Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/WP95N_fFA9JmO7-RDPq_UOzrjoM.roa
File: WP95N_fFA9JmO7-RDPq_UOzrjoM.roa (raw, json)
Hash identifier: Ze1IFfZ77sMPal7H/udOJMGwNCodg/BLEn0YZlNrrLY=
Subject key identifier: 58:FF:79:37:F7:C5:03:D2:66:3B:BF:91:0C:FA:BF:50:EC:EB:8E:83
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 0186799D4E5B1B2DE0C788D8160EE86A4B6D
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/WP95N_fFA9JmO7-RDPq_UOzrjoM.roa
Signing time: Wed 22 Feb 2023 14:53:17 +0000
ROA not before: Wed 22 Feb 2023 14:53:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199524
IP address blocks: 91.188.251.0/24 maxlen: 24
91.202.245.0/24 maxlen: 24
91.202.246.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:79:9d:4e:5b:1b:2d:e0:c7:88:d8:16:0e:e8:6a:4b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Feb 22 14:53:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58ff7937f7c503d2663bbf910cfabf50eceb8e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:30:ec:73:f2:ea:c4:45:b3:a2:05:73:ac:1c:
92:4a:68:53:e1:80:61:4e:c5:4b:fd:63:7d:2f:30:
1b:7d:4c:f5:e1:79:d2:0b:f9:3e:36:46:b6:e5:48:
30:e7:e4:02:b4:d4:94:1f:c8:82:cd:eb:2a:28:1e:
5e:3e:6d:e3:d9:6a:c1:69:63:e4:a9:e9:28:f8:6e:
0e:8b:86:7d:2d:b7:ed:95:34:5d:7f:9a:61:87:15:
5e:49:5e:6b:9c:35:33:4c:8b:59:91:5f:f5:da:76:
3b:87:24:4f:07:ce:58:ae:c7:c1:14:af:8e:51:f7:
2d:18:f6:6e:15:43:e7:2d:61:f3:55:2d:d9:0a:77:
0c:d3:45:34:ba:d0:4d:28:47:d1:7a:06:4b:20:c2:
af:0c:64:b0:2f:31:19:81:02:e2:be:a8:70:70:5d:
04:a4:fb:e4:28:38:b7:54:be:9a:1e:ca:c8:82:eb:
8d:3c:15:6c:d9:6e:9a:32:6c:63:0e:1c:61:0e:e1:
b2:a7:16:87:b8:c3:49:57:2e:10:6e:38:57:65:0b:
ac:b2:6f:84:d4:88:27:fb:43:b3:2e:2f:2d:11:cb:
b1:c4:82:ab:dd:b9:d0:58:94:fc:d3:03:99:96:69:
9f:ba:bc:00:6a:16:1c:25:4f:17:bd:32:1f:34:f2:
26:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FF:79:37:F7:C5:03:D2:66:3B:BF:91:0C:FA:BF:50:EC:EB:8E:83
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/WP95N_fFA9JmO7-RDPq_UOzrjoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.251.0/24
91.202.245.0-91.202.247.255
Signature Algorithm: sha256WithRSAEncryption
47:4b:62:80:de:23:5d:85:ce:be:c0:e4:2a:93:aa:41:b0:4f:
75:e0:be:ce:48:51:d0:bb:3e:b1:25:34:03:02:c5:c5:c7:30:
34:a6:81:06:21:9e:c4:bf:fa:60:a6:b9:97:0f:4d:05:c6:04:
ac:3f:91:03:f7:69:d7:e5:07:ae:6e:bf:6a:32:1b:05:a6:18:
46:c4:54:88:f1:72:4e:99:e4:3a:0b:99:34:ce:22:82:77:08:
d7:f8:1c:40:e6:21:d8:d7:98:dd:a3:d1:77:65:e0:74:28:a7:
9c:7e:b4:2a:06:00:d1:72:15:0c:55:28:6a:ea:af:ef:59:3c:
1e:a7:43:b6:35:ef:aa:50:f7:3c:dd:2e:10:31:5b:06:8d:9d:
97:76:10:b0:63:de:60:6b:5a:f0:1e:e2:55:30:df:7a:dc:6e:
d3:f5:fa:5c:e8:61:93:8f:d7:fd:cc:c6:f0:21:a5:f7:99:6b:
7c:f2:4a:35:3d:62:0c:ec:39:15:60:81:ec:4c:bc:bf:6f:61:
bc:f0:2a:43:95:8e:16:bc:c4:35:c9:d1:96:f8:57:17:6a:a1:
d8:dc:d3:b9:c8:08:86:26:3c:d3:41:81:fe:3e:43:13:94:08:
fc:43:59:b6:66:ec:a1:45:b1:b6:ef:f2:d3:b8:dc:2c:35:52:
54:8e:f5:86
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYZ5nU5bGy3gx4jYFg7oakttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjMwMjIyMTQ1MzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGZmNzkzN2Y3YzUwM2QyNjYzYmJmOTEwY2ZhYmY1MGVjZWI4ZTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjDsc/LqxEWzogVzrBySSmhT4YBh
TsVL/WN9LzAbfUz14XnSC/k+Nka25Ugw5+QCtNSUH8iCzesqKB5ePm3j2WrBaWPk
qeko+G4Oi4Z9LbftlTRdf5phhxVeSV5rnDUzTItZkV/12nY7hyRPB85YrsfBFK+O
UfctGPZuFUPnLWHzVS3ZCncM00U0utBNKEfRegZLIMKvDGSwLzEZgQLivqhwcF0E
pPvkKDi3VL6aHsrIguuNPBVs2W6aMmxjDhxhDuGypxaHuMNJVy4QbjhXZQussm+E
1Ign+0OzLi8tEcuxxIKr3bnQWJT80wOZlmmfurwAahYcJU8XvTIfNPIm2QIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFFj/eTf3xQPSZju/kQz6v1Ds646DMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvV1A5NU5fZkZBOUptTzctUkRQcV9VT3pyam9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW7z7MAwD
BABbyvUDBANbyvAwDQYJKoZIhvcNAQELBQADggEBAEdLYoDeI12Fzr7A5CqTqkGw
T3Xgvs5IUdC7PrElNAMCxcXHMDSmgQYhnsS/+mCmuZcPTQXGBKw/kQP3adflB65u
v2oyGwWmGEbEVIjxck6Z5DoLmTTOIoJ3CNf4HEDmIdjXmN2j0Xdl4HQop5x+tCoG
ANFyFQxVKGrqr+9ZPB6nQ7Y176pQ9zzdLhAxWwaNnZd2ELBj3mBrWvAe4lUw33rc
btP1+lzoYZOP1/3MxvAhpfeZa3zySjU9YgzsORVggexMvL9vYbzwKkOVjha8xDXJ
0Zb4Vxdqodjc07nICIYmPNNBgf4+QxOUCPxDWbZm7KFFsbbv8tO43Cw1UlSO9YY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:46 2024 by rpki-client on console-fra.rpki-client.org