Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/wYpFJATvW0_-PQTNk2PQZ8R1xzk.roa
File: wYpFJATvW0_-PQTNk2PQZ8R1xzk.roa (raw, json)
Hash identifier: Tl5afgqPU8Zffh3tdzVjfkEQadW0vJZ+2qNj8vR1l+I=
Subject key identifier: C1:8A:45:24:04:EF:5B:4F:FE:3D:04:CD:93:63:D0:67:C4:75:C7:39
Certificate issuer: /CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Certificate serial: 018E51A3ADC104D8CCB848FCD2B27EFD4E74
Authority key identifier: A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/wYpFJATvW0_-PQTNk2PQZ8R1xzk.roa
Signing time: Mon 18 Mar 2024 12:57:45 +0000
ROA not before: Mon 18 Mar 2024 12:57:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3262
IP address blocks: 185.177.40.0/24 maxlen: 24
185.177.41.0/24 maxlen: 24
185.177.43.0/24 maxlen: 24
185.220.164.0/24 maxlen: 24
185.220.165.0/24 maxlen: 24
185.220.166.0/24 maxlen: 24
185.220.167.0/24 maxlen: 24
185.226.229.0/24 maxlen: 24
185.232.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Mar 2024 12:23:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:51:a3:ad:c1:04:d8:cc:b8:48:fc:d2:b2:7e:fd:4e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a849204ca4f0eb4e56e08e099fe3785ce06ffeaa
Validity
Not Before: Mar 18 12:57:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c18a452404ef5b4ffe3d04cd9363d067c475c739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:c5:a4:83:5f:20:10:a9:d5:fa:07:22:7b:
ae:15:73:b4:2c:7d:4d:ca:1a:fc:e0:9b:db:30:d8:
9e:e7:e0:80:5e:b8:1e:62:d1:73:4e:fa:80:d8:37:
17:e2:3c:ff:21:6c:c7:20:0d:72:9d:37:bd:47:10:
9d:02:89:8e:9c:43:aa:88:a2:83:c3:a1:df:ff:bb:
30:5f:f7:5d:0d:1b:42:a5:8d:0d:5d:32:86:b1:1c:
41:3a:80:dc:4f:56:42:ea:c4:de:d3:42:10:83:ca:
93:92:9e:41:f2:11:e4:e1:9d:c1:1d:df:5d:6c:a2:
b3:67:b5:d7:2e:3a:68:20:30:c7:6d:81:82:b6:5a:
c7:de:eb:26:74:fd:ce:63:ed:e0:cd:62:b3:b5:e9:
a7:a1:3b:e6:ec:49:6d:e7:7a:ee:ab:28:d3:ec:07:
93:2f:c6:c5:1a:16:33:17:20:c1:ab:7b:ba:94:3f:
44:fe:4f:6c:17:d1:1c:7a:0f:9c:e2:4a:48:16:10:
25:1b:81:02:43:f6:a0:56:aa:e8:40:67:d1:2f:6d:
ac:0e:af:ff:94:fd:5f:20:ab:fd:13:b4:86:7c:9d:
d4:7f:23:4d:4c:ae:24:5a:30:c2:e0:40:3d:a8:4f:
2d:e8:4c:35:69:90:21:95:3e:fe:e3:c8:91:4a:19:
09:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:8A:45:24:04:EF:5B:4F:FE:3D:04:CD:93:63:D0:67:C4:75:C7:39
X509v3 Authority Key Identifier:
keyid:A8:49:20:4C:A4:F0:EB:4E:56:E0:8E:09:9F:E3:78:5C:E0:6F:FE:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEkgTKTw605W4I4Jn-N4XOBv_qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/wYpFJATvW0_-PQTNk2PQZ8R1xzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/45b23f-302b-41f2-9496-9ccbb08428fa/1/qEkgTKTw605W4I4Jn-N4XOBv_qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.40.0/23
