Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WEStNVxXCxM9l8vUSI4pRsPKAdg.roa
File: WEStNVxXCxM9l8vUSI4pRsPKAdg.roa (raw, json)
Hash identifier: NB+2HrE/3lvvRzPZaik6MiCvRlwR8/Gpr4xY8v46HD0=
Subject key identifier: 58:44:AD:35:5C:57:0B:13:3D:97:CB:D4:48:8E:29:46:C3:CA:01:D8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801301D3AA3E1F87B5B6706BFFC1BBA
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WEStNVxXCxM9l8vUSI4pRsPKAdg.roa
Signing time: Tue 02 Jan 2024 02:29:30 +0000
ROA not before: Tue 02 Jan 2024 02:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197616
IP address blocks: 85.254.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 19:39:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:30:1d:3a:a3:e1:f8:7b:5b:67:06:bf:fc:1b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5844ad355c570b133d97cbd4488e2946c3ca01d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:dc:5d:bf:22:4e:0d:54:25:47:b0:3d:64:
41:f3:85:0d:0b:de:ac:81:68:4b:03:4b:1a:32:f5:
5a:4f:72:9f:92:a1:5c:11:26:1c:5b:19:c9:76:c5:
ae:66:65:c9:9f:51:58:bb:7e:29:7a:b7:59:d3:27:
e5:b4:93:f0:b1:21:7e:95:93:7d:ca:c0:12:c4:0b:
a0:fe:d4:4e:2c:db:7a:73:b7:ab:98:49:c5:4e:8e:
0c:26:54:71:85:7e:88:29:ce:b9:dc:d4:c8:a9:4a:
cb:3b:77:4e:a2:c3:5d:92:a9:29:bb:c0:f0:8d:27:
d2:1e:89:f1:59:58:c8:20:61:92:a9:63:bf:56:77:
dc:52:97:57:c9:04:f2:fa:f7:e5:bf:e0:c8:a4:39:
a4:97:81:e5:d8:61:1a:ad:b6:29:53:33:63:8b:57:
4d:a0:d8:a4:8b:1e:00:c1:23:d2:7d:c2:67:71:23:
c8:43:13:a2:cf:c1:32:65:2a:5f:5b:d2:40:9d:a4:
fa:35:c4:04:99:ed:23:b1:98:2a:6b:d0:3a:08:dd:
38:58:8a:0d:16:38:82:59:f2:26:a1:c6:d4:f4:43:
b9:0b:12:c1:25:20:d4:0f:22:39:c7:ff:ff:3c:f2:
7a:8f:9d:28:a6:07:e6:aa:4b:55:6f:53:71:cb:85:
60:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:44:AD:35:5C:57:0B:13:3D:97:CB:D4:48:8E:29:46:C3:CA:01:D8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/WEStNVxXCxM9l8vUSI4pRsPKAdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:33:57:d6:42:94:d9:e1:0a:f2:e7:28:85:fb:87:76:94:68:
25:55:8c:f5:7d:2f:c8:0e:00:b4:f7:e9:f0:f7:47:6b:96:25:
09:cd:28:1a:ae:2f:50:e4:19:32:13:32:41:cf:cf:44:18:8c:
b8:20:d8:38:23:e0:79:7b:f6:45:58:b3:a0:a6:41:67:a2:c8:
5c:a4:fc:a1:6a:5f:b1:52:ff:c9:5d:67:3e:5a:98:8a:7f:41:
62:4e:ff:2e:5b:3f:8f:80:e6:82:93:fd:2b:b3:8a:26:05:d8:
0e:3c:ce:03:d2:65:3b:5f:ac:d2:3a:1c:91:cc:30:1c:14:50:
11:30:7b:09:26:1e:a1:7e:a8:d7:f0:c6:c3:0f:8d:c3:8f:2b:
80:24:23:0d:04:be:ff:ba:f0:c4:3d:95:c3:23:3e:08:66:08:
c8:a1:c4:b1:d5:54:2c:e7:2d:eb:62:55:59:05:e4:89:38:15:
63:fc:2f:2f:59:eb:b1:74:92:0e:48:3b:63:f8:41:7b:99:7f:
21:8e:1d:d1:84:62:53:f7:82:34:4f:c2:70:4c:6c:fa:2b:94:
09:66:1b:26:28:1e:65:41:14:51:c6:b7:7b:4b:fb:36:88:b2:
32:ec:19:57:0f:d0:11:76:99:6f:49:f1:d9:31:7d:92:52:8c:
76:4c:47:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIATAdOqPh+HtbZwa//Bu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQ0YWQzNTVjNTcwYjEzM2Q5N2NiZDQ0ODhlMjk0NmMzY2EwMWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCjcXb8iTg1UJUewPWRB84UNC96s
gWhLA0saMvVaT3KfkqFcESYcWxnJdsWuZmXJn1FYu34perdZ0yfltJPwsSF+lZN9
ysASxAug/tROLNt6c7ermEnFTo4MJlRxhX6IKc653NTIqUrLO3dOosNdkqkpu8Dw
jSfSHonxWVjIIGGSqWO/VnfcUpdXyQTy+vflv+DIpDmkl4Hl2GEarbYpUzNji1dN
oNikix4AwSPSfcJncSPIQxOiz8EyZSpfW9JAnaT6NcQEme0jsZgqa9A6CN04WIoN
FjiCWfImocbU9EO5CxLBJSDUDyI5x///PPJ6j50opgfmqktVb1Nxy4Vg6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhErTVcVwsTPZfL1EiOKUbDygHYMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvV0VTdE5WeFhDeE05bDh2VVNJNHBSc1BLQWRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVf6IMA0G
CSqGSIb3DQEBCwUAA4IBAQAMM1fWQpTZ4Qry5yiF+4d2lGglVYz1fS/IDgC09+nw
90drliUJzSgari9Q5BkyEzJBz89EGIy4INg4I+B5e/ZFWLOgpkFnoshcpPyhal+x
Uv/JXWc+WpiKf0FiTv8uWz+PgOaCk/0rs4omBdgOPM4D0mU7X6zSOhyRzDAcFFAR
MHsJJh6hfqjX8MbDD43DjyuAJCMNBL7/uvDEPZXDIz4IZgjIocSx1VQs5y3rYlVZ
BeSJOBVj/C8vWeuxdJIOSDtj+EF7mX8hjh3RhGJT94I0T8JwTGz6K5QJZhsmKB5l
QRRRxrd7S/s2iLIy7BlXD9ARdplvSfHZMX2SUox2TEdG
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:59 2025 by rpki-client