Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Wg7H7I15aHF8dFooxUs8cYvgIy4.roa
File: Wg7H7I15aHF8dFooxUs8cYvgIy4.roa (raw, json)
Hash identifier: b9ZU6hqbze+WdeS/Cl46WPCk3YsTuHDlvjdyh9erZTM=
Subject key identifier: 5A:0E:C7:EC:8D:79:68:71:7C:74:5A:28:C5:4B:3C:71:8B:E0:23:2E
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 0190D9E1E6732932E75533657926F2F10752
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Wg7H7I15aHF8dFooxUs8cYvgIy4.roa
Signing time: Mon 22 Jul 2024 09:59:38 +0000
ROA not before: Mon 22 Jul 2024 09:59:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3311
IP address blocks: 185.106.244.0/24 maxlen: 24
185.118.120.0/24 maxlen: 24
185.118.121.0/24 maxlen: 24
185.118.122.0/24 maxlen: 24
185.118.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jul 2024 05:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:e1:e6:73:29:32:e7:55:33:65:79:26:f2:f1:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Jul 22 09:59:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a0ec7ec8d7968717c745a28c54b3c718be0232e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:91:d9:c8:88:89:16:3b:5e:f4:39:d0:47:9c:
00:a9:88:75:34:24:07:9d:68:c3:dd:83:d2:a5:b7:
52:a7:c4:99:76:93:b8:a0:72:6f:de:4a:40:47:9c:
2e:24:20:4a:71:f7:50:12:ad:c5:56:27:d8:41:01:
b9:93:a2:dd:de:fb:9f:2d:51:be:4f:00:c3:c4:c0:
f5:7c:7a:24:6b:43:55:75:2a:0a:1f:64:c4:9d:36:
7b:0d:66:9c:bc:e5:2b:fc:36:91:c0:43:51:93:31:
6a:2c:51:c3:89:5e:49:41:4f:50:76:f7:9e:f6:51:
81:24:dd:0a:be:56:3b:e3:4d:39:42:5c:06:b5:ea:
7c:05:f6:62:20:c2:08:7b:31:ae:6c:e4:7f:c4:23:
02:bc:57:5e:a1:56:76:2e:a1:f9:ea:02:f2:a6:33:
fe:cf:7b:f0:10:f2:16:c1:54:1f:53:a9:eb:7c:da:
ba:c8:1f:25:d6:b9:cc:fb:51:b3:86:71:0f:bd:d9:
37:0c:f9:ce:b4:1c:f4:1f:bc:78:64:91:4f:7a:86:
5a:01:23:75:f8:c9:f0:e2:e4:12:9a:c2:ba:7d:fc:
ac:da:d4:3a:4a:46:38:6c:15:35:bd:94:dd:da:e6:
c9:af:5c:ae:86:dc:1e:fe:b0:f4:57:df:69:d0:31:
9b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:0E:C7:EC:8D:79:68:71:7C:74:5A:28:C5:4B:3C:71:8B:E0:23:2E
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Wg7H7I15aHF8dFooxUs8cYvgIy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.244.0/24
185.118.120.0/22
Signature Algorithm: sha256WithRSAEncryption
53:f4:0e:43:72:03:65:f6:79:52:66:79:3f:2d:9e:eb:4d:13:
c5:99:09:d8:09:43:01:8f:3a:4f:0c:50:c3:5e:55:23:93:63:
05:4e:bc:f0:5a:5b:cf:6e:09:dc:05:f2:79:fd:d0:3e:54:b1:
01:d1:36:4b:6b:26:ce:38:a4:a1:a8:14:40:5c:50:47:68:8e:
ae:f4:e5:72:1c:eb:65:af:a2:62:78:87:22:9a:86:3c:45:f0:
0f:5f:0a:c4:04:1d:e9:6b:26:6e:12:f3:51:5e:92:b8:14:d6:
b7:1e:23:0f:cc:74:cc:7e:03:3a:87:c5:b1:5b:b6:ba:b8:df:
f0:53:56:9e:e7:46:09:d5:0a:a6:64:fc:2b:c7:c3:51:cb:eb:
6a:d0:fb:b2:b6:c6:94:b2:0d:41:88:8e:eb:a1:17:7e:b1:72:
5c:af:0d:1f:b5:1e:05:d0:e7:ea:07:9d:38:c4:a1:34:44:4e:
b3:7e:0d:5b:df:de:48:eb:0d:61:ef:43:cd:04:80:d2:fd:0e:
0e:c9:53:d7:6e:fa:a6:da:c6:49:88:f3:ac:81:3c:64:fd:6d:
47:8f:de:0e:e1:3a:d0:6e:07:cc:a9:1a:a0:80:fd:a4:1c:18:
b2:d9:19:1c:ce:1e:e9:00:45:7f:c2:8e:cf:7a:b5:ec:ae:79:
6f:34:10:45
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZDZ4eZzKTLnVTNleSby8QdSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0
OGExYzQwHhcNMjQwNzIyMDk1OTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTBlYzdlYzhkNzk2ODcxN2M3NDVhMjhjNTRiM2M3MThiZTAyMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9JHZyIiJFjte9DnQR5wAqYh1NCQH
nWjD3YPSpbdSp8SZdpO4oHJv3kpAR5wuJCBKcfdQEq3FVifYQQG5k6Ld3vufLVG+
TwDDxMD1fHoka0NVdSoKH2TEnTZ7DWacvOUr/DaRwENRkzFqLFHDiV5JQU9Qdvee
9lGBJN0KvlY74005QlwGtep8BfZiIMIIezGubOR/xCMCvFdeoVZ2LqH56gLypjP+
z3vwEPIWwVQfU6nrfNq6yB8l1rnM+1GzhnEPvdk3DPnOtBz0H7x4ZJFPeoZaASN1
+Mnw4uQSmsK6ffys2tQ6SkY4bBU1vZTd2ubJr1yuhtwe/rD0V99p0DGbqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFoOx+yNeWhxfHRaKMVLPHGL4CMuMB8GA1UdIwQY
MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt
ODA1MzJkZDc0ZDRkLzEvV2c3SDdJMTVhSEY4ZEZvb3hVczhjWXZnSXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk
LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWr0AwQC
uXZ4MA0GCSqGSIb3DQEBCwUAA4IBAQBT9A5DcgNl9nlSZnk/LZ7rTRPFmQnYCUMB
jzpPDFDDXlUjk2MFTrzwWlvPbgncBfJ5/dA+VLEB0TZLaybOOKShqBRAXFBHaI6u
9OVyHOtlr6JieIcimoY8RfAPXwrEBB3payZuEvNRXpK4FNa3HiMPzHTMfgM6h8Wx
W7a6uN/wU1ae50YJ1QqmZPwrx8NRy+tq0PuytsaUsg1BiI7roRd+sXJcrw0ftR4F
0OfqB504xKE0RE6zfg1b395I6w1h70PNBIDS/Q4OyVPXbvqm2sZJiPOsgTxk/W1H
j94O4TrQbgfMqRqggP2kHBiy2Rkczh7pAEV/wo7PerXsrnlvNBBF
Generated at Sun Jul 28 08:45:31 2024 by rpki-client on console-ams.rpki-client.org