Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/wFTZevGV8nbpfzw0oUUvRkAxUqw.roa
File: wFTZevGV8nbpfzw0oUUvRkAxUqw.roa (raw, json)
Hash identifier: rjaqZZlFcyHkyCvDCKmrSAvpK2tw9/zkre9VqVaaDVI=
Subject key identifier: C0:54:D9:7A:F1:95:F2:76:E9:7F:3C:34:A1:45:2F:46:40:31:52:AC
Certificate issuer: /CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Certificate serial: 01856CCAE0C13485E2B7EF1C5D956454F973
Authority key identifier: 94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/wFTZevGV8nbpfzw0oUUvRkAxUqw.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 195.211.98.0/23 maxlen: 23
195.211.96.0/23 maxlen: 23
82.117.252.0/23 maxlen: 23
45.90.56.0/22 maxlen: 22
82.117.254.0/24 maxlen: 24
195.123.232.0/22 maxlen: 22
195.123.236.0/22 maxlen: 22
195.123.240.0/22 maxlen: 22
195.123.244.0/22 maxlen: 22
62.233.57.0/24 maxlen: 24
2a05:9400::/32 maxlen: 32
2a12:6fc0::/32 maxlen: 32
2a05:9403::/32 maxlen: 32
2a05:9405::/32 maxlen: 32
2a05:9406::/32 maxlen: 32
2a05:9402::/32 maxlen: 32
2a05:9401::/32 maxlen: 32
2a12:6fc1::/32 maxlen: 32
2a05:9404::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 20 Feb 2023 19:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e0:c1:34:85:e2:b7:ef:1c:5d:95:64:54:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94d98e8fec680775a157266e0c6b78b141a34f5e
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c054d97af195f276e97f3c34a1452f46403152ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cd:93:2b:64:be:05:c6:d1:a7:5f:2b:0e:5f:
66:7b:87:d0:ae:04:3a:49:15:54:af:5f:06:6f:bc:
03:bb:19:84:c6:c8:d0:bd:6b:7a:6a:49:2b:1d:42:
20:e0:a2:a1:39:d4:c0:f3:fb:ba:b9:97:67:c0:d4:
78:2e:8a:43:e2:f0:3a:11:d7:49:55:e3:b3:8d:66:
20:ef:b9:71:c2:51:ea:49:01:e9:55:3a:7a:d7:f2:
ff:8b:75:22:a2:b7:9d:64:36:68:f6:6d:d5:c0:e2:
96:01:82:64:e5:e1:09:48:cf:d7:6e:b3:7f:5d:f4:
8a:dc:17:8b:70:7e:ee:2e:d9:6e:c0:43:81:7b:27:
4f:8a:27:40:fd:f9:47:67:96:e6:21:b7:f6:40:a3:
57:c2:7d:6a:6a:52:1a:18:22:ff:b7:2e:ae:31:88:
b5:0d:ac:9b:d1:13:af:98:fd:55:e2:1a:3d:97:09:
5c:69:ed:12:21:b6:51:4c:e3:95:51:1e:0f:b0:fc:
60:ed:88:87:4a:e1:ed:ff:c7:38:49:4f:37:c1:be:
8a:8b:96:a6:7b:97:63:55:55:62:0f:72:c9:92:16:
81:be:d1:df:27:8d:b2:b2:12:ea:59:5d:e1:cc:0d:
18:55:93:4e:94:bf:eb:d5:95:b8:ac:3b:36:c2:3b:
3e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:54:D9:7A:F1:95:F2:76:E9:7F:3C:34:A1:45:2F:46:40:31:52:AC
X509v3 Authority Key Identifier:
keyid:94:D9:8E:8F:EC:68:07:75:A1:57:26:6E:0C:6B:78:B1:41:A3:4F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lNmOj-xoB3WhVyZuDGt4sUGjT14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/wFTZevGV8nbpfzw0oUUvRkAxUqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ae3c7-67e4-44de-b139-87d17df74c7e/1/lNmOj-xoB3WhVyZuDGt4sUGjT14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.56.0/22
