Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WC-OlDWEhoczik9wqH-DfE88rw0.roa
File: WC-OlDWEhoczik9wqH-DfE88rw0.roa (raw, json)
Hash identifier: 4eV2L1vUryUHThw/6+G5hI81CC8wzrKFVtK4KaXfw8Y=
Subject key identifier: 58:2F:8E:94:35:84:86:87:33:8A:4F:70:A8:7F:83:7C:4F:3C:AF:0D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01873255977D9E78DA46F4E2F405773380C5
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WC-OlDWEhoczik9wqH-DfE88rw0.roa
Signing time: Thu 30 Mar 2023 11:44:42 +0000
ROA not before: Thu 30 Mar 2023 11:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2118
IP address blocks: 212.193.12.0/24 maxlen: 24
194.87.27.0/24 maxlen: 24
194.58.42.0/24 maxlen: 24
194.58.46.0/23 maxlen: 24
194.58.45.0/24 maxlen: 24
195.58.50.0/24 maxlen: 24
195.58.58.0/24 maxlen: 24
195.58.56.0/21 maxlen: 24
195.58.59.0/24 maxlen: 24
195.58.61.0/24 maxlen: 24
195.58.62.0/24 maxlen: 24
212.193.0.0/24 maxlen: 24
194.87.118.0/24 maxlen: 24
193.124.133.0/24 maxlen: 24
194.87.136.0/24 maxlen: 24
194.87.82.0/24 maxlen: 24
194.87.208.0/23 maxlen: 24
194.87.222.0/23 maxlen: 24
212.192.0.0/23 maxlen: 24
194.87.165.0/24 maxlen: 24
194.87.171.0/24 maxlen: 24
195.133.55.0/24 maxlen: 24
193.124.203.0/24 maxlen: 24
194.87.198.0/24 maxlen: 24
195.133.195.0/24 maxlen: 24
212.192.208.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:32:55:97:7d:9e:78:da:46:f4:e2:f4:05:77:33:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Mar 30 11:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=582f8e9435848687338a4f70a87f837c4f3caf0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:f9:ff:a1:44:99:1b:c0:20:82:4d:8e:e3:
02:92:1f:bb:ed:2e:6c:17:f0:3c:3b:6f:4f:a5:f4:
f8:b6:0d:dd:87:05:8e:ba:0e:eb:ce:b9:92:9d:4b:
af:d2:5e:2f:c0:64:6a:6f:88:82:2e:ff:71:75:68:
f5:d6:2b:67:31:ea:d9:60:36:45:d6:bc:7f:76:00:
ef:d2:58:e8:42:f4:f8:9e:10:c5:96:af:d0:e1:46:
1e:ad:ff:f7:f8:45:a5:84:29:9d:39:1e:1f:9d:66:
50:e7:e4:b9:c5:5b:b2:42:d5:a3:7f:da:65:28:95:
29:20:7b:12:f4:4d:b4:42:6e:8d:cc:e8:79:60:04:
88:fb:fa:25:34:ee:46:bd:29:60:14:a5:cb:d8:98:
a3:09:c9:72:33:60:d5:0d:db:6b:4c:af:fb:8b:90:
4c:62:5e:c2:7b:2c:2e:ed:c2:aa:c0:e1:ac:fb:45:
39:f9:60:ae:44:6a:3f:cf:07:68:b1:61:5a:74:82:
14:8a:03:8e:b9:50:44:1e:1b:20:a7:2c:08:82:c3:
b6:e5:a7:e7:52:ee:62:42:e7:17:57:0f:82:ab:18:
5a:22:11:e6:f1:96:1f:15:92:32:c9:f5:e9:13:28:
ab:81:78:d3:ff:65:66:6b:ca:d2:e0:79:20:b0:88:
99:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2F:8E:94:35:84:86:87:33:8A:4F:70:A8:7F:83:7C:4F:3C:AF:0D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WC-OlDWEhoczik9wqH-DfE88rw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.133.0/24
193.124.203.0/24
194.58.42.0/24
