Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WENoZHufo1M7ASXBD0HyWo3ix8E.roa
File: WENoZHufo1M7ASXBD0HyWo3ix8E.roa (raw, json)
Hash identifier: zQPNGcm1WhxqcZ3VH0c1Ty+i38t7rXjMJJVcQLPbzvs=
Subject key identifier: 58:43:68:64:7B:9F:A3:53:3B:01:25:C1:0F:41:F2:5A:8D:E2:C7:C1
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01874B6C32099F26AC65F38302B7AEAC05E4
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WENoZHufo1M7ASXBD0HyWo3ix8E.roa
Signing time: Tue 04 Apr 2023 08:39:54 +0000
ROA not before: Tue 04 Apr 2023 08:39:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202662
IP address blocks: 89.185.28.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 21:48:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:6c:32:09:9f:26:ac:65:f3:83:02:b7:ae:ac:05:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Apr 4 08:39:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=584368647b9fa3533b0125c10f41f25a8de2c7c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:02:7b:1a:83:e7:cd:f7:22:00:86:00:9f:40:
29:b7:2a:9f:af:88:27:64:10:5e:03:82:59:6c:e5:
9e:4c:39:c2:4f:85:09:e2:31:e9:4d:34:c3:f5:a8:
4e:0b:4e:77:56:ef:8f:15:0e:3a:ec:78:14:a0:18:
2d:44:20:3f:05:37:e0:e0:3b:bc:1b:8e:fc:eb:6c:
93:42:36:c0:ee:b5:e7:9e:a1:3d:f0:91:82:39:ab:
16:88:b8:f2:4d:41:04:01:2f:fc:a4:e4:72:6a:30:
c7:56:d1:14:ee:ed:4d:94:cf:a7:0d:4a:59:38:4f:
93:68:39:7b:d1:d0:16:46:a0:e7:f0:9e:a4:30:66:
a7:52:3b:1a:61:8d:ba:4d:5b:5a:5c:e3:b7:16:c4:
c5:8d:6e:28:0e:96:e2:ed:e7:d0:9c:43:96:5d:cf:
8a:09:4a:35:ac:47:4f:d7:ec:b9:40:71:dc:d9:71:
89:2f:9c:6b:37:1f:91:27:88:8a:70:2a:ae:70:d0:
0d:a9:2c:f9:0f:01:b4:c2:c7:9e:b2:a2:eb:ac:65:
37:78:5f:f8:4f:7f:f1:74:88:4d:a1:32:c6:b6:52:
04:ea:7b:ec:c1:df:44:3c:d4:f6:ec:39:e9:d3:89:
c4:ae:12:e3:28:4b:60:cf:88:05:31:4c:db:9d:56:
25:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:68:64:7B:9F:A3:53:3B:01:25:C1:0F:41:F2:5A:8D:E2:C7:C1
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/WENoZHufo1M7ASXBD0HyWo3ix8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:c4:8f:98:cb:85:e3:0c:d4:36:5f:69:c9:54:6b:79:d7:7d:
73:fb:e0:70:d4:0a:c9:ac:8d:80:82:72:50:9e:80:49:4d:13:
a3:81:2a:ca:f4:1b:3a:f3:14:3d:d3:b9:ad:42:f3:42:3e:71:
4c:2f:8e:99:99:85:b9:90:69:ee:47:57:25:56:a1:7d:86:16:
5f:95:aa:a8:cb:fd:0b:f5:78:11:fc:38:a3:47:e1:00:ee:2a:
30:f3:76:a1:70:80:51:48:13:62:9f:d9:11:cb:2e:f0:8a:54:
a0:a2:53:d3:fd:21:4b:21:99:ce:47:f5:a9:ed:5b:e7:a8:e8:
3e:27:d1:4e:ae:f0:6a:51:ad:32:57:a0:e5:78:8c:a5:d6:41:
ed:a8:09:56:4c:13:9b:8a:34:e1:ff:fb:d8:96:f3:98:ee:6b:
5f:0a:87:b3:c6:3c:95:e4:bc:38:98:76:41:2e:af:f2:f4:d4:
41:f1:07:a0:13:62:64:73:d5:be:26:6b:53:50:47:67:50:33:
e8:59:fa:79:55:f4:b0:92:96:a0:ac:a8:27:d7:f3:41:68:c2:
28:8e:22:18:20:74:78:9d:ec:6b:f3:de:5b:b5:8f:a4:f7:38:
ab:2c:3b:11:2f:d9:3f:c1:00:57:19:fc:1d:11:f6:f8:30:aa:
c0:8a:5f:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdLbDIJnyasZfODAreurAXkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjMwNDA0MDgzOTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQzNjg2NDdiOWZhMzUzM2IwMTI1YzEwZjQxZjI1YThkZTJjN2MxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwJ7GoPnzfciAIYAn0Aptyqfr4gn
ZBBeA4JZbOWeTDnCT4UJ4jHpTTTD9ahOC053Vu+PFQ467HgUoBgtRCA/BTfg4Du8
G47862yTQjbA7rXnnqE98JGCOasWiLjyTUEEAS/8pORyajDHVtEU7u1NlM+nDUpZ
OE+TaDl70dAWRqDn8J6kMGanUjsaYY26TVtaXOO3FsTFjW4oDpbi7efQnEOWXc+K
CUo1rEdP1+y5QHHc2XGJL5xrNx+RJ4iKcCqucNANqSz5DwG0wseesqLrrGU3eF/4
T3/xdIhNoTLGtlIE6nvswd9EPNT27Dnp04nErhLjKEtgz4gFMUzbnVYlKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhDaGR7n6NTOwElwQ9B8lqN4sfBMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEvV0VOb1pIdWZvMU03QVNYQkQwSHlXbzNpeDhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCWbkcMA0G
CSqGSIb3DQEBCwUAA4IBAQA9xI+Yy4XjDNQ2X2nJVGt5131z++Bw1ArJrI2AgnJQ
noBJTROjgSrK9Bs68xQ907mtQvNCPnFML46ZmYW5kGnuR1clVqF9hhZflaqoy/0L
9XgR/DijR+EA7iow83ahcIBRSBNin9kRyy7wilSgolPT/SFLIZnOR/Wp7VvnqOg+
J9FOrvBqUa0yV6DleIyl1kHtqAlWTBObijTh//vYlvOY7mtfCoezxjyV5Lw4mHZB
Lq/y9NRB8QegE2Jkc9W+JmtTUEdnUDPoWfp5VfSwkpagrKgn1/NBaMIojiIYIHR4
nexr895btY+k9zirLDsRL9k/wQBXGfwdEfb4MKrAil8u
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:46 2024 by rpki-client on console-ams.rpki-client.org