Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/W3eN6p0PpBN5OW1zLW5P4AP2HrY.roa
File: W3eN6p0PpBN5OW1zLW5P4AP2HrY.roa (raw, json)
Hash identifier: WRU7H8skD30vPSgzT51PODzcv8q+8+bEz2fOwxfLbJE=
Subject key identifier: 5B:77:8D:EA:9D:0F:A4:13:79:39:6D:73:2D:6E:4F:E0:03:F6:1E:B6
Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Certificate serial: 018C165DE64CC9C77EE7E87C139A892C47EC
Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/W3eN6p0PpBN5OW1zLW5P4AP2HrY.roa
Signing time: Tue 28 Nov 2023 14:38:21 +0000
ROA not before: Tue 28 Nov 2023 14:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.207.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:16:5d:e6:4c:c9:c7:7e:e7:e8:7c:13:9a:89:2c:47:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab
Validity
Not Before: Nov 28 14:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b778dea9d0fa41379396d732d6e4fe003f61eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:fa:f5:ec:be:32:9f:bb:e8:c8:d6:d2:16:
70:a4:83:09:7e:f2:75:44:3c:82:a0:52:82:7a:30:
4d:7e:9f:dd:26:0a:e1:ad:62:26:aa:96:38:52:5c:
56:3f:fb:e9:83:ad:05:f1:ab:0f:a3:f1:14:f1:c7:
5b:d8:68:2f:ce:c1:a6:4b:bd:58:ac:e8:44:e3:31:
d5:ec:50:40:ca:1a:06:94:7b:bd:6b:14:82:7b:6a:
00:37:d8:1c:8e:b3:ea:87:fc:28:3d:ce:7a:d1:12:
c3:70:63:d6:e9:9c:0a:77:9f:ec:43:4d:d7:86:c6:
ba:7f:3b:8c:a1:2b:60:8f:3c:76:69:fb:f1:58:40:
c7:b4:44:87:37:5f:43:0a:4f:7f:00:b0:2d:3a:e2:
cd:25:f7:f4:0c:df:d0:b9:35:a9:a2:4a:47:e8:e8:
a4:4c:f6:9f:17:ec:7f:b2:78:1e:4a:a4:59:bd:b4:
b3:f2:fa:37:d6:23:7a:0f:e2:8b:d4:a1:95:58:bd:
be:4f:6b:f6:2a:36:1b:34:d2:cd:ba:00:90:93:07:
46:4f:aa:5f:73:a8:d8:3d:a8:c0:a7:f0:c7:f7:1a:
b8:42:c1:33:fd:22:14:4a:92:e1:e8:83:7b:3d:02:
89:21:70:1b:72:fa:7d:15:c1:87:9b:07:64:a6:ed:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:77:8D:EA:9D:0F:A4:13:79:39:6D:73:2D:6E:4F:E0:03:F6:1E:B6
X509v3 Authority Key Identifier:
keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/W3eN6p0PpBN5OW1zLW5P4AP2HrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.207.125.0/24
Signature Algorithm: sha256WithRSAEncryption
56:01:01:eb:f5:8d:e4:6a:31:ad:12:5b:66:33:47:ef:e8:c9:
01:b2:ea:bb:c5:9b:7c:de:e1:44:c5:b6:65:33:29:d0:93:72:
1d:d7:65:46:f0:55:60:b3:9f:e8:0a:da:17:60:30:44:4c:30:
ff:21:83:52:3b:e5:a8:9f:72:68:e4:0e:f2:9f:02:d3:fd:65:
c9:f5:51:4b:91:a7:78:f8:8e:0d:c4:8f:c1:58:3e:1d:ed:c6:
0f:8a:e0:fd:13:fa:9a:38:5b:ab:c8:b2:bd:44:50:d0:96:d9:
5f:8f:36:7a:ce:08:ca:ae:de:a5:1a:66:85:94:cd:dc:96:4f:
4c:9a:8d:71:b9:18:da:a4:04:e0:85:8f:85:0e:4d:91:ca:12:
26:af:41:9f:bc:9a:9a:d4:0f:80:2d:4e:32:25:85:c7:21:64:
c5:88:ba:b5:b1:e0:ae:0a:82:6f:78:61:72:69:65:72:ca:26:
6c:ab:32:41:3c:32:a6:6d:ec:25:39:cf:eb:f8:ad:7f:fd:d9:
d6:da:fa:29:50:f5:1d:a8:d6:ba:0e:03:d5:b9:72:b3:00:63:
b7:df:05:5f:0e:88:df:3c:6e:dc:a5:be:fa:a4:42:92:cf:1a:
eb:93:8f:38:3f:8d:c5:a3:4e:c3:63:bf:6e:b3:c4:b3:94:8d:
09:5a:0e:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYwWXeZMycd+5+h8E5qJLEfsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4
MGIzYWIwHhcNMjMxMTI4MTQzODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjc3OGRlYTlkMGZhNDEzNzkzOTZkNzMyZDZlNGZlMDAzZjYxZWI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+z69ey+Mp+76MjW0hZwpIMJfvJ1
RDyCoFKCejBNfp/dJgrhrWImqpY4UlxWP/vpg60F8asPo/EU8cdb2GgvzsGmS71Y
rOhE4zHV7FBAyhoGlHu9axSCe2oAN9gcjrPqh/woPc560RLDcGPW6ZwKd5/sQ03X
hsa6fzuMoStgjzx2afvxWEDHtESHN19DCk9/ALAtOuLNJff0DN/QuTWpokpH6Oik
TPafF+x/sngeSqRZvbSz8vo31iN6D+KL1KGVWL2+T2v2KjYbNNLNugCQkwdGT6pf
c6jYPajAp/DH9xq4QsEz/SIUSpLh6IN7PQKJIXAbcvp9FcGHmwdkpu1bOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFt3jeqdD6QTeTltcy1uT+AD9h62MB8GA1UdIwQY
MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt
ODhlYmJmOTk3ODBiLzEvVzNlTjZwMFBwQk41T1cxekxXNVA0QVAySHJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi
LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc99MA0G
CSqGSIb3DQEBCwUAA4IBAQBWAQHr9Y3kajGtEltmM0fv6MkBsuq7xZt83uFExbZl
MynQk3Id12VG8FVgs5/oCtoXYDBETDD/IYNSO+Won3Jo5A7ynwLT/WXJ9VFLkad4
+I4NxI/BWD4d7cYPiuD9E/qaOFuryLK9RFDQltlfjzZ6zgjKrt6lGmaFlM3clk9M
mo1xuRjapATghY+FDk2RyhImr0GfvJqa1A+ALU4yJYXHIWTFiLq1seCuCoJveGFy
aWVyyiZsqzJBPDKmbewlOc/r+K1//dnW2vopUPUdqNa6DgPVuXKzAGO33wVfDojf
PG7cpb76pEKSzxrrk484P43Fo07DY79us8SzlI0JWg4f
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:31:51 2024 by rpki-client on console-ams.rpki-client.org