Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WThF6zofSipcHpYslbjcmGkaUkg.roa
File: WThF6zofSipcHpYslbjcmGkaUkg.roa (raw, json)
Hash identifier: jWA/eqKDupWVN5Awa8tA/I7mhrRO6PmAAZ91YIUBaOI=
Subject key identifier: 59:38:45:EB:3A:1F:4A:2A:5C:1E:96:2C:95:B8:DC:98:69:1A:52:48
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570027F6D689358BB94337D8A3966B352
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WThF6zofSipcHpYslbjcmGkaUkg.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35185
IP address blocks: 84.44.7.0/24 maxlen: 24
46.234.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7f:6d:68:93:58:bb:94:33:7d:8a:39:66:b3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593845eb3a1f4a2a5c1e962c95b8dc98691a5248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:95:14:1d:6b:ff:9c:fb:17:7d:a3:3f:6a:3d:
fe:4e:ff:20:0b:ce:43:70:8c:9c:59:00:d7:f2:67:
0d:b5:52:9f:1d:12:e4:5f:3b:e0:d7:76:6c:08:3a:
7b:e5:f2:13:8a:ed:e8:a9:c7:cc:c4:df:33:e4:df:
de:b6:4f:8b:db:26:5c:35:2a:4c:8e:8b:94:6e:e4:
96:3c:6f:1e:33:a9:a4:12:7a:c5:3e:6f:90:32:df:
6a:36:6f:e7:18:86:78:8b:71:62:2f:ac:1c:ac:ba:
a4:43:95:3d:a4:14:86:0d:bc:8f:88:4e:d2:33:7b:
a9:e8:dd:5f:fc:2d:d0:00:88:74:bb:99:eb:be:c2:
04:a3:03:87:b2:44:b3:95:0d:f1:02:bb:da:53:26:
df:4f:e7:13:9a:b1:f1:05:25:26:aa:ff:72:2f:32:
8d:d9:b9:f6:36:e3:b0:a7:9f:5b:33:b2:25:0b:ce:
24:15:d9:9a:83:15:dd:c0:23:d7:13:ff:4b:36:f1:
63:4d:a6:f9:42:e7:b3:01:3a:59:6c:db:c1:de:05:
9e:7f:92:e7:7f:bd:73:a8:53:fa:2f:66:72:82:82:
ba:bb:48:8b:ed:41:a1:de:d8:d1:a7:ae:89:02:fe:
85:ea:76:50:56:26:9f:76:65:44:8f:52:8f:82:0b:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:38:45:EB:3A:1F:4A:2A:5C:1E:96:2C:95:B8:DC:98:69:1A:52:48
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/WThF6zofSipcHpYslbjcmGkaUkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.234.14.0/24
84.44.7.0/24
Signature Algorithm: sha256WithRSAEncryption
40:01:3d:1c:df:62:d9:71:ce:5a:ce:08:fc:66:1e:57:11:58:
7e:97:51:a4:08:e6:0b:e4:c6:f7:04:d9:3c:51:3b:56:16:9b:
ab:56:c9:3d:4a:1c:44:12:15:ed:ef:0f:c1:4f:88:b5:b8:0f:
4d:6f:65:12:1c:01:3d:24:4f:5c:cc:33:37:fd:04:68:46:5c:
17:60:f7:d4:4f:d1:6b:d6:ac:e4:02:a0:2d:d5:2f:70:aa:40:
c5:54:97:fd:67:15:10:fd:bf:53:3a:d8:79:4e:0d:f1:ef:72:
94:5b:f0:12:8d:aa:fa:a6:c4:f5:26:ad:a1:25:04:9c:d7:21:
f5:6b:39:08:cf:5b:c1:c5:82:2e:98:77:52:f8:bb:a4:84:6e:
0a:61:90:59:a3:c9:b9:cf:97:80:a1:3f:45:d2:b3:3b:85:1a:
c1:1f:3a:e4:24:95:d5:65:ef:4b:20:bd:3f:46:57:82:5b:ef:
8c:31:09:54:d7:20:17:7d:65:11:fe:c4:8b:7b:5b:c1:90:9b:
7f:8f:58:5d:c1:70:11:fc:8b:9a:be:0b:ef:c0:b4:1e:d2:f0:
56:bd:bd:0f:b9:53:26:7f:b9:03:16:28:d1:57:5d:93:f5:09:
80:32:7c:45:fd:e5:fa:81:ef:41:2c:d4:e6:ea:76:0a:f1:28:
ea:7c:1c:ed
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwAn9taJNYu5QzfYo5ZrNSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw
MWY0YzkwHhcNMjMwMTAyMDEwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTM4NDVlYjNhMWY0YTJhNWMxZTk2MmM5NWI4ZGM5ODY5MWE1MjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJUUHWv/nPsXfaM/aj3+Tv8gC85D
cIycWQDX8mcNtVKfHRLkXzvg13ZsCDp75fITiu3oqcfMxN8z5N/etk+L2yZcNSpM
jouUbuSWPG8eM6mkEnrFPm+QMt9qNm/nGIZ4i3FiL6wcrLqkQ5U9pBSGDbyPiE7S
M3up6N1f/C3QAIh0u5nrvsIEowOHskSzlQ3xArvaUybfT+cTmrHxBSUmqv9yLzKN
2bn2NuOwp59bM7IlC84kFdmagxXdwCPXE/9LNvFjTab5QuezATpZbNvB3gWef5Ln
f71zqFP6L2ZygoK6u0iL7UGh3tjRp66JAv6F6nZQViafdmVEj1KPgguy4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFk4Res6H0oqXB6WLJW43JhpGlJIMB8GA1UdIwQY
MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt
ODNkNjQ4Zjc5NzQ2LzEvV1RoRjZ6b2ZTaXBjSHBZc2xiamNtR2thVWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2
LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuoOAwQA
VCwHMA0GCSqGSIb3DQEBCwUAA4IBAQBAAT0c32LZcc5azgj8Zh5XEVh+l1GkCOYL
5Mb3BNk8UTtWFpurVsk9ShxEEhXt7w/BT4i1uA9Nb2USHAE9JE9czDM3/QRoRlwX
YPfUT9Fr1qzkAqAt1S9wqkDFVJf9ZxUQ/b9TOth5Tg3x73KUW/ASjar6psT1Jq2h
JQSc1yH1azkIz1vBxYIumHdS+LukhG4KYZBZo8m5z5eAoT9F0rM7hRrBHzrkJJXV
Ze9LIL0/RleCW++MMQlU1yAXfWUR/sSLe1vBkJt/j1hdwXAR/IuavgvvwLQe0vBW
vb0PuVMmf7kDFijRV12T9QmAMnxF/eX6ge9BLNTm6nYK8SjqfBzt
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org