Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/wl-8TO69B-J47_kTGcjNsA_Tqyc.roa
File: wl-8TO69B-J47_kTGcjNsA_Tqyc.roa (raw, json)
Hash identifier: Xj2v6X21vHW8TrdnVMh7r+IginC2+m7fjpx6jP73f+E=
Subject key identifier: C2:5F:BC:4C:EE:BD:07:E2:78:EF:F9:13:19:C8:CD:B0:0F:D3:AB:27
Certificate issuer: /CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Certificate serial: 019227ADB702159921094F4A32D0D94EB799
Authority key identifier: D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/wl-8TO69B-J47_kTGcjNsA_Tqyc.roa
Signing time: Wed 25 Sep 2024 05:35:48 +0000
ROA not before: Wed 25 Sep 2024 05:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39370
IP address blocks: 89.147.0.0/23 maxlen: 23
89.147.0.0/24 maxlen: 24
89.147.1.0/24 maxlen: 24
89.147.2.0/24 maxlen: 24
89.147.3.0/24 maxlen: 24
89.147.4.0/24 maxlen: 24
89.147.5.0/24 maxlen: 24
89.147.6.0/23 maxlen: 23
89.147.6.0/24 maxlen: 24
89.147.7.0/24 maxlen: 24
89.147.32.0/23 maxlen: 23
89.147.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 24 Oct 2024 12:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:27:ad:b7:02:15:99:21:09:4f:4a:32:d0:d9:4e:b7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7d0674bd6f0cc9175219a328c8b396829f6c0af
Validity
Not Before: Sep 25 05:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c25fbc4ceebd07e278eff91319c8cdb00fd3ab27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:53:7b:d7:ca:c7:b2:76:fa:e6:d6:de:20:51:
99:98:b9:5c:67:79:95:ea:78:53:31:ee:24:10:a5:
cb:e0:a1:1c:3d:0a:bd:20:48:14:03:ad:2c:38:98:
8d:b6:02:3e:d2:ac:2f:6d:60:0f:b5:56:a1:3e:fc:
d3:73:90:26:e4:94:9c:5e:97:a2:09:1e:7f:cd:fe:
29:1d:81:67:3d:65:71:fd:4c:02:ec:a0:e6:a6:f7:
04:cc:95:87:d6:15:6c:c9:57:0a:44:34:d0:fa:11:
a2:16:54:3b:a7:8c:9a:e5:74:94:0a:d3:14:90:fa:
da:ee:89:e4:0f:a3:a5:f7:cb:9c:0b:2b:b3:23:d7:
e0:9c:cb:69:ff:b4:96:f6:50:54:22:75:17:c6:76:
37:33:cf:d3:1d:86:6b:82:89:b2:42:db:f7:b4:e1:
18:4e:98:22:85:6b:9a:2f:27:e1:13:a6:3b:50:e1:
61:71:36:d9:ea:a3:ae:8b:fa:9d:cb:4a:e7:4d:c9:
c5:f2:09:1c:ac:ba:97:9f:dd:5f:52:82:34:00:d8:
f5:16:b1:bf:50:f8:58:9c:36:3b:08:28:58:7a:ae:
20:d8:b0:64:a7:5d:25:57:6d:99:ca:b2:60:68:b2:
05:b2:71:c4:0c:1a:1d:1f:14:34:2f:e8:56:f0:97:
ed:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:5F:BC:4C:EE:BD:07:E2:78:EF:F9:13:19:C8:CD:B0:0F:D3:AB:27
X509v3 Authority Key Identifier:
keyid:D7:D0:67:4B:D6:F0:CC:91:75:21:9A:32:8C:8B:39:68:29:F6:C0:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19BnS9bwzJF1IZoyjIs5aCn2wK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/wl-8TO69B-J47_kTGcjNsA_Tqyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b30e5d-8b3b-4287-9b3b-8232fa3e629d/1/19BnS9bwzJF1IZoyjIs5aCn2wK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.147.0.0/21
89.147.32.0-89.147.34.255
Signature Algorithm: sha256WithRSAEncryption
5c:e2:b8:77:42:ff:9d:34:ba:2d:ff:cd:40:16:0c:5c:3d:49:
db:da:35:d6:38:ab:e8:bd:ab:13:96:2e:e8:11:fb:17:ee:90:
f8:59:e9:3b:07:e0:5f:4e:4d:fb:0b:e0:77:c5:54:41:34:d9:
d2:3d:7b:0f:98:fd:cc:8f:e0:d7:0e:46:cf:5d:5d:32:e4:91:
38:b6:ab:43:0a:5b:7f:49:4c:82:57:4f:df:e6:e7:48:d9:53:
be:94:b4:ae:73:70:b7:c4:57:97:e1:02:97:e5:9f:62:f1:86:
70:b3:06:57:21:80:14:87:81:44:f0:ca:2f:97:66:da:78:65:
14:72:97:57:b0:27:7a:7a:84:e6:08:bd:31:e7:72:20:48:c1:
e2:1a:31:d5:52:80:2f:10:82:e2:40:2d:99:f9:75:81:4c:64:
24:5c:12:61:00:24:11:28:8b:b5:d9:e7:87:8b:f6:68:01:3f:
b7:24:65:92:cd:e8:d3:f3:93:89:97:84:00:07:57:cf:cc:30:
75:53:9e:29:8a:b4:5f:1a:d4:5c:42:43:d6:2a:ab:2c:f7:cd:
42:21:2f:1d:e8:82:db:fb:57:2f:98:9d:ea:b4:f9:2f:58:c0:
10:24:14:d3:af:b8:df:51:8d:a8:a8:2f:ea:b9:1d:8f:df:bf:
a1:13:b5:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Oct 24 15:05:54 2024 by rpki-client on console-fra.rpki-client.org