Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/wHpE3uQMagcpZBQvR1xlfrDXbM4.roa
File: wHpE3uQMagcpZBQvR1xlfrDXbM4.roa (raw, json)
Hash identifier: IvalM3nUbfws7T4rhEjHTCL97+GEUsPP8ilxoHzFijs=
Subject key identifier: C0:7A:44:DE:E4:0C:6A:07:29:64:14:2F:47:5C:65:7E:B0:D7:6C:CE
Certificate issuer: /CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Certificate serial: 018571B0C718897C867FF941AA96410ABDA3
Authority key identifier: FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/wHpE3uQMagcpZBQvR1xlfrDXbM4.roa
Signing time: Mon 02 Jan 2023 08:54:48 +0000
ROA not before: Mon 02 Jan 2023 08:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49791
IP address blocks: 45.144.48.0/22 maxlen: 22
2a05:fc1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:c7:18:89:7c:86:7f:f9:41:aa:96:41:0a:bd:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd2c6c1a557f588b647e17911a6300e342c661eb
Validity
Not Before: Jan 2 08:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c07a44dee40c6a072964142f475c657eb0d76cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3e:35:8b:cd:45:d2:c2:ed:16:79:56:bb:3c:
8f:5f:a6:6b:aa:f9:30:6f:9a:cb:b6:39:1e:14:fd:
03:7d:9f:8a:c0:b8:42:5d:89:44:23:8c:62:07:cc:
72:99:52:09:f4:3b:f6:3e:b3:b5:b9:09:ab:8a:e1:
05:62:09:ec:12:b0:82:a8:f5:47:b3:22:ad:e7:e7:
86:e3:12:22:92:ed:fc:32:d0:b5:cf:bc:09:8a:6b:
2a:6c:4b:6c:e3:cf:3f:4a:2f:41:2f:ac:a2:d3:7c:
7a:fb:21:c4:4f:a0:7f:a1:82:a0:b1:bd:51:65:b1:
69:75:26:e0:7f:b3:27:37:03:17:34:ae:d5:d1:7f:
80:63:2e:60:46:8e:f7:71:b7:13:1e:0d:9e:df:86:
2f:ab:60:10:da:03:c4:5c:51:2d:69:4d:11:f1:a1:
31:ff:d5:fa:ca:f9:da:04:74:4d:90:39:36:5f:f1:
20:2b:de:14:b5:fb:a1:7e:0c:09:e1:8e:4c:54:97:
c4:d5:96:7e:55:dc:c0:ea:1a:91:39:d8:60:12:d9:
10:fd:c5:f5:bc:08:0b:61:88:63:b7:27:fe:7d:24:
20:58:5e:a0:35:23:c5:3c:d1:97:f8:87:97:55:af:
08:dc:c4:a5:f0:d5:39:9b:58:13:85:35:c1:44:7d:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7A:44:DE:E4:0C:6A:07:29:64:14:2F:47:5C:65:7E:B0:D7:6C:CE
X509v3 Authority Key Identifier:
keyid:FD:2C:6C:1A:55:7F:58:8B:64:7E:17:91:1A:63:00:E3:42:C6:61:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SxsGlV_WItkfheRGmMA40LGYes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/wHpE3uQMagcpZBQvR1xlfrDXbM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6a3f6e-2d43-4ec6-a7ec-e13deb4ac7b7/1/_SxsGlV_WItkfheRGmMA40LGYes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.48.0/22
IPv6:
2a05:fc1::/32
