Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WxES2LGp1T4HCRvTHlvrESZXnxo.roa
File: WxES2LGp1T4HCRvTHlvrESZXnxo.roa (raw, json)
Hash identifier: UxiPcl8C0BfBu4DqxBy85iJft0cHv6PIJTmW6uxpthc=
Subject key identifier: 5B:11:12:D8:B1:A9:D5:3E:07:09:1B:D3:1E:5B:EB:11:26:57:9F:1A
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F2AE77683B9832F3D50DBD0B304931645
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WxES2LGp1T4HCRvTHlvrESZXnxo.roa
Signing time: Mon 29 Apr 2024 17:29:23 +0000
ROA not before: Mon 29 Apr 2024 17:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399486
IP address blocks: 45.88.91.0/24 maxlen: 24
80.76.49.0/24 maxlen: 24
85.209.133.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 13:15:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2a:e7:76:83:b9:83:2f:3d:50:db:d0:b3:04:93:16:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 29 17:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b1112d8b1a9d53e07091bd31e5beb1126579f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:66:e9:d8:6e:b4:c1:7b:de:7e:5d:09:bb:35:
ed:48:3b:df:93:44:03:13:a4:f9:3f:a0:ed:eb:60:
67:eb:86:26:c7:f0:5a:8b:66:0c:bc:be:73:9e:b7:
00:4e:fb:67:76:bf:7e:3c:16:3b:3a:87:dd:2d:c5:
95:ac:ae:92:32:40:90:2b:bf:ea:99:4c:0a:2f:60:
1c:84:7d:ad:a5:ec:62:1f:9d:d2:3f:af:fc:54:43:
23:5a:66:6b:c2:a6:52:f7:a9:60:93:74:c9:a8:74:
30:1e:38:58:6c:ce:39:5b:1f:78:c2:83:cf:34:4e:
d4:72:2d:4b:94:f9:38:09:d7:26:c2:8d:4b:3d:29:
73:c8:67:c8:5f:f9:5a:17:74:ca:87:63:e0:d2:b0:
70:a6:be:e8:89:be:79:79:65:5f:36:11:87:42:19:
d2:d6:47:1d:1c:b8:a1:6f:a5:7c:0c:7b:e6:43:d6:
5e:3f:f7:b9:ba:74:d5:ca:ba:dd:1f:61:de:e8:3c:
5f:6e:06:93:db:68:34:b7:92:fb:c8:6f:51:2f:13:
e9:47:67:4b:14:1c:58:71:17:9e:c0:5d:90:ca:ee:
a5:ec:3b:a9:19:a0:90:d8:87:75:ee:f1:c3:9a:5e:
5e:41:63:e4:6d:50:10:c3:48:4d:b7:c1:6d:13:91:
55:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:11:12:D8:B1:A9:D5:3E:07:09:1B:D3:1E:5B:EB:11:26:57:9F:1A
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/WxES2LGp1T4HCRvTHlvrESZXnxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.91.0/24
80.76.49.0/24
85.209.133.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
95:c1:6d:8f:01:c4:3d:1f:b6:00:fb:5a:98:34:fe:56:f6:f4:
6a:0d:38:41:0d:23:44:d8:b3:e4:32:8c:62:a4:37:0e:9d:c5:
d7:ba:41:64:85:ac:0e:71:1a:e1:28:6a:45:3a:ea:ff:3e:00:
6f:94:e1:06:27:93:b0:b8:f2:13:ed:e2:26:cc:87:23:d7:7e:
f1:c8:62:d5:49:b3:bc:a9:96:f0:ca:e9:fe:37:91:8d:62:b6:
fc:a4:d5:d6:02:17:e9:ec:6c:1e:cb:9c:e8:97:5a:de:ef:f7:
8f:fb:d2:ef:e7:e4:b8:0d:b4:3d:22:e4:71:a3:d2:e5:0e:ca:
66:48:50:81:2c:1f:9a:ef:a8:f8:38:18:26:ba:41:a2:d3:fe:
a0:83:54:d0:60:e7:a1:01:53:82:94:6b:3b:4e:fc:f7:c0:b6:
71:ea:d9:ce:ae:c4:29:0e:4e:ff:f2:cf:a5:10:46:d7:ee:8f:
b9:dc:40:1a:40:d0:cc:fb:e0:a3:09:9f:b9:f5:37:32:63:be:
99:46:55:11:56:fd:25:db:68:c1:79:a1:7a:2a:7c:73:70:6f:
92:f1:05:65:75:f9:69:ba:92:62:2b:9c:41:af:dc:22:03:8a:
ec:c2:b3:bc:6a:48:6d:c4:7d:51:f6:a0:59:98:cc:87:55:18:
73:f0:43:c7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY8q53aDuYMvPVDb0LMEkxZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNDI5MTcyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjExMTJkOGIxYTlkNTNlMDcwOTFiZDMxZTViZWIxMTI2NTc5ZjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGbp2G60wXvefl0JuzXtSDvfk0QD
E6T5P6Dt62Bn64Ymx/Bai2YMvL5znrcATvtndr9+PBY7OofdLcWVrK6SMkCQK7/q
mUwKL2AchH2tpexiH53SP6/8VEMjWmZrwqZS96lgk3TJqHQwHjhYbM45Wx94woPP
NE7Uci1LlPk4Cdcmwo1LPSlzyGfIX/laF3TKh2Pg0rBwpr7oib55eWVfNhGHQhnS
1kcdHLihb6V8DHvmQ9ZeP/e5unTVyrrdH2He6DxfbgaT22g0t5L7yG9RLxPpR2dL
FBxYcReewF2Qyu6l7DupGaCQ2Id17vHDml5eQWPkbVAQw0hNt8FtE5FVtwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFsREtixqdU+Bwkb0x5b6xEmV58aMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvV3hFUzJMR3AxVDRIQ1J2VEhsdnJFU1pYbnhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVhbAwQA
UEwxAwQAVdGFAwQAwjsfMA0GCSqGSIb3DQEBCwUAA4IBAQCVwW2PAcQ9H7YA+1qY
NP5W9vRqDThBDSNE2LPkMoxipDcOncXXukFkhawOcRrhKGpFOur/PgBvlOEGJ5Ow
uPIT7eImzIcj137xyGLVSbO8qZbwyun+N5GNYrb8pNXWAhfp7Gwey5zol1re7/eP
+9Lv5+S4DbQ9IuRxo9LlDspmSFCBLB+a76j4OBgmukGi0/6gg1TQYOehAVOClGs7
Tvz3wLZx6tnOrsQpDk7/8s+lEEbX7o+53EAaQNDM++CjCZ+59TcyY76ZRlURVv0l
22jBeaF6KnxzcG+S8QVldflpupJiK5xBr9wiA4rswrO8akhtxH1R9qBZmMyHVRhz
8EPH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:12 2024 by rpki-client on console-fra.rpki-client.org