Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WnyAIO7MUALEQSmLJXkWwdFuS3o.roa
File: WnyAIO7MUALEQSmLJXkWwdFuS3o.roa (raw, json)
Hash identifier: iW+ZTkn4jN7WVCXRBzDKTLYDG/+LOf4F2YF870hOsMY=
Subject key identifier: 5A:7C:80:20:EE:CC:50:02:C4:41:29:8B:25:79:16:C1:D1:6E:4B:7A
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0187809ACDACF659876D97B73469FE6BABDF
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WnyAIO7MUALEQSmLJXkWwdFuS3o.roa
Signing time: Fri 14 Apr 2023 16:30:41 +0000
ROA not before: Fri 14 Apr 2023 16:30:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 87.254.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 09:53:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:9a:cd:ac:f6:59:87:6d:97:b7:34:69:fe:6b:ab:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Apr 14 16:30:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a7c8020eecc5002c441298b257916c1d16e4b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0d:ca:97:c0:1a:ba:c1:ca:5b:ae:bb:e3:78:
7a:1c:97:fe:fb:40:81:04:55:35:f6:c1:bb:0a:fc:
35:0d:69:91:9d:67:4d:35:df:eb:65:5e:1a:40:0e:
16:53:2f:aa:d1:9f:33:16:f6:73:59:70:ec:11:40:
5c:e1:0c:ee:76:5a:92:2c:8b:8d:76:85:41:68:3a:
fd:48:37:4c:f9:2b:8d:27:02:58:b8:ce:89:55:a7:
bb:d4:d4:f7:f8:9c:e5:7a:ef:95:ad:f3:7f:ec:8f:
52:2c:63:4a:79:de:fa:7e:67:bc:43:02:0a:10:27:
5a:bc:89:0f:bd:25:e9:55:a1:74:08:36:66:f7:07:
0a:a2:4a:a5:8c:8c:e6:5e:e0:ee:34:2a:63:a7:89:
b8:cc:55:39:36:68:22:c9:5d:f9:fe:b0:23:02:f7:
b2:92:67:e5:cb:2a:ca:ed:71:39:62:a6:e6:13:ba:
b5:b5:99:cd:3f:a8:11:d4:a8:33:01:7e:ea:cc:ea:
74:b9:cf:fe:2d:8a:b9:f3:9c:64:b0:1c:12:cc:4f:
37:b2:89:01:41:53:8b:6e:2d:00:9c:08:e1:d1:17:
30:65:e3:e5:dd:74:43:78:2c:8e:68:86:76:99:35:
7e:60:e7:79:2c:e3:b7:52:13:d3:c2:fd:21:fb:61:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:7C:80:20:EE:CC:50:02:C4:41:29:8B:25:79:16:C1:D1:6E:4B:7A
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/WnyAIO7MUALEQSmLJXkWwdFuS3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.19.0/24
Signature Algorithm: sha256WithRSAEncryption
12:f0:71:63:5d:98:07:e8:56:cb:9c:1f:04:71:ff:bb:15:b0:
18:93:45:29:fc:c8:2f:91:e7:97:c4:f8:6b:1a:4b:b7:13:69:
46:54:81:29:33:84:cb:d5:a8:63:ab:6d:6c:61:a1:59:f3:2d:
54:53:d8:d7:6b:24:64:d6:b9:42:03:79:f0:c3:40:b9:65:df:
c2:b0:2e:e8:4a:2d:3b:c5:a0:2b:5d:a4:97:82:be:06:70:09:
fd:3a:d0:99:36:d0:a5:da:cc:a4:e4:5e:76:9e:d9:44:d9:1a:
49:29:2a:16:52:30:2e:ba:0b:5c:d1:31:0a:91:7f:9b:d4:ad:
07:ac:b1:5d:5e:85:ee:b9:a1:1d:fa:0f:e9:9c:86:ed:43:2d:
e9:5a:5a:32:ba:d8:72:74:5c:cc:26:18:f4:f3:f2:ce:bc:5c:
45:e5:6c:d6:48:19:c9:23:9a:2d:26:c8:25:56:50:32:bc:0f:
cc:39:ab:82:5b:ee:4a:31:49:5a:23:be:c2:2b:52:95:bc:c2:
64:c3:e0:fd:57:c2:ca:99:d3:d9:ba:08:22:e3:49:b3:77:c4:
47:5e:7f:d0:7b:3a:5b:e2:be:a9:13:f0:71:d2:6f:59:3c:f4:
c2:c6:74:cf:19:44:d9:55:e8:4f:d3:6c:a5:49:09:63:c8:a6:
39:ae:77:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:22 2024 by rpki-client on console-ams.rpki-client.org