Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/whB4mMWtLu0k2So1OUDxhALLjLo.roa
File: whB4mMWtLu0k2So1OUDxhALLjLo.roa (raw, json)
Hash identifier: U/khN/Ph0oZwozP318Ge3DWWQfZ5FfQOTeJl9fMt9hs=
Subject key identifier: C2:10:78:98:C5:AD:2E:ED:24:D9:2A:35:39:40:F1:84:02:CB:8C:BA
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018BF0F3F5A1069AD568927C3A69316392BF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/whB4mMWtLu0k2So1OUDxhALLjLo.roa
Signing time: Tue 21 Nov 2023 08:16:41 +0000
ROA not before: Tue 21 Nov 2023 08:16:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 185.216.68.0/24 maxlen: 24
2a00:1728:3f::/48 maxlen: 64
Validation: Failed, certificate revoked on Tue 21 Nov 2023 08:27:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f0:f3:f5:a1:06:9a:d5:68:92:7c:3a:69:31:63:92:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 21 08:16:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2107898c5ad2eed24d92a353940f18402cb8cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:df:e3:a8:f1:02:3e:28:d3:8f:01:4d:a7:
d7:0e:fa:d3:ef:73:62:56:9b:6a:89:66:e7:37:d8:
1b:44:a7:85:d3:6f:35:bb:54:06:cd:5a:90:ff:a1:
b1:fa:1b:ed:41:c3:1d:17:d5:ee:44:dc:e0:09:40:
50:74:07:ef:40:2a:08:2b:bc:6a:00:cb:c3:3c:08:
15:e9:00:04:eb:c9:b1:ba:ab:b9:d4:3d:d0:d4:91:
5c:70:e2:71:9f:1b:aa:2f:cd:ad:2e:2f:dc:fc:f1:
f6:1c:41:a5:21:f4:4a:d0:56:88:3b:e8:17:db:0c:
0c:67:44:ba:9e:91:45:c5:1c:e0:9e:bb:6c:e9:11:
7b:7a:eb:7a:bf:46:4e:72:b8:fb:30:69:64:be:1f:
0f:fe:ad:2f:e1:fa:8e:e3:64:bf:4d:e5:05:54:11:
49:91:48:42:61:50:5f:c5:d5:bd:d2:90:af:58:6c:
3a:c6:75:de:dd:fc:76:85:8d:92:6f:f9:9a:6e:52:
0f:d5:55:33:cb:a3:07:8b:05:33:0d:b8:4e:48:35:
0d:43:17:fa:05:46:d8:89:98:f8:00:26:c4:07:78:
f0:48:e8:34:f8:8b:bc:53:cf:7b:bc:e8:7d:fa:9c:
da:16:55:62:a7:de:00:5d:d4:aa:04:46:5d:26:52:
22:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:10:78:98:C5:AD:2E:ED:24:D9:2A:35:39:40:F1:84:02:CB:8C:BA
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/whB4mMWtLu0k2So1OUDxhALLjLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.68.0/24
IPv6:
2a00:1728:3f::/48
Signature Algorithm: sha256WithRSAEncryption
36:90:99:a2:4d:4a:dd:9e:a0:17:5d:f9:67:3f:81:96:71:ff:
86:25:c9:6a:be:a8:7d:eb:4c:70:9c:23:bb:6d:26:61:42:9b:
30:4d:1f:be:1c:17:e4:06:40:c4:77:06:4d:4e:1c:da:45:66:
bb:62:f4:7e:78:9f:97:28:c0:32:34:f2:b7:26:cd:81:82:7f:
9c:69:75:24:87:51:09:c9:09:aa:df:ce:bf:5f:f0:3c:30:58:
e9:9c:49:e6:03:45:f7:6b:4d:f6:34:0d:2e:87:6d:7d:f1:51:
d1:e8:ad:6e:45:57:bc:42:54:fa:de:d9:4b:02:29:13:5a:c9:
e0:99:c5:32:9d:a9:cb:42:a3:1e:89:01:2b:b4:49:57:25:79:
b2:23:c9:26:44:73:07:85:4d:73:04:3c:d6:d9:df:90:77:c1:
10:86:a3:2e:a3:b1:1f:d2:96:84:50:15:43:71:4d:a7:a8:24:
0c:c0:72:2c:ac:ae:d8:a0:51:ec:fb:42:d3:aa:89:d6:fe:66:
15:e1:40:4d:d2:ef:11:a7:e5:43:db:a1:47:5e:c6:74:17:4c:
7a:b2:06:33:c1:42:5d:bb:97:08:6d:c9:58:b7:80:a2:ee:ca:
66:92:b2:4e:f5:bd:d4:44:aa:22:5d:77:55:07:13:6d:d7:f7:
33:09:55:b4
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYvw8/WhBprVaJJ8OmkxY5K/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMTIxMDgxNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjEwNzg5OGM1YWQyZWVkMjRkOTJhMzUzOTQwZjE4NDAyY2I4Y2JhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynjf46jxAj4o048BTafXDvrT73Ni
VptqiWbnN9gbRKeF0281u1QGzVqQ/6Gx+hvtQcMdF9XuRNzgCUBQdAfvQCoIK7xq
AMvDPAgV6QAE68mxuqu51D3Q1JFccOJxnxuqL82tLi/c/PH2HEGlIfRK0FaIO+gX
2wwMZ0S6npFFxRzgnrts6RF7eut6v0ZOcrj7MGlkvh8P/q0v4fqO42S/TeUFVBFJ
kUhCYVBfxdW90pCvWGw6xnXe3fx2hY2Sb/mablIP1VUzy6MHiwUzDbhOSDUNQxf6
BUbYiZj4ACbEB3jwSOg0+Iu8U897vOh9+pzaFlVip94AXdSqBEZdJlIiwQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMIQeJjFrS7tJNkqNTlA8YQCy4y6MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvd2hCNG1NV3RMdTBrMlNvMU9VRHhoQUxMakxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAudhEMA8E
AgACMAkDBwAqABcoAD8wDQYJKoZIhvcNAQELBQADggEBADaQmaJNSt2eoBdd+Wc/
gZZx/4YlyWq+qH3rTHCcI7ttJmFCmzBNH74cF+QGQMR3Bk1OHNpFZrti9H54n5co
wDI08rcmzYGCf5xpdSSHUQnJCarfzr9f8DwwWOmcSeYDRfdrTfY0DS6HbX3xUdHo
rW5FV7xCVPre2UsCKRNayeCZxTKdqctCox6JASu0SVclebIjySZEcweFTXMEPNbZ
35B3wRCGoy6jsR/SloRQFUNxTaeoJAzAciysrtigUez7QtOqidb+ZhXhQE3S7xGn
5UPboUdexnQXTHqyBjPBQl27lwhtyVi3gKLuymaSsk71vdREqiJdd1UHE23X9zMJ
VbQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:21 2024 by rpki-client on console-fra.rpki-client.org