Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wWUtxQqsBNsbv6D7TFVr-I6-euA.roa
File: wWUtxQqsBNsbv6D7TFVr-I6-euA.roa (raw, json)
Hash identifier: Nh/MF8odCWQ6ovaxeMTJGfnY53nYlGLxJjFbUtXntpA=
Subject key identifier: C1:65:2D:C5:0A:AC:04:DB:1B:BF:A0:FB:4C:55:6B:F8:8E:BE:7A:E0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCDF745A0B914570B8DC388A0378F6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wWUtxQqsBNsbv6D7TFVr-I6-euA.roa
Signing time: Tue 02 Jan 2024 06:29:27 +0000
ROA not before: Tue 02 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42926
IP address blocks: 212.115.42.0/23 maxlen: 24
212.115.40.0/24 maxlen: 24
185.226.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 08:18:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:df:74:5a:0b:91:45:70:b8:dc:38:8a:03:78:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1652dc50aac04db1bbfa0fb4c556bf88ebe7ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:49:11:9a:59:cb:fa:ad:c7:09:a4:19:e1:
cb:67:bf:93:92:75:27:5e:7c:f0:36:7d:ea:fd:06:
7a:83:5f:1c:14:46:c1:d5:17:16:ca:05:54:4d:c4:
9b:24:0b:1a:20:87:87:b0:7f:e6:47:44:a3:e8:6d:
84:19:ce:3f:73:31:b2:e4:3e:1c:2d:7d:22:21:66:
fc:e8:4a:c2:b3:c1:81:e0:e3:1d:a9:67:c8:cd:f6:
cc:6a:57:fb:22:c9:c3:12:1f:77:4a:43:2d:bf:2c:
d6:43:7c:12:b3:57:ab:ae:c7:a8:7f:9c:d4:f6:7f:
76:a5:ca:34:23:32:c5:a9:e8:7a:3a:90:2f:23:01:
f3:e0:8d:75:10:4d:90:f2:9d:24:69:1f:46:22:56:
ff:e2:e8:bd:55:bb:10:cd:79:38:66:7a:ae:2c:bc:
dc:48:5c:ad:e5:7e:56:3b:cb:c6:9d:9f:97:29:fc:
5a:43:f4:a2:71:d8:92:f1:f5:ea:03:c5:a0:7b:c7:
e9:fc:4b:94:9a:43:43:66:25:66:f2:69:03:b4:34:
28:f5:38:45:91:3a:52:7f:20:01:94:c9:c8:e6:39:
9a:05:01:0a:47:da:8a:6c:21:92:5b:3a:30:30:a0:
ec:2f:40:88:cd:b1:29:59:08:a1:68:12:b8:1e:b1:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:65:2D:C5:0A:AC:04:DB:1B:BF:A0:FB:4C:55:6B:F8:8E:BE:7A:E0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/wWUtxQqsBNsbv6D7TFVr-I6-euA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.174.0/24
212.115.40.0/24
212.115.42.0/23
Signature Algorithm: sha256WithRSAEncryption
21:79:b8:a2:07:30:3c:31:3e:b8:08:ee:33:c3:09:c4:61:10:
f1:9c:fb:d1:1f:d8:9a:e0:a2:ad:9b:7c:e6:ee:25:ec:cb:5d:
77:69:c2:98:84:3f:b0:ca:0e:79:be:cb:b1:c3:39:f9:95:99:
be:18:90:a2:7d:d7:ae:09:88:cd:73:6e:04:0e:64:1c:2c:d5:
a6:09:94:9f:9e:49:aa:a5:ba:e6:f1:25:53:2e:c4:c4:53:21:
fa:70:45:3e:c4:8e:2b:0c:7f:ef:f4:36:6d:23:6b:00:46:36:
0b:2b:64:cc:8f:1d:bd:c0:8d:41:97:78:6d:ec:37:84:5b:43:
92:db:e8:0c:01:9d:e8:b5:65:0a:9d:0c:3a:fe:8d:d9:29:47:
72:11:04:b8:67:68:2e:c7:91:68:ca:3a:d9:eb:24:26:c3:93:
a2:2b:d6:d1:0f:24:20:e6:8c:cb:3f:b4:d2:ec:7e:7a:86:67:
dc:88:0f:68:96:d9:ac:21:5e:87:78:75:20:4e:af:12:76:ca:
46:32:04:d2:fb:03:1d:1b:5a:3f:eb:b5:f4:91:5a:4b:3c:7f:
64:f6:74:34:0c:16:0a:b6:5c:55:34:53:4f:88:fa:dd:11:1a:
fa:dd:1e:ed:64:30:a9:ec:9a:92:23:b1:7c:ba:5c:14:33:fd:
97:19:d9:25
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzI3N90WguRRXC43DiKA3j2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTY1MmRjNTBhYWMwNGRiMWJiZmEwZmI0YzU1NmJmODhlYmU3YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIJJEZpZy/qtxwmkGeHLZ7+TknUn
XnzwNn3q/QZ6g18cFEbB1RcWygVUTcSbJAsaIIeHsH/mR0Sj6G2EGc4/czGy5D4c
LX0iIWb86ErCs8GB4OMdqWfIzfbMalf7IsnDEh93SkMtvyzWQ3wSs1errseof5zU
9n92pco0IzLFqeh6OpAvIwHz4I11EE2Q8p0kaR9GIlb/4ui9VbsQzXk4ZnquLLzc
SFyt5X5WO8vGnZ+XKfxaQ/SicdiS8fXqA8Wge8fp/EuUmkNDZiVm8mkDtDQo9ThF
kTpSfyABlMnI5jmaBQEKR9qKbCGSWzowMKDsL0CIzbEpWQihaBK4HrGgwQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMFlLcUKrATbG7+g+0xVa/iOvnrgMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvd1dVdHhRcXNCTnNidjZEN1RGVnItSTYtZXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAueKuAwQA
1HMoAwQB1HMqMA0GCSqGSIb3DQEBCwUAA4IBAQAhebiiBzA8MT64CO4zwwnEYRDx
nPvRH9ia4KKtm3zm7iXsy113acKYhD+wyg55vsuxwzn5lZm+GJCifdeuCYjNc24E
DmQcLNWmCZSfnkmqpbrm8SVTLsTEUyH6cEU+xI4rDH/v9DZtI2sARjYLK2TMjx29
wI1Bl3ht7DeEW0OS2+gMAZ3otWUKnQw6/o3ZKUdyEQS4Z2gux5FoyjrZ6yQmw5Oi
K9bRDyQg5ozLP7TS7H56hmfciA9oltmsIV6HeHUgTq8SdspGMgTS+wMdG1o/67X0
kVpLPH9k9nQ0DBYKtlxVNFNPiPrdERr63R7tZDCp7JqSI7F8ulwUM/2XGdkl
-----END CERTIFICATE-----
Generated at Tue Feb 6 12:06:55 2024 by rpki-client on console-ams.rpki-client.org