e9:43:76:54:
d6:60:cd:ca:d4:b5:c6:37:4b:fe:ca:a6:87:d5:6f:
4d:74:43:8c:3d:3c:5a:d6:0c:be:c4:ba:a2:f2:0b:
51:cf:34:9e:19:51:b3:b5:42:71:0a:08:be:63:bb:
5b:b5:26:01:79:67:37:62:b0:ff:43:a4:85:18:c9:
e4:9d:b2:2b:1d:11:41:b2:6f:4f:aa:90:ed:5f:40:
f8:02:44:a4:dc:6a:22:f2:6c:f3:67:6a:14:7e:33:
10:b2:ce:1f:32:68:81:76:ba:84:da:ed:19:33:11:
e5:ed:bf:16:48:f8:05:fd:9c:61:2e:47:39:ab:ea:
27:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:91:4B:54:82:0B:89:52:91:D7:44:59:D5:64:5C:CA:FE:FF:14
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/WBWRS1SCC4lSkddEWdVkXMr-_xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.32.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:6b:d4:1f:e6:38:9c:c3:58:56:99:ff:b1:ff:08:73:3d:f2:
18:85:17:dd:30:f0:16:ac:66:23:05:ab:8b:67:4d:57:ea:7e:
d3:c3:99:50:ab:2a:d9:45:ce:18:89:d4:69:30:ea:10:f4:7d:
15:6e:70:7c:30:dc:19:b7:45:e5:89:d3:55:02:28:7b:2b:43:
a0:5a:ce:54:d7:26:cc:53:5c:7f:3f:cb:1a:fd:00:95:77:bc:
86:b4:10:0b:f3:48:f4:f7:16:3e:0a:85:9b:83:72:2e:a7:d3:
1b:d6:9d:8f:18:af:02:fc:d5:c4:84:a3:e7:e8:30:f3:76:f5:
cd:d7:bf:a5:37:74:cd:95:0b:c7:86:47:d9:a6:7a:18:ce:5a:
64:ca:1b:2d:3a:45:cb:bb:e6:7f:f2:c7:41:ff:69:85:a2:3f:
b2:f3:ba:f8:cd:50:8a:40:78:a2:72:ac:88:46:8f:a5:7a:2c:
a1:a3:55:f8:fe:1b:ae:5b:e7:6f:5a:73:ef:51:92:4b:6f:30:
d7:af:de:e5:e6:b4:41:4f:cf:96:6f:a0:a4:9d:ea:20:83:7b:
e8:22:a4:ee:ff:88:c5:29:44:66:be:c0:ad:e6:5b:25:eb:a6:
50:ff:6a:0a:a0:50:8f:69:82:d7:9a:be:f8:7a:de:52:b3:39:
ea:d9:14:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:21 2024 by rpki-client on console-fra.rpki-client.org