Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WsO_HB_8zzHZC37Zzizw-yRp2f4.roa
File: WsO_HB_8zzHZC37Zzizw-yRp2f4.roa (raw, json)
Hash identifier: Tu+RBDGeprAvYzEI9xiSgvxFrZ9dLpzTDaNpUj1NQnc=
Subject key identifier: 5A:C3:BF:1C:1F:FC:CF:31:D9:0B:7E:D9:CE:2C:F0:FB:24:69:D9:FE
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018A6F87A930247CA0451023F487A3F4BE1D
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WsO_HB_8zzHZC37Zzizw-yRp2f4.roa
Signing time: Thu 07 Sep 2023 12:04:36 +0000
ROA not before: Thu 07 Sep 2023 12:04:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203446
IP address blocks: 45.90.96.0/24 maxlen: 24
45.134.39.0/24 maxlen: 24
45.13.226.0/24 maxlen: 24
2.56.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 18 Sep 2023 07:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:87:a9:30:24:7c:a0:45:10:23:f4:87:a3:f4:be:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 7 12:04:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ac3bf1c1ffccf31d90b7ed9ce2cf0fb2469d9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:b6:3f:74:04:ef:db:4f:4d:6f:05:11:f6:
13:d9:c1:27:e6:5d:87:f4:23:88:54:43:c8:78:53:
da:6e:36:68:4b:bc:9e:ee:07:45:c9:99:a0:5f:6a:
fa:1b:a3:b9:86:20:28:65:45:38:ce:7f:71:f8:90:
76:9e:95:fa:17:f9:c3:a1:98:1f:cd:30:b1:e5:58:
17:fa:98:29:d9:34:a3:6a:48:7a:43:4a:c7:1d:f7:
c3:e9:64:1b:1e:f2:ad:ec:c0:ff:fc:66:36:c7:9d:
cb:9b:31:1d:d1:02:1d:00:82:d3:d9:94:e6:a3:6e:
6d:df:52:18:b3:52:c7:49:e9:22:10:da:b5:64:b0:
ef:17:a5:a1:f6:da:71:a5:d9:36:03:84:d5:b5:d6:
1c:7a:a8:aa:fa:bc:ef:18:58:70:3e:9c:a7:c7:56:
04:00:4c:74:df:58:6c:4c:e0:47:f2:20:94:de:cf:
37:1e:b4:de:7a:79:4f:f8:37:f1:e2:7d:38:a4:51:
50:cf:e1:1b:60:73:92:dd:25:67:91:93:5f:69:b2:
ee:2c:5c:fa:9c:01:c7:2e:70:78:83:5e:13:5b:98:
50:ad:75:05:24:d5:9c:96:9a:53:0c:03:68:de:10:
77:fd:f6:da:bb:da:94:16:32:a4:f5:f7:51:4f:79:
1e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C3:BF:1C:1F:FC:CF:31:D9:0B:7E:D9:CE:2C:F0:FB:24:69:D9:FE
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/WsO_HB_8zzHZC37Zzizw-yRp2f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.246.0/24
45.13.226.0/24
45.90.96.0/24
45.134.39.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a1:aa:45:f3:18:c9:41:ff:eb:88:95:10:71:83:14:0f:b3:
e0:05:27:46:a9:a8:f1:30:1d:08:b9:e6:55:a2:ba:a9:2a:f3:
ad:d6:9e:eb:cb:41:24:68:6d:d4:2d:5b:c7:96:2c:23:50:8c:
6d:58:f8:13:d8:e6:39:6a:52:b8:38:a1:3b:d8:de:26:88:14:
8e:ff:55:57:7b:7a:1d:88:3e:d7:73:3d:fa:eb:03:65:b9:27:
aa:6f:6d:30:f1:33:dc:12:e1:41:3e:e7:03:dc:4b:22:f3:44:
97:91:aa:34:31:d8:57:1b:76:98:97:a5:5e:3e:04:0d:fe:a8:
70:99:4f:40:b9:79:15:29:75:3a:3a:77:05:ef:e1:db:05:9a:
19:0e:e9:68:64:12:5f:e8:74:48:4d:c3:d6:58:2f:79:4a:46:
f4:2c:0b:b2:b3:b6:bb:a9:cc:a5:53:00:6b:ce:a0:76:da:b4:
8f:20:16:e7:62:3a:90:b8:25:da:41:d9:70:8f:11:e0:c3:8e:
bf:a7:93:d9:2b:71:ee:7b:f6:96:a4:1c:96:34:f2:41:bf:13:
c5:fb:dc:c2:f1:46:f2:66:82:e2:23:8f:74:e2:d5:81:42:39:
9c:4e:86:90:11:8e:3d:ff:29:83:54:75:80:ec:af:89:34:f6:
ed:e6:62:4d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYpvh6kwJHygRRAj9Iej9L4dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwOTA3MTIwNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWMzYmYxYzFmZmNjZjMxZDkwYjdlZDljZTJjZjBmYjI0NjlkOWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2C2P3QE79tPTW8FEfYT2cEn5l2H
9COIVEPIeFPabjZoS7ye7gdFyZmgX2r6G6O5hiAoZUU4zn9x+JB2npX6F/nDoZgf
zTCx5VgX+pgp2TSjakh6Q0rHHffD6WQbHvKt7MD//GY2x53LmzEd0QIdAILT2ZTm
o25t31IYs1LHSekiENq1ZLDvF6Wh9tpxpdk2A4TVtdYceqiq+rzvGFhwPpynx1YE
AEx031hsTOBH8iCU3s83HrTeenlP+Dfx4n04pFFQz+EbYHOS3SVnkZNfabLuLFz6
nAHHLnB4g14TW5hQrXUFJNWclppTDANo3hB3/fbau9qUFjKk9fdRT3kesQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFrDvxwf/M8x2Qt+2c4s8Pskadn+MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvV3NPX0hCXzh6ekhaQzM3WnppencteVJwMmY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAAjj2AwQA
LQ3iAwQALVpgAwQALYYnMA0GCSqGSIb3DQEBCwUAA4IBAQAooapF8xjJQf/riJUQ
cYMUD7PgBSdGqajxMB0IueZVorqpKvOt1p7ry0EkaG3ULVvHliwjUIxtWPgT2OY5
alK4OKE72N4miBSO/1VXe3odiD7Xcz366wNluSeqb20w8TPcEuFBPucD3Esi80SX
kao0MdhXG3aYl6VePgQN/qhwmU9AuXkVKXU6OncF7+HbBZoZDuloZBJf6HRITcPW
WC95Skb0LAuys7a7qcylUwBrzqB22rSPIBbnYjqQuCXaQdlwjxHgw46/p5PZK3Hu
e/aWpByWNPJBvxPF+9zC8UbyZoLiI4904tWBQjmcToaQEY49/ymDVHWA7K+JNPbt
5mJN
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org