Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/1WMV_t3puDfQEDlwVRr5R4V-9R8.roa
File: 1WMV_t3puDfQEDlwVRr5R4V-9R8.roa (raw, json)
Hash identifier: t0jGLSfRHs80PkPCzZa/mqvN8s/xztwc1N2lDkk2xRs=
Subject key identifier: D5:63:15:FE:DD:E9:B8:37:D0:10:39:70:55:1A:F9:47:85:7E:F5:1F
Certificate issuer: /CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Certificate serial: 0185703030C02AF08378CAA8D83269CE6E86
Authority key identifier: 6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/1WMV_t3puDfQEDlwVRr5R4V-9R8.roa
Signing time: Mon 02 Jan 2023 01:54:44 +0000
ROA not before: Mon 02 Jan 2023 01:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197226
IP address blocks: 176.105.253.0/24 maxlen: 24
2a0d:c740:3c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 25 Jan 2023 15:47:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:30:c0:2a:f0:83:78:ca:a8:d8:32:69:ce:6e:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba26b56cee97f6020941bb17c6a7c6cea0f814a
Validity
Not Before: Jan 2 01:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d56315fedde9b837d0103970551af947857ef51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:38:4c:9f:ad:cd:12:8b:e8:1d:3f:b8:bc:
62:f5:9c:b7:40:ee:b6:57:e1:f4:ad:a1:5c:48:67:
44:ea:8c:ca:cf:30:1a:dc:c4:c8:32:a3:af:e5:32:
b4:21:05:c8:99:3b:62:07:e5:d5:4a:ba:76:1d:9a:
73:31:c4:d0:6f:63:9c:97:6a:73:bf:9e:c3:48:38:
b6:4d:8e:64:bb:90:7d:8c:ec:6d:97:3f:9d:4b:2c:
6b:f1:28:34:70:9f:b1:89:32:a6:77:3b:3f:d1:44:
83:ab:91:50:7f:c7:25:18:cc:01:24:6d:b8:03:de:
08:f5:47:29:c7:5f:1d:ef:41:6b:10:fb:e9:ba:a5:
eb:3a:33:e5:9a:7f:4c:d2:a3:7b:00:e3:61:08:d2:
59:2a:cb:21:e1:79:7a:42:79:d5:2e:2d:84:c4:fd:
aa:ad:36:0c:17:ca:eb:f3:1f:ed:26:d3:00:da:4d:
e4:ae:25:12:0f:c2:aa:65:3e:ac:41:62:7d:5b:b9:
4a:ed:ad:37:55:db:52:26:be:2d:87:e8:e9:ca:65:
64:cc:44:f8:3a:02:d2:52:45:b3:2f:40:50:71:e6:
9a:b5:77:67:95:de:3a:1c:63:18:a6:e9:ee:c8:78:
31:6c:24:8b:6a:17:3e:00:56:b6:ca:cf:de:d0:4a:
d3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:15:FE:DD:E9:B8:37:D0:10:39:70:55:1A:F9:47:85:7E:F5:1F
X509v3 Authority Key Identifier:
keyid:6B:A2:6B:56:CE:E9:7F:60:20:94:1B:B1:7C:6A:7C:6C:EA:0F:81:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6JrVs7pf2AglBuxfGp8bOoPgUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/1WMV_t3puDfQEDlwVRr5R4V-9R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b903e9-6d09-4e20-b926-3692f96e33a9/1/a6JrVs7pf2AglBuxfGp8bOoPgUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.105.253.0/24