Signature Algorithm: sha256WithRSAEncryption
72:2e:f9:bc:c0:15:c6:0e:11:fa:2e:36:e1:f9:9c:b0:6d:23:
80:83:91:68:3b:cc:4e:dc:7c:c6:87:9c:41:50:78:36:18:7b:
57:51:23:46:f6:67:a3:5e:ee:84:dd:f9:dd:89:16:dc:e8:db:
f8:48:16:1a:34:e7:eb:12:0b:39:e9:4b:b3:04:ef:c2:4b:f7:
b2:fd:13:9c:98:e9:1d:c5:b4:36:1d:5f:1c:f9:ff:16:e1:ee:
f2:0a:49:7e:af:af:27:0e:d5:72:79:87:31:ae:6b:7a:fd:69:
b5:ec:d3:a0:5b:d1:4c:63:16:a7:c0:0b:8d:2e:a9:88:f7:62:
29:12:db:8e:e6:d5:83:39:4f:ef:4d:84:02:5d:c1:8e:a0:3b:
c2:27:a3:32:7c:6c:06:ed:79:c5:f7:84:8f:6b:1b:c9:5f:03:
19:76:89:95:f7:b1:64:ee:ad:f4:e0:37:6f:d7:ab:39:50:5c:
f7:21:78:b9:a6:2d:b6:d3:5d:ee:65:27:58:55:89:bb:fd:9a:
8f:91:3a:a9:6d:02:15:4b:35:69:93:7d:06:8b:b1:fa:c6:4f:
b3:48:f3:e9:aa:ec:29:2b:4b:5c:bb:d2:bd:ac:45:4e:8b:d1:
64:a0:1c:5a:48:3a:5c:e1:d2:da:93:3d:2b:7d:9c:c5:cc:c0:
f1:d6:b8:d3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxsMcYiXyGf/lBqpZBCr2jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMmM2YzFhNTU3ZjU4OGI2NDdlMTc5MTFhNjMwMGUzNDJj
NjYxZWIwHhcNMjMwMTAyMDg1NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDdhNDRkZWU0MGM2YTA3Mjk2NDE0MmY0NzVjNjU3ZWIwZDc2Y2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz41i81F0sLtFnlWuzyPX6Zrqvkw
b5rLtjkeFP0DfZ+KwLhCXYlEI4xiB8xymVIJ9Dv2PrO1uQmriuEFYgnsErCCqPVH
syKt5+eG4xIiku38MtC1z7wJimsqbEts488/Si9BL6yi03x6+yHET6B/oYKgsb1R
ZbFpdSbgf7MnNwMXNK7V0X+AYy5gRo73cbcTHg2e34Yvq2AQ2gPEXFEtaU0R8aEx
/9X6yvnaBHRNkDk2X/EgK94UtfuhfgwJ4Y5MVJfE1ZZ+VdzA6hqROdhgEtkQ/cX1
vAgLYYhjtyf+fSQgWF6gNSPFPNGX+IeXVa8I3MSl8NU5m1gThTXBRH0nswIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMB6RN7kDGoHKWQUL0dcZX6w12zOMB8GA1UdIwQY
MBaAFP0sbBpVf1iLZH4XkRpjAONCxmHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMt
ZTEzZGViNGFjN2I3LzEvd0hwRTN1UU1hZ2NwWkJRdlIxeGxmckRYYk00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82YTNmNmUtMmQ0My00ZWM2LWE3ZWMtZTEzZGViNGFjN2I3
LzEvX1N4c0dsVl9XSXRrZmhlUkdtTUE0MExHWWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZAwMA0E
AgACMAcDBQAqBQ/BMA0GCSqGSIb3DQEBCwUAA4IBAQByLvm8wBXGDhH6Ljbh+Zyw
bSOAg5FoO8xO3HzGh5xBUHg2GHtXUSNG9mejXu6E3fndiRbc6Nv4SBYaNOfrEgs5
6UuzBO/CS/ey/ROcmOkdxbQ2HV8c+f8W4e7yCkl+r68nDtVyeYcxrmt6/Wm17NOg
W9FMYxanwAuNLqmI92IpEtuO5tWDOU/vTYQCXcGOoDvCJ6MyfGwG7XnF94SPaxvJ
XwMZdomV97Fk7q304Ddv16s5UFz3IXi5pi22013uZSdYVYm7/ZqPkTqpbQIVSzVp
k30Gi7H6xk+zSPPpquwpK0tcu9K9rEVOi9FkoBxaSDpc4dLakz0rfZzFzMDx1rjT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org