Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WdTjV3eyHhkDXXb6jlt-TTeDJ5g.roa
File: WdTjV3eyHhkDXXb6jlt-TTeDJ5g.roa (raw, json)
Hash identifier: fwCHEPg8aQHf31+2kFYB1yDrx2+AqynLPzTbp/Ly2d4=
Subject key identifier: 59:D4:E3:57:77:B2:1E:19:03:5D:76:FA:8E:5B:7E:4D:37:83:27:98
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B8047A83CC5D4C9F794E6884FED8D2CA1
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WdTjV3eyHhkDXXb6jlt-TTeDJ5g.roa
Signing time: Mon 30 Oct 2023 11:11:01 +0000
ROA not before: Mon 30 Oct 2023 11:11:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207508
IP address blocks: 45.138.183.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:47:a8:3c:c5:d4:c9:f7:94:e6:88:4f:ed:8d:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 30 11:11:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59d4e35777b21e19035d76fa8e5b7e4d37832798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:56:7c:85:be:55:0c:89:4b:af:79:d5:5c:fe:
76:2d:2e:2c:72:a0:b3:f1:54:b4:ae:7e:9f:db:29:
56:bd:df:1a:bf:f9:43:d6:8c:69:9e:7f:f4:90:f7:
84:b2:21:b5:62:e1:9a:ac:d3:dd:b0:46:ac:82:a0:
9c:b5:64:15:aa:c2:bd:39:a9:21:33:17:02:90:ad:
26:c8:80:c0:20:e5:10:2e:06:e7:c4:f5:47:c3:40:
5a:d2:b1:fe:9e:54:c1:5f:02:f8:46:2f:6e:c8:65:
25:90:d2:e6:62:00:51:8f:54:4a:41:d0:ce:be:91:
87:6d:32:45:ed:e5:c5:53:0d:03:95:4c:98:94:f9:
09:71:58:4b:92:db:92:57:ab:13:0d:92:b7:cd:f7:
d0:4c:7a:88:7b:e4:12:bb:6b:ba:74:7b:02:a9:3f:
7e:cb:f8:1a:c4:fc:4e:8a:26:bb:6a:c4:52:ca:50:
0e:69:a8:cc:a0:d8:da:3e:90:35:92:66:5f:be:fc:
ad:5c:a0:f5:17:b9:ac:e1:59:fa:7b:58:08:ed:b5:
75:ea:db:7c:01:01:33:c0:05:35:74:40:76:74:4f:
5d:a9:17:b4:94:c9:c1:cb:ea:49:79:63:3a:51:75:
46:cf:f3:7f:0b:48:13:4a:1f:18:41:75:f9:04:39:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:E3:57:77:B2:1E:19:03:5D:76:FA:8E:5B:7E:4D:37:83:27:98
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WdTjV3eyHhkDXXb6jlt-TTeDJ5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.183.0/24
Signature Algorithm: sha256WithRSAEncryption
59:6d:83:e7:5e:3a:00:df:64:e0:0b:bb:ed:d4:6c:66:99:c2:
7d:e4:82:74:c8:c8:5f:80:2d:5a:8a:f1:ae:f3:40:63:94:c0:
be:55:f5:ce:a8:6c:cf:39:49:46:c6:b9:4b:d1:28:61:13:a7:
50:6c:dd:18:e6:26:37:2a:12:d4:8c:f0:52:de:6c:ab:f0:d0:
7f:e8:6d:c0:b1:2a:84:d0:8b:6b:fb:d6:9f:e7:fd:85:44:96:
be:44:23:c8:01:da:81:d1:21:52:33:43:7f:68:3d:01:8d:31:
61:06:01:8d:c9:ae:af:af:24:c6:05:47:5d:39:10:61:03:fa:
3c:b6:b5:d6:0e:28:ae:9f:51:34:21:9d:fa:94:56:b9:3f:d6:
8e:8a:ef:52:36:50:b0:95:3e:ae:f1:38:2f:98:0c:d9:4a:f6:
2c:cd:dc:e9:32:4b:6e:4d:e8:b8:94:95:3d:8a:a5:53:02:07:
9d:ed:f2:c7:9a:26:eb:12:0a:25:65:6c:63:5f:2f:1d:2c:bd:
a8:8a:f2:8d:31:b2:6b:f8:e5:46:cd:58:59:d6:76:7b:19:05:
25:de:a1:8d:2d:a5:f9:ce:dd:f6:60:f6:2b:92:1f:87:1d:d9:
fb:22:4a:b1:09:c3:c3:81:a2:91:35:6b:0f:31:cf:db:07:cd:
85:52:1e:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuAR6g8xdTJ95TmiE/tjSyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMDMwMTExMTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWQ0ZTM1Nzc3YjIxZTE5MDM1ZDc2ZmE4ZTViN2U0ZDM3ODMyNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVZ8hb5VDIlLr3nVXP52LS4scqCz
8VS0rn6f2ylWvd8av/lD1oxpnn/0kPeEsiG1YuGarNPdsEasgqCctWQVqsK9Oakh
MxcCkK0myIDAIOUQLgbnxPVHw0Ba0rH+nlTBXwL4Ri9uyGUlkNLmYgBRj1RKQdDO
vpGHbTJF7eXFUw0DlUyYlPkJcVhLktuSV6sTDZK3zffQTHqIe+QSu2u6dHsCqT9+
y/gaxPxOiia7asRSylAOaajMoNjaPpA1kmZfvvytXKD1F7ms4Vn6e1gI7bV16tt8
AQEzwAU1dEB2dE9dqRe0lMnBy+pJeWM6UXVGz/N/C0gTSh8YQXX5BDluswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnU41d3sh4ZA112+o5bfk03gyeYMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvV2RUalYzZXlIaGtEWFhiNmpsdC1UVGVESjVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYq3MA0G
CSqGSIb3DQEBCwUAA4IBAQBZbYPnXjoA32TgC7vt1GxmmcJ95IJ0yMhfgC1aivGu
80BjlMC+VfXOqGzPOUlGxrlL0ShhE6dQbN0Y5iY3KhLUjPBS3myr8NB/6G3AsSqE
0Itr+9af5/2FRJa+RCPIAdqB0SFSM0N/aD0BjTFhBgGNya6vryTGBUddORBhA/o8
trXWDiiun1E0IZ36lFa5P9aOiu9SNlCwlT6u8TgvmAzZSvYszdzpMktuTei4lJU9
iqVTAged7fLHmibrEgolZWxjXy8dLL2oivKNMbJr+OVGzVhZ1nZ7GQUl3qGNLaX5
zt32YPYrkh+HHdn7IkqxCcPDgaKRNWsPMc/bB82FUh4T
-----END CERTIFICATE-----
Generated at Thu Nov 2 08:27:38 2023 by rpki-client on console-fra.rpki-client.org