Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WVbj8Q-hl5G3DiM6p9oZt4jWsbM.roa
File: WVbj8Q-hl5G3DiM6p9oZt4jWsbM.roa (raw, json)
Hash identifier: wysusyhirKrD4s/BdiZxTmHCUGZYHVVfhsBzkAdt/H0=
Subject key identifier: 59:56:E3:F1:0F:A1:97:91:B7:0E:23:3A:A7:DA:19:B7:88:D6:B1:B3
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018DAD3D73616A21C72D88B0D5C628B29E06
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WVbj8Q-hl5G3DiM6p9oZt4jWsbM.roa
Signing time: Thu 15 Feb 2024 14:48:22 +0000
ROA not before: Thu 15 Feb 2024 14:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 194.87.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 05:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ad:3d:73:61:6a:21:c7:2d:88:b0:d5:c6:28:b2:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Feb 15 14:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5956e3f10fa19791b70e233aa7da19b788d6b1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:35:4a:13:47:f8:9a:6a:e1:09:0a:3a:cd:77:
50:14:86:ce:e0:f0:db:d7:df:48:8a:77:3a:b0:97:
c0:cd:63:ce:13:ce:6d:fd:f7:f3:af:4b:ed:bd:d2:
ba:28:4a:eb:47:92:c3:cc:e5:14:34:3e:77:88:c6:
bd:a2:87:d3:70:b9:04:dc:07:90:40:dd:78:e3:0b:
db:74:a3:31:a3:e2:be:81:8d:5d:05:be:cd:41:a8:
d2:0a:92:33:ad:7a:c2:a4:35:2d:eb:ed:34:95:99:
1a:87:57:2a:ea:f0:c5:e5:b8:b1:9b:7d:2c:c1:96:
fa:51:5d:4f:7c:24:e1:3a:9f:cd:ea:87:de:50:b5:
4e:89:96:83:9e:22:b2:01:2d:ed:7e:3f:78:5c:a2:
bb:24:20:cb:57:75:39:77:f7:f0:89:b2:04:bd:4c:
21:e7:66:dc:4d:31:f1:35:35:e1:e7:6d:7a:9d:bd:
39:90:14:fe:4d:9a:08:20:e1:a8:9d:9b:05:33:71:
00:80:9c:e2:d7:ad:8e:19:36:e7:de:b9:42:07:c2:
d2:95:1f:82:61:21:11:53:1c:10:6e:f5:33:5f:ec:
0d:6e:d4:ee:03:4b:a7:ae:1b:f7:91:93:5a:41:ff:
5e:0a:ed:a4:6b:ea:cd:9c:c5:e9:16:a3:68:69:db:
c4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:56:E3:F1:0F:A1:97:91:B7:0E:23:3A:A7:DA:19:B7:88:D6:B1:B3
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/WVbj8Q-hl5G3DiM6p9oZt4jWsbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.185.0/24
Signature Algorithm: sha256WithRSAEncryption
16:05:87:9a:b7:26:1f:18:25:b9:bb:0b:5d:3a:10:a6:d9:32:
f6:a9:10:b2:17:ab:2a:da:f5:88:52:5b:46:3e:6f:0b:92:f6:
28:e1:38:45:fb:52:ec:93:e3:ea:ac:d1:3f:f9:71:63:49:10:
5f:9c:03:b2:05:21:ac:39:2b:3f:d0:90:15:be:b6:fa:ea:50:
98:b3:89:b8:13:c8:b2:0e:12:78:b1:f9:53:58:4d:45:e6:de:
b2:7d:02:49:d8:9c:2c:cb:01:67:fe:60:e1:d7:b1:f1:35:93:
d1:47:18:2c:01:60:14:c3:79:5b:65:61:ef:68:3e:a8:04:72:
af:20:57:2a:02:37:99:5e:ba:d1:25:ed:68:70:0e:7e:ae:4a:
d7:b9:65:60:8a:31:10:bd:d0:67:fd:67:4c:74:67:ec:ea:db:
11:b8:e6:a7:10:e2:e8:91:1b:37:4f:9d:41:13:e9:c3:ad:e8:
dd:6f:47:6f:ae:02:8a:1b:68:2e:b0:d3:a2:2a:3c:ba:51:2d:
a4:06:ca:60:55:ee:70:6c:67:24:55:0b:fe:9f:70:b9:2b:a8:
4a:2f:95:9b:0b:c0:26:7d:51:e4:e2:95:b2:2e:3b:c2:90:a0:
43:9d:1e:fb:7a:4f:0a:c2:71:fc:bf:8a:6d:76:aa:33:33:dc:
ef:60:75:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2tPXNhaiHHLYiw1cYosp4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMjE1MTQ0ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTU2ZTNmMTBmYTE5NzkxYjcwZTIzM2FhN2RhMTliNzg4ZDZiMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzVKE0f4mmrhCQo6zXdQFIbO4PDb
199Iinc6sJfAzWPOE85t/ffzr0vtvdK6KErrR5LDzOUUND53iMa9oofTcLkE3AeQ
QN144wvbdKMxo+K+gY1dBb7NQajSCpIzrXrCpDUt6+00lZkah1cq6vDF5bixm30s
wZb6UV1PfCThOp/N6ofeULVOiZaDniKyAS3tfj94XKK7JCDLV3U5d/fwibIEvUwh
52bcTTHxNTXh5216nb05kBT+TZoIIOGonZsFM3EAgJzi162OGTbn3rlCB8LSlR+C
YSERUxwQbvUzX+wNbtTuA0unrhv3kZNaQf9eCu2ka+rNnMXpFqNoadvEJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlW4/EPoZeRtw4jOqfaGbeI1rGzMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvV1ZiajhRLWhsNUczRGlNNnA5b1p0NGpXc2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwle5MA0G
CSqGSIb3DQEBCwUAA4IBAQAWBYeatyYfGCW5uwtdOhCm2TL2qRCyF6sq2vWIUltG
Pm8LkvYo4ThF+1Lsk+PqrNE/+XFjSRBfnAOyBSGsOSs/0JAVvrb66lCYs4m4E8iy
DhJ4sflTWE1F5t6yfQJJ2JwsywFn/mDh17HxNZPRRxgsAWAUw3lbZWHvaD6oBHKv
IFcqAjeZXrrRJe1ocA5+rkrXuWVgijEQvdBn/WdMdGfs6tsRuOanEOLokRs3T51B
E+nDrejdb0dvrgKKG2gusNOiKjy6US2kBspgVe5wbGckVQv+n3C5K6hKL5WbC8Am
fVHk4pWyLjvCkKBDnR77ek8KwnH8v4ptdqozM9zvYHV2
-----END CERTIFICATE-----
Generated at Tue Feb 20 06:47:48 2024 by rpki-client on console-fra.rpki-client.org