Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/wa3ouxJTX0d0QDm6LMxWk3xHv-c.roa
File: wa3ouxJTX0d0QDm6LMxWk3xHv-c.roa (raw, json)
Hash identifier: uJ0ohsoc/5jWi2eNsqpl7u4NnfY5yZasrSih+wSzO1g=
Subject key identifier: C1:AD:E8:BB:12:53:5F:47:74:40:39:BA:2C:CC:56:93:7C:47:BF:E7
Certificate issuer: /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial: 018BB88C7EF1D3A1AEB0A317E4C754BE5BC1
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/wa3ouxJTX0d0QDm6LMxWk3xHv-c.roa
Signing time: Fri 10 Nov 2023 09:24:57 +0000
ROA not before: Fri 10 Nov 2023 09:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 62.106.94.0/24 maxlen: 24
149.3.171.0/24 maxlen: 24
45.11.98.0/24 maxlen: 24
45.11.97.0/24 maxlen: 24
45.11.96.0/24 maxlen: 24
45.11.99.0/24 maxlen: 24
134.255.199.0/24 maxlen: 24
2a0c:6d40::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b8:8c:7e:f1:d3:a1:ae:b0:a3:17:e4:c7:54:be:5b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
Validity
Not Before: Nov 10 09:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1ade8bb12535f47744039ba2ccc56937c47bfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9c:e0:e6:e6:1c:4e:c1:45:49:f6:f3:c3:e5:
5f:43:9c:4c:ee:84:4f:2b:e7:a9:17:58:f3:cd:50:
bc:33:7d:16:a9:92:c4:1b:b6:3f:76:cf:56:c8:f2:
4f:2b:ff:c6:e8:fb:18:b8:fb:10:b4:08:67:dc:2c:
69:60:10:7e:a1:0d:39:ec:30:38:1c:f8:ba:8e:f6:
91:42:1d:c9:2c:aa:8c:ba:74:1f:f5:02:fe:7e:6a:
81:a1:11:de:fb:a6:e0:f1:bc:f4:ca:88:79:58:66:
13:01:b4:c0:f6:44:51:89:0a:29:11:9e:db:cd:bf:
6a:e3:03:42:b8:d5:5c:37:c8:4d:5f:3d:ba:d6:10:
48:51:f2:a3:1c:e0:eb:de:2e:0c:74:89:77:e2:ea:
2c:18:04:da:3d:94:4f:9c:c1:70:34:e5:7f:17:ad:
9b:42:6a:78:51:34:8b:7c:3c:b1:a1:96:e8:66:b1:
c4:b0:85:0b:22:b7:0c:c4:58:8b:da:b3:35:c0:da:
26:9f:e3:c5:7b:ec:f7:15:8c:44:bb:51:ca:8f:fd:
5d:cd:cc:e4:12:57:c2:0f:03:2a:28:85:6a:b0:f4:
50:5e:c1:ee:82:e4:f8:06:fe:51:e2:06:84:3d:2f:
3a:17:8b:99:e1:8e:3d:ef:3b:97:84:23:4d:13:08:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AD:E8:BB:12:53:5F:47:74:40:39:BA:2C:CC:56:93:7C:47:BF:E7
X509v3 Authority Key Identifier:
keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/wa3ouxJTX0d0QDm6LMxWk3xHv-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.96.0/22
62.106.94.0/24
134.255.199.0/24
149.3.171.0/24
IPv6:
2a0c:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
26:44:7a:03:97:68:55:63:02:6b:cb:d6:3d:0a:94:c6:8d:a5:
