Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Wys0DQzno1ZSfLe9jFJ60TSQzI8.roa
File: Wys0DQzno1ZSfLe9jFJ60TSQzI8.roa (raw, json)
Hash identifier: cBklBEjflsaU6R0MrQosTtkjuOFpA6cysEDLLXvwuMA=
Subject key identifier: 5B:2B:34:0D:0C:E7:A3:56:52:7C:B7:BD:8C:52:7A:D1:34:90:CC:8F
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 0185719E8E7E03B330F8AFCCD6D5260C48DD
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Wys0DQzno1ZSfLe9jFJ60TSQzI8.roa
Signing time: Mon 02 Jan 2023 08:34:54 +0000
ROA not before: Mon 02 Jan 2023 08:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202984
IP address blocks: 62.76.142.0/24 maxlen: 24
195.19.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:8e:7e:03:b3:30:f8:af:cc:d6:d5:26:0c:48:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Jan 2 08:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b2b340d0ce7a356527cb7bd8c527ad13490cc8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cc:8a:3a:26:07:1a:9e:5b:c6:dc:11:40:f7:
44:97:c9:ec:e4:c5:ff:a7:ce:d9:e6:17:c2:f3:64:
96:4a:d5:32:83:f5:2e:71:98:16:d8:50:ea:10:a0:
bb:66:0c:bd:b4:93:ab:ff:5b:b0:2d:e6:25:5e:67:
18:e7:c5:bb:a9:2c:fd:ba:72:d5:bd:0a:33:97:2b:
ae:1a:20:65:46:be:36:75:0d:66:b2:e0:69:9c:e4:
31:b8:ac:e1:64:1e:0d:fa:6b:a2:97:a9:1b:1c:85:
ab:9a:4a:07:31:8f:34:67:a8:6d:f3:b4:64:6a:66:
e9:da:07:4d:ab:d9:44:0c:52:18:2a:15:fa:14:52:
b5:dd:11:c3:78:f3:b5:1b:98:91:3a:a7:21:06:81:
88:b2:f2:5b:4b:99:c9:1e:9a:f6:e0:4b:f3:fe:d5:
39:ee:a0:0b:c3:e3:b6:ba:9a:47:63:9a:bf:dc:21:
3b:c4:0d:f4:01:f4:f1:09:ba:9c:2a:3c:bb:bb:7e:
e7:d9:0a:cc:25:73:ec:b0:11:3b:66:bb:aa:a7:9d:
45:32:98:8d:5a:bd:85:bd:d4:2a:e2:58:1b:e5:29:
a9:76:3f:f4:9b:ae:76:af:ba:7f:c6:b2:25:9e:57:
81:34:6c:ec:41:b8:97:7d:b9:67:ce:f7:48:07:2a:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2B:34:0D:0C:E7:A3:56:52:7C:B7:BD:8C:52:7A:D1:34:90:CC:8F
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/Wys0DQzno1ZSfLe9jFJ60TSQzI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.76.142.0/24
195.19.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:9a:7b:12:9d:f9:bb:d5:31:9f:75:ca:9a:06:2c:35:c2:e0:
bd:40:f0:89:a6:5f:0c:ed:96:11:7b:24:07:06:5f:db:68:10:
48:55:09:38:09:d5:99:eb:86:a1:9b:25:d9:07:83:9d:4c:69:
21:85:30:f7:b7:9f:2e:00:6c:0a:fc:63:ae:48:ca:11:a0:84:
a5:3e:88:f7:19:05:e8:45:66:90:e5:6d:9c:a6:12:76:b1:01:
c3:3e:42:0e:33:df:b8:f9:86:44:9a:df:65:20:67:31:38:d7:
f5:fc:2b:56:cb:2c:45:66:a8:c3:bd:a0:2d:84:17:b3:a5:c2:
12:28:02:21:f8:94:bd:bc:42:21:12:b4:62:82:87:bd:d7:d0:
21:6b:02:3d:02:c1:77:26:33:bd:ac:87:7b:ff:5b:b9:7e:74:
4b:09:46:00:30:dc:72:7a:13:07:50:32:7e:2f:9a:a6:d6:35:
fd:24:0b:d5:c1:1b:42:f9:e3:09:43:70:16:87:e9:28:29:28:
e2:e8:d2:f3:58:9c:6a:37:cd:38:06:67:89:14:70:b0:12:20:
11:fc:65:a4:e7:e4:29:6b:72:4e:5b:1b:88:ff:cd:27:b2:1c:
4a:70:ff:4a:88:e5:10:3d:6e:93:e3:85:9c:b4:06:a6:2e:df:
5c:bf:63:00
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxno5+A7Mw+K/M1tUmDEjdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMwMTAyMDgzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjJiMzQwZDBjZTdhMzU2NTI3Y2I3YmQ4YzUyN2FkMTM0OTBjYzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsyKOiYHGp5bxtwRQPdEl8ns5MX/
p87Z5hfC82SWStUyg/UucZgW2FDqEKC7Zgy9tJOr/1uwLeYlXmcY58W7qSz9unLV
vQozlyuuGiBlRr42dQ1msuBpnOQxuKzhZB4N+muil6kbHIWrmkoHMY80Z6ht87Rk
ambp2gdNq9lEDFIYKhX6FFK13RHDePO1G5iROqchBoGIsvJbS5nJHpr24Evz/tU5
7qALw+O2uppHY5q/3CE7xA30AfTxCbqcKjy7u37n2QrMJXPssBE7Zruqp51FMpiN
Wr2FvdQq4lgb5Smpdj/0m652r7p/xrIlnleBNGzsQbiXfblnzvdIByqBTQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFsrNA0M56NWUny3vYxSetE0kMyPMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvV3lzMERRem5vMVpTZkxlOWpGSjYwVFNRekk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkyOAwQA
wxNcMA0GCSqGSIb3DQEBCwUAA4IBAQCtmnsSnfm71TGfdcqaBiw1wuC9QPCJpl8M
7ZYReyQHBl/baBBIVQk4CdWZ64ahmyXZB4OdTGkhhTD3t58uAGwK/GOuSMoRoISl
Poj3GQXoRWaQ5W2cphJ2sQHDPkIOM9+4+YZEmt9lIGcxONf1/CtWyyxFZqjDvaAt
hBezpcISKAIh+JS9vEIhErRigoe919AhawI9AsF3JjO9rId7/1u5fnRLCUYAMNxy
ehMHUDJ+L5qm1jX9JAvVwRtC+eMJQ3AWh+koKSji6NLzWJxqN804BmeJFHCwEiAR
/GWk5+Qpa3JOWxuI/80nshxKcP9KiOUQPW6T44WctAamLt9cv2MA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:56 2024 by rpki-client on console-fra.rpki-client.org