185.177.43.0/24
185.220.164.0/22
185.226.229.0/24
185.232.132.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1b:13:39:d7:d6:87:c8:40:6f:34:78:45:60:aa:a0:49:2d:
e1:00:34:4f:9e:df:ac:4f:6c:b2:46:e2:2d:ff:5e:bf:42:2d:
bb:3d:cb:89:9c:ac:3a:fd:cc:69:3c:44:8e:bd:ec:71:7e:d6:
6a:d1:5c:ae:03:9f:f1:e7:ec:eb:f0:ce:63:33:37:dc:84:4d:
94:a8:c1:61:bc:2f:49:a4:31:e6:76:f7:b3:3b:57:5a:fe:94:
69:b5:c5:6b:27:e0:3c:92:df:c2:39:98:5f:a3:4d:c1:03:3a:
fa:3a:dd:25:73:86:76:39:03:4e:1d:5d:d0:1c:3c:eb:28:3d:
b3:0d:cc:8c:16:d0:51:d2:8a:ba:01:5d:3c:1b:1e:31:4a:e3:
f2:47:d6:cd:c3:99:c0:a0:b1:04:01:e4:1f:c8:e6:1b:86:6c:
1e:98:e8:9e:af:2b:8e:cf:3f:51:16:79:aa:27:f5:be:1e:70:
a1:64:e6:27:94:99:cb:b6:25:cc:d6:2b:09:1a:a0:87:e7:fc:
93:29:02:db:2d:24:8e:63:97:22:33:1c:1c:e8:a0:62:2e:b2:
ed:79:61:5a:5f:aa:1f:ec:6e:bf:a9:19:78:1c:08:19:76:8f:
f1:94:dd:99:f3:8f:b6:66:b5:2a:35:51:be:69:b7:c5:e2:e9:
fe:5b:81:fc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY5Ro63BBNjMuEj80rJ+/U50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NDkyMDRjYTRmMGViNGU1NmUwOGUwOTlmZTM3ODVjZTA2
ZmZlYWEwHhcNMjQwMzE4MTI1NzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMThhNDUyNDA0ZWY1YjRmZmUzZDA0Y2Q5MzYzZDA2N2M0NzVjNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdjFpINfIBCp1foHInuuFXO0LH1N
yhr84JvbMNie5+CAXrgeYtFzTvqA2DcX4jz/IWzHIA1ynTe9RxCdAomOnEOqiKKD
w6Hf/7swX/ddDRtCpY0NXTKGsRxBOoDcT1ZC6sTe00IQg8qTkp5B8hHk4Z3BHd9d
bKKzZ7XXLjpoIDDHbYGCtlrH3usmdP3OY+3gzWKztemnoTvm7Elt53ruqyjT7AeT
L8bFGhYzFyDBq3u6lD9E/k9sF9Eceg+c4kpIFhAlG4ECQ/agVqroQGfRL22sDq//
lP1fIKv9E7SGfJ3UfyNNTK4kWjDC4EA9qE8t6Ew1aZAhlT7+48iRShkJEQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMGKRSQE71tP/j0EzZNj0GfEdcc5MB8GA1UdIwQY
MBaAFKhJIEyk8OtOVuCOCZ/jeFzgb/6qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYt
OWNjYmIwODQyOGZhLzEvd1lwRkpBVHZXMF8tUFFUTmsyUFFaOFIxeHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi80NWIyM2YtMzAyYi00MWYyLTk0OTYtOWNjYmIwODQyOGZh
LzEvcUVrZ1RLVHc2MDVXNEk0Sm4tTjRYT0J2X3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBubEoAwQA
ubErAwQCudykAwQAueLlAwQAueiEMA0GCSqGSIb3DQEBCwUAA4IBAQBxGxM519aH
yEBvNHhFYKqgSS3hADRPnt+sT2yyRuIt/16/Qi27PcuJnKw6/cxpPESOvexxftZq
0VyuA5/x5+zr8M5jMzfchE2UqMFhvC9JpDHmdvezO1da/pRptcVrJ+A8kt/COZhf
o03BAzr6Ot0lc4Z2OQNOHV3QHDzrKD2zDcyMFtBR0oq6AV08Gx4xSuPyR9bNw5nA
oLEEAeQfyOYbhmwemOieryuOzz9RFnmqJ/W+HnChZOYnlJnLtiXM1isJGqCH5/yT
KQLbLSSOY5ciMxwc6KBiLrLteWFaX6of7G6/qRl4HAgZdo/xlN2Z84+2ZrUqNVG+
abfF4un+W4H8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:06 2024 by rpki-client on console-ams.rpki-client.org