IPv6:
2a0d:c740:3c::/48
Signature Algorithm: sha256WithRSAEncryption
47:38:cd:2b:c9:1c:2b:92:44:bf:90:8f:62:c1:ed:6e:5c:5e:
73:ef:e4:8d:c4:8f:2b:03:e2:7b:65:aa:c7:39:54:c7:14:d7:
66:5c:7d:d9:fe:d1:7e:d5:97:15:5f:04:d7:fd:ee:79:ff:e5:
19:e9:ff:28:fd:85:96:be:f0:e3:ea:1e:1a:e9:44:9b:d6:e1:
5e:d9:f5:21:3a:ba:03:4f:43:f8:92:96:21:5b:a3:24:51:08:
5a:41:88:63:62:a4:90:78:8d:01:4a:0c:ca:4d:61:bb:ef:3f:
d8:21:8c:0f:a3:e0:80:bd:69:80:15:0b:d3:9e:45:0b:74:7b:
c6:35:09:4c:51:02:f0:16:b8:4c:3a:6a:4f:65:77:ab:6f:c8:
1c:c0:6b:6e:57:49:ba:56:b9:71:8b:10:02:6f:03:ca:98:0a:
65:37:08:c4:6c:af:bb:c4:59:ca:60:06:48:60:12:a6:72:c0:
05:09:d9:2f:fc:33:4f:d6:90:62:ab:6d:67:2d:53:21:41:5c:
6a:08:ba:3a:7f:80:b6:d4:26:19:44:3d:74:1a:c4:70:50:79:
4e:aa:18:4e:1f:1b:e5:28:37:fc:b2:c2:75:2d:6d:51:8d:2a:
eb:16:89:82:ad:72:8c:fe:b0:e0:54:a4:77:c7:6f:bb:94:fb:
2e:98:22:6f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVwMDDAKvCDeMqo2DJpzm6GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYTI2YjU2Y2VlOTdmNjAyMDk0MWJiMTdjNmE3YzZjZWEw
ZjgxNGEwHhcNMjMwMTAyMDE1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTYzMTVmZWRkZTliODM3ZDAxMDM5NzA1NTFhZjk0Nzg1N2VmNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0g4TJ+tzRKL6B0/uLxi9Zy3QO62
V+H0raFcSGdE6ozKzzAa3MTIMqOv5TK0IQXImTtiB+XVSrp2HZpzMcTQb2Ocl2pz
v57DSDi2TY5ku5B9jOxtlz+dSyxr8Sg0cJ+xiTKmdzs/0USDq5FQf8clGMwBJG24
A94I9Ucpx18d70FrEPvpuqXrOjPlmn9M0qN7AONhCNJZKssh4Xl6QnnVLi2ExP2q
rTYMF8rr8x/tJtMA2k3kriUSD8KqZT6sQWJ9W7lK7a03VdtSJr4th+jpymVkzET4
OgLSUkWzL0BQceaatXdnld46HGMYpunuyHgxbCSLahc+AFa2ys/e0ErTFQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFNVjFf7d6bg30BA5cFUa+UeFfvUfMB8GA1UdIwQY
MBaAFGuia1bO6X9gIJQbsXxqfGzqD4FKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYt
MzY5MmY5NmUzM2E5LzEvMVdNVl90M3B1RGZRRURsd1ZScjVSNFYtOVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9iOTAzZTktNmQwOS00ZTIwLWI5MjYtMzY5MmY5NmUzM2E5
LzEvYTZKclZzN3BmMkFnbEJ1eGZHcDhiT29QZ1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAsGn9MA8E
AgACMAkDBwAqDcdAADwwDQYJKoZIhvcNAQELBQADggEBAEc4zSvJHCuSRL+Qj2LB
7W5cXnPv5I3EjysD4ntlqsc5VMcU12Zcfdn+0X7VlxVfBNf97nn/5Rnp/yj9hZa+
8OPqHhrpRJvW4V7Z9SE6ugNPQ/iSliFboyRRCFpBiGNipJB4jQFKDMpNYbvvP9gh
jA+j4IC9aYAVC9OeRQt0e8Y1CUxRAvAWuEw6ak9ld6tvyBzAa25XSbpWuXGLEAJv
A8qYCmU3CMRsr7vEWcpgBkhgEqZywAUJ2S/8M0/WkGKrbWctUyFBXGoIujp/gLbU
JhlEPXQaxHBQeU6qGE4fG+UoN/yywnUtbVGNKusWiYKtcoz+sOBUpHfHb7uU+y6Y
Im8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:07 2024 by rpki-client on console-fra.rpki-client.org