194.58.45.0-194.58.47.255
194.87.27.0/24
194.87.82.0/24
194.87.118.0/24
194.87.136.0/24
194.87.165.0/24
194.87.171.0/24
194.87.198.0/24
194.87.208.0/23
194.87.222.0/23
195.58.50.0/24
195.58.56.0/21
195.133.55.0/24
195.133.195.0/24
212.192.0.0/23
212.192.208.0/23
212.193.0.0/24
212.193.12.0/24
Signature Algorithm: sha256WithRSAEncryption
65:66:62:13:80:c9:b8:a5:da:64:3b:ea:f4:ff:71:13:e0:a2:
11:66:27:17:c1:d7:6e:31:f5:e2:7e:ac:ff:d4:0a:ff:e4:4c:
93:01:cb:90:d1:12:19:1e:02:48:8c:ef:dc:df:6f:21:0a:b6:
bc:1f:c1:b6:87:a1:ce:5a:13:a8:23:42:c6:00:9f:be:8e:aa:
8a:1f:e9:52:37:2b:6c:1e:c1:df:5c:e6:b7:96:ff:de:4c:56:
48:5f:5d:cb:fc:86:ce:da:e5:a6:9d:3d:ea:75:dc:8b:97:65:
8e:08:be:2c:cd:c1:c8:f6:0f:53:ac:c6:f0:9c:54:f4:8d:95:
5e:2f:d1:da:59:ae:73:f2:38:df:61:ae:96:4c:b8:38:b6:90:
09:55:25:36:9a:6b:c5:50:40:c0:a6:91:a8:4d:81:00:a6:cf:
63:e4:98:1b:51:65:60:66:83:13:9a:10:c5:03:ac:8e:3c:ad:
9d:ed:7a:91:fd:ff:bd:8c:b6:a0:90:77:7b:5d:fb:40:63:e9:
ba:49:9f:4c:e5:ce:15:86:0a:b5:f8:3c:eb:6a:9f:5f:b3:93:
47:b3:5b:a9:4a:fa:88:25:7a:9a:43:4a:33:5d:98:37:58:2a:
50:3a:08:e1:9d:e4:7f:d4:8d:02:2a:2f:0b:cb:17:8c:ea:58:
bc:6e:57:13
-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgISAYcyVZd9nnjaRvTi9AV3M4DFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwMzMwMTE0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODJmOGU5NDM1ODQ4Njg3MzM4YTRmNzBhODdmODM3YzRmM2NhZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSP5/6FEmRvAIIJNjuMCkh+77S5s
F/A8O29PpfT4tg3dhwWOug7rzrmSnUuv0l4vwGRqb4iCLv9xdWj11itnMerZYDZF
1rx/dgDv0ljoQvT4nhDFlq/Q4UYerf/3+EWlhCmdOR4fnWZQ5+S5xVuyQtWjf9pl
KJUpIHsS9E20Qm6NzOh5YASI+/olNO5GvSlgFKXL2JijCclyM2DVDdtrTK/7i5BM
Yl7Ceywu7cKqwOGs+0U5+WCuRGo/zwdosWFadIIUigOOuVBEHhsgpywIgsO25afn
Uu5iQucXVw+CqxhaIhHm8ZYfFZIyyfXpEyirgXjT/2Vma8rS4HkgsIiZFQIDAQAB
o4ICjjCCAoowHQYDVR0OBBYEFFgvjpQ1hIaHM4pPcKh/g3xPPK8NMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvV0MtT2xEV0Vob2N6aWs5d3FILURmRTg4cncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGjBggrBgEFBQcBBwEB/wSBkzCBkDCBjQQCAAEwgYYDBADB
fIUDBADBfMsDBADCOiowDAMEAMI6LQMEBMI6IAMEAMJXGwMEAMJXUgMEAMJXdgME
AMJXiAMEAMJXpQMEAMJXqwMEAMJXxgMEAcJX0AMEAcJX3gMEAMM6MgMEA8M6OAME
AMOFNwMEAMOFwwMEAdTAAAMEAdTA0AMEANTBAAMEANTBDDANBgkqhkiG9w0BAQsF
AAOCAQEAZWZiE4DJuKXaZDvq9P9xE+CiEWYnF8HXbjH14n6s/9QK/+RMkwHLkNES
GR4CSIzv3N9vIQq2vB/BtoehzloTqCNCxgCfvo6qih/pUjcrbB7B31zmt5b/3kxW
SF9dy/yGztrlpp096nXci5dljgi+LM3ByPYPU6zG8JxU9I2VXi/R2lmuc/I432Gu
lky4OLaQCVUlNpprxVBAwKaRqE2BAKbPY+SYG1FlYGaDE5oQxQOsjjytne16kf3/
vYy2oJB3e137QGPpukmfTOXOFYYKtfg862qfX7OTR7NbqUr6iCV6mkNKM12YN1gq
UDoI4Z3kf9SNAiovC8sXjOpYvG5XEw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:59 2023 by rpki-client on console-ams.rpki-client.org