f2:30:c4:8e:e9:43:93:54:68:26:52:a4:8d:5b:02:41:9a:64:
62:36:95:cb:fa:2c:1f:7c:bc:f3:ec:c5:cf:16:81:74:3a:e6:
da:f7:08:85:51:dc:c4:15:a2:96:af:c5:8e:25:0f:35:17:3c:
4b:33:a4:e9:ff:f6:52:2e:58:ed:1e:79:3f:c6:f8:af:04:87:
81:a7:4d:6e:e1:5e:a8:4c:42:de:ca:b2:05:36:93:e2:5b:c4:
8a:e3:56:74:c5:46:1f:11:1f:c0:76:e5:fb:a3:e4:dc:1f:71:
c9:34:55:20:16:fb:1d:76:de:9b:b3:6d:33:26:5b:77:21:93:
0e:d9:81:bf:c0:b3:46:d3:d1:1e:a7:af:5f:46:b1:94:38:f1:
1a:05:a3:69:13:09:4a:0c:12:1f:14:c5:96:76:c7:80:ba:e1:
f4:c0:c3:0b:24:12:a3:e1:6b:fe:99:49:69:43:52:fa:9b:06:
f7:dd:5e:00:18:32:d8:06:16:77:c2:07:2e:0d:0d:79:9c:f6:
67:e8:e3:b6:30:14:50:8e:c3:00:92:38:f5:c0:06:99:53:ba:
cf:a8:34:df:47:9f:88:e4:d4:74:8c:49:18:72:e4:7f:e8:4c:
84:45:27:4b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYu4jH7x06GusKMX5MdUvlvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNDI2NWZiMTFjMmEyMjBiYzM1MDcxODY3M2UwNzA0ZDFl
ZGFkZGUwHhcNMjMxMTEwMDkyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWFkZThiYjEyNTM1ZjQ3NzQ0MDM5YmEyY2NjNTY5MzdjNDdiZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZzg5uYcTsFFSfbzw+VfQ5xM7oRP
K+epF1jzzVC8M30WqZLEG7Y/ds9WyPJPK//G6PsYuPsQtAhn3CxpYBB+oQ057DA4
HPi6jvaRQh3JLKqMunQf9QL+fmqBoRHe+6bg8bz0yoh5WGYTAbTA9kRRiQopEZ7b
zb9q4wNCuNVcN8hNXz261hBIUfKjHODr3i4MdIl34uosGATaPZRPnMFwNOV/F62b
Qmp4UTSLfDyxoZboZrHEsIULIrcMxFiL2rM1wNomn+PFe+z3FYxEu1HKj/1dzczk
ElfCDwMqKIVqsPRQXsHuguT4Bv5R4gaEPS86F4uZ4Y497zuXhCNNEwiJqQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFMGt6LsSU19HdEA5uizMVpN8R7/nMB8GA1UdIwQY
MBaAFNBCZfsRwqIgvDUHGGc+BwTR7a3eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mYTczZjgtMzNlMC00MDMyLTg0ZWMt
YTk2ZWY2ZjY0MzVjLzEvd2Ezb3V4SlRYMGQwUURtNkxNeFdrM3hIdi1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9mYTczZjgtMzNlMC00MDMyLTg0ZWMtYTk2ZWY2ZjY0MzVj
LzEvMEVKbC14SENvaUM4TlFjWVp6NEhCTkh0cmQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLQtgAwQA
PmpeAwQAhv/HAwQAlQOrMA0EAgACMAcDBQMqDG1AMA0GCSqGSIb3DQEBCwUAA4IB
AQAmRHoDl2hVYwJry9Y9CpTGjaXyMMSO6UOTVGgmUqSNWwJBmmRiNpXL+iwffLzz
7MXPFoF0Ouba9wiFUdzEFaKWr8WOJQ81FzxLM6Tp//ZSLljtHnk/xvivBIeBp01u
4V6oTELeyrIFNpPiW8SK41Z0xUYfER/AduX7o+TcH3HJNFUgFvsddt6bs20zJlt3
IZMO2YG/wLNG09Eep69fRrGUOPEaBaNpEwlKDBIfFMWWdseAuuH0wMMLJBKj4Wv+
mUlpQ1L6mwb33V4AGDLYBhZ3wgcuDQ15nPZn6OO2MBRQjsMAkjj1wAaZU7rPqDTf
R5+I5NR0jEkYcuR/6EyERSdL
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:32 2024 by rpki-client on console-ams.rpki-client.org