Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WYlMXw1SCwv6WcYIoVXgbboszBc.roa
File: WYlMXw1SCwv6WcYIoVXgbboszBc.roa (raw, json)
Hash identifier: 6+/vSgPwMXcBMpkpZiGwcCzfrSgD1K1QQ8YcGNe+APY=
Subject key identifier: 59:89:4C:5F:0D:52:0B:0B:FA:59:C6:08:A1:55:E0:6D:BA:2C:CC:17
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C19EF990A0731B75917C350F133FA5A11
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WYlMXw1SCwv6WcYIoVXgbboszBc.roa
Signing time: Wed 29 Nov 2023 07:16:21 +0000
ROA not before: Wed 29 Nov 2023 07:16:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216181
IP address blocks: 45.84.90.0/24 maxlen: 24
87.121.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:ef:99:0a:07:31:b7:59:17:c3:50:f1:33:fa:5a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 07:16:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59894c5f0d520b0bfa59c608a155e06dba2ccc17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:99:7c:5e:10:af:9d:d2:91:51:09:1c:3d:
dc:78:53:0d:31:12:9d:d7:32:7d:df:5f:a4:43:c9:
e4:6c:39:c8:15:d5:b3:28:45:b4:b3:7b:d0:50:6b:
61:c4:08:c7:25:53:31:bf:7f:f8:f6:ac:50:58:10:
db:74:86:7f:83:b7:ed:ec:96:05:15:7b:de:b8:e5:
41:e8:6e:a7:07:f7:d7:47:f6:97:01:1f:c1:73:fb:
84:be:26:3e:2b:57:d3:50:54:d9:48:71:da:92:b6:
a3:e3:19:95:b2:98:14:cb:ab:07:d2:27:7a:7b:8b:
52:36:da:b1:cf:11:ff:08:0c:23:dd:2f:fd:b6:3b:
1c:52:24:82:37:b2:1a:ce:5c:4a:f7:25:03:0f:13:
49:bd:df:a8:4d:f7:fe:c4:b4:a0:3e:4f:6b:a2:ca:
a4:9a:d0:51:44:cf:e7:0b:51:9c:42:2c:92:f2:dc:
54:0a:f7:1a:9d:12:94:92:cc:30:05:65:1c:38:c9:
9a:d5:b2:4f:2b:68:41:86:1e:d4:33:d1:68:4d:02:
af:60:0c:f4:69:b8:9b:aa:fe:cd:3d:9d:d5:b8:41:
d3:2f:d2:8f:ef:0e:00:8f:85:dd:dc:c6:d8:91:4f:
1c:6c:54:c6:2b:68:9a:2b:38:b5:c7:93:22:7c:82:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:4C:5F:0D:52:0B:0B:FA:59:C6:08:A1:55:E0:6D:BA:2C:CC:17
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WYlMXw1SCwv6WcYIoVXgbboszBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.90.0/24
87.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
48:7c:82:3a:5e:bc:ad:64:00:c2:c0:ec:37:1f:30:9c:ee:7d:
75:ba:92:36:54:c9:d1:3e:f8:e7:27:d9:85:58:a0:0e:b5:e9:
a6:a9:cc:22:08:c1:11:4f:1c:b1:6e:dd:01:e7:32:30:0a:f7:
ae:a8:50:ef:83:78:55:a8:1d:ad:c4:b9:e0:cc:fd:7c:11:c0:
0d:73:14:bb:d0:db:5a:c4:2d:a4:90:3f:c4:f1:2e:1f:7d:e1:
81:65:20:9d:f2:d7:6b:e3:2f:14:4e:1a:b1:26:69:fe:a0:6f:
94:fe:28:ed:34:3b:05:dd:cf:ae:81:5b:c8:d6:10:75:89:01:
bb:35:7e:8a:b6:e2:8c:4d:36:d8:9a:bf:92:4e:ae:18:88:38:
ea:d6:7a:66:1c:29:98:1e:a8:e1:93:1f:19:d0:32:ce:c5:1a:
5a:c4:d8:73:18:6f:dc:ff:d7:5d:c3:b8:ae:70:6e:5e:18:43:
29:c4:36:a2:4c:a4:43:82:3a:d7:99:aa:72:0d:61:d7:1f:18:
2e:5b:21:c8:d2:02:24:52:cd:ce:f1:c4:4f:24:7b:de:f5:6b:
9d:f8:08:56:f6:ec:80:1d:3f:e7:22:f4:47:2b:91:50:6a:98:
2c:6d:ac:25:6c:5f:88:55:53:58:3c:c3:19:f1:9f:6b:ff:c6:
36:c6:08:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwZ75kKBzG3WRfDUPEz+loRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMTI5MDcxNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTg5NGM1ZjBkNTIwYjBiZmE1OWM2MDhhMTU1ZTA2ZGJhMmNjYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5WZfF4Qr53SkVEJHD3ceFMNMRKd
1zJ931+kQ8nkbDnIFdWzKEW0s3vQUGthxAjHJVMxv3/49qxQWBDbdIZ/g7ft7JYF
FXveuOVB6G6nB/fXR/aXAR/Bc/uEviY+K1fTUFTZSHHakraj4xmVspgUy6sH0id6
e4tSNtqxzxH/CAwj3S/9tjscUiSCN7IazlxK9yUDDxNJvd+oTff+xLSgPk9rosqk
mtBRRM/nC1GcQiyS8txUCvcanRKUkswwBWUcOMma1bJPK2hBhh7UM9FoTQKvYAz0
abibqv7NPZ3VuEHTL9KP7w4Aj4Xd3MbYkU8cbFTGK2iaKzi1x5MifIK9GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFmJTF8NUgsL+lnGCKFV4G26LMwXMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV1lsTVh3MVNDd3Y2V2NZSW9WWGdiYm9zekJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVRaAwQA
V3ncMA0GCSqGSIb3DQEBCwUAA4IBAQBIfII6XrytZADCwOw3HzCc7n11upI2VMnR
PvjnJ9mFWKAOtemmqcwiCMERTxyxbt0B5zIwCveuqFDvg3hVqB2txLngzP18EcAN
cxS70NtaxC2kkD/E8S4ffeGBZSCd8tdr4y8UThqxJmn+oG+U/ijtNDsF3c+ugVvI
1hB1iQG7NX6KtuKMTTbYmr+STq4YiDjq1npmHCmYHqjhkx8Z0DLOxRpaxNhzGG/c
/9ddw7iucG5eGEMpxDaiTKRDgjrXmapyDWHXHxguWyHI0gIkUs3O8cRPJHve9Wud
+AhW9uyAHT/nIvRHK5FQapgsbawlbF+IVVNYPMMZ8Z9r/8Y2xgjN
-----END CERTIFICATE-----
Generated at Thu Nov 30 08:50:08 2023 by rpki-client on console-ams.rpki-client.org