62.233.57.0/24
82.117.252.0-82.117.254.255
195.123.232.0-195.123.247.255
195.211.96.0/22
IPv6:
2a05:9400::-2a05:9406:ffff:ffff:ffff:ffff:ffff:ffff
2a12:6fc0::/31
Signature Algorithm: sha256WithRSAEncryption
73:54:92:b6:4f:a6:4d:c3:0d:75:02:65:cf:2c:1b:0d:a4:74:
cd:32:a2:57:92:3d:62:4f:c6:78:95:e3:12:34:24:ce:00:73:
00:b7:73:bc:6c:64:9a:2c:da:b0:d9:13:99:ea:db:72:e3:11:
35:af:c0:70:2b:59:68:3f:00:87:38:03:ec:d6:8c:99:31:50:
3e:06:24:ef:8f:17:76:19:34:b0:f3:5d:6c:5d:e9:6a:4d:0c:
cb:c8:d1:7b:8a:52:08:5f:ef:30:45:ad:d8:4e:10:15:f6:74:
3a:cc:d2:e3:ce:a2:2d:79:6a:9a:db:ec:2c:13:a6:22:b4:a4:
3f:e3:2c:8f:62:86:02:e0:76:9e:42:9f:0d:41:3a:bc:af:3e:
4c:66:ac:22:f2:70:a3:fc:e1:12:aa:52:4e:9d:6e:e9:0c:f7:
7c:25:60:66:e0:77:73:4a:5a:2c:8c:09:1f:63:c0:40:7e:d6:
f4:77:a2:5f:f4:55:71:53:aa:1d:eb:c2:fe:30:a2:85:e0:26:
90:33:5d:95:55:5d:05:bc:fd:be:ee:fc:0d:ce:e1:ee:53:29:
aa:a7:18:2f:75:53:bc:61:9c:5b:e3:7c:ce:ce:1c:c4:36:7e:
dc:63:7e:0e:fa:47:e8:69:1c:ae:fb:ae:4a:a9:28:b7:51:c0:
31:2d:6c:ae
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgISAYVsyuDBNIXit+8cXZVkVPlzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0ZDk4ZThmZWM2ODA3NzVhMTU3MjY2ZTBjNmI3OGIxNDFh
MzRmNWUwHhcNMjMwMTAxMTAwNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDU0ZDk3YWYxOTVmMjc2ZTk3ZjNjMzRhMTQ1MmY0NjQwMzE1MmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlM2TK2S+BcbRp18rDl9me4fQrgQ6
SRVUr18Gb7wDuxmExsjQvWt6akkrHUIg4KKhOdTA8/u6uZdnwNR4LopD4vA6EddJ
VeOzjWYg77lxwlHqSQHpVTp61/L/i3UioredZDZo9m3VwOKWAYJk5eEJSM/XbrN/
XfSK3BeLcH7uLtluwEOBeydPiidA/flHZ5bmIbf2QKNXwn1qalIaGCL/ty6uMYi1
Dayb0ROvmP1V4ho9lwlcae0SIbZRTOOVUR4PsPxg7YiHSuHt/8c4SU83wb6Ki5am
e5djVVViD3LJkhaBvtHfJ42yshLqWV3hzA0YVZNOlL/r1ZW4rDs2wjs+3wIDAQAB
o4ICTzCCAkswHQYDVR0OBBYEFMBU2XrxlfJ26X88NKFFL0ZAMVKsMB8GA1UdIwQY
MBaAFJTZjo/saAd1oVcmbgxreLFBo09eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzkt
ODdkMTdkZjc0YzdlLzEvd0ZUWmV2R1Y4bmJwZnp3MG9VVXZSa0F4VXF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83YWUzYzctNjdlNC00NGRlLWIxMzktODdkMTdkZjc0Yzdl
LzEvbE5tT2oteG9CM1doVnladURHdDRzVUdqVDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA0BAIAATAuAwQCLVo4AwQA
Puk5MAwDBAJSdfwDBABSdf4wDAMEA8N76AMEA8N78AMEAsPTYDAcBAIAAjAWMA0D
BAIqBZQDBQAqBZQGAwUBKhJvwDANBgkqhkiG9w0BAQsFAAOCAQEAc1SStk+mTcMN
dQJlzywbDaR0zTKiV5I9Yk/GeJXjEjQkzgBzALdzvGxkmizasNkTmerbcuMRNa/A
cCtZaD8AhzgD7NaMmTFQPgYk748Xdhk0sPNdbF3pak0My8jRe4pSCF/vMEWt2E4Q
FfZ0OszS486iLXlqmtvsLBOmIrSkP+Msj2KGAuB2nkKfDUE6vK8+TGasIvJwo/zh
EqpSTp1u6Qz3fCVgZuB3c0paLIwJH2PAQH7W9HeiX/RVcVOqHevC/jCiheAmkDNd
lVVdBbz9vu78Dc7h7lMpqqcYL3VTvGGcW+N8zs4cxDZ+3GN+DvpH6GkcrvuuSqko
t1HAMS1srg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:52 2024 by rpki-client on console-fra.rpki-client.org