Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/RWVP35mmp04JuCvZdiqDBwqKDLE.roa
File: RWVP35mmp04JuCvZdiqDBwqKDLE.roa (raw, json)
Hash identifier: 1GwTnex3B+RD5XRCg7baeKsCnTBdP6yuZCX+fdRWiUE=
Subject key identifier: 45:65:4F:DF:99:A6:A7:4E:09:B8:2B:D9:76:2A:83:07:0A:8A:0C:B1
Certificate issuer: /CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Certificate serial: 01856C25EB2642A789182157F6FF8FB50400
Authority key identifier: 5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/RWVP35mmp04JuCvZdiqDBwqKDLE.roa
Signing time: Sun 01 Jan 2023 07:05:02 +0000
ROA not before: Sun 01 Jan 2023 07:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208703
IP address blocks: 185.41.220.0/24 maxlen: 24
185.41.223.0/24 maxlen: 24
185.41.222.0/24 maxlen: 24
185.41.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:eb:26:42:a7:89:18:21:57:f6:ff:8f:b5:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b673422eff7e41c5e06d78e529f491f59150ff9
Validity
Not Before: Jan 1 07:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45654fdf99a6a74e09b82bd9762a83070a8a0cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ef:3d:13:01:a4:d3:01:5b:f7:b4:7c:c3:15:
ee:7c:33:ce:a7:78:92:5d:de:05:af:6d:00:79:6e:
4d:17:de:89:16:6e:61:41:55:c2:f3:1f:1f:ee:fb:
36:eb:da:e2:a5:b6:cf:e8:b7:e1:74:0b:d2:50:93:
56:29:c9:12:13:35:ef:2e:05:f2:cb:e2:da:7e:ac:
00:93:8e:5f:5e:cd:ea:49:fa:49:2d:5d:37:18:d4:
80:cd:1c:35:52:de:dc:7f:18:7e:92:ea:da:d8:09:
ba:86:2a:99:43:0c:59:c2:7c:ad:0a:16:d3:13:2f:
94:40:01:77:46:95:8a:c5:26:7f:8b:38:89:ba:61:
18:54:5e:28:0d:08:01:89:89:90:15:78:16:6f:6e:
80:ff:98:21:aa:18:38:43:c3:ae:c6:e6:4c:73:ce:
42:9f:49:f3:58:b7:c8:fb:7e:80:40:34:fd:c1:fe:
ac:65:0a:53:b0:8d:1c:2d:61:96:b3:83:c0:63:0c:
a9:7a:42:20:11:a3:87:ab:0b:96:b5:e5:55:18:0e:
4d:f8:0d:5f:4b:2c:c4:06:55:89:e8:ef:5f:11:20:
70:9b:54:5b:5a:dd:9a:e4:19:a3:30:ed:00:98:f8:
d0:9a:6f:8b:7c:9c:79:10:ba:a7:21:a6:8d:4f:e9:
11:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:4F:DF:99:A6:A7:4E:09:B8:2B:D9:76:2A:83:07:0A:8A:0C:B1
X509v3 Authority Key Identifier:
keyid:5B:67:34:22:EF:F7:E4:1C:5E:06:D7:8E:52:9F:49:1F:59:15:0F:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2c0Iu_35BxeBteOUp9JH1kVD_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/RWVP35mmp04JuCvZdiqDBwqKDLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c7d22b-2147-4336-9009-f9355fd98b6b/1/W2c0Iu_35BxeBteOUp9JH1kVD_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.41.220.0/22
Signature Algorithm: sha256WithRSAEncryption
63:83:dd:53:7a:d3:de:24:48:4e:8f:26:b6:11:95:7a:4f:ee:
e0:80:ab:d1:d5:bd:4b:5b:be:84:4b:f2:d8:7a:7b:17:f0:7d:
84:69:fb:b9:6b:10:45:00:1a:a4:c3:fa:9c:9c:83:af:aa:79:
16:a7:c7:5b:b1:02:43:cd:2a:e8:19:ef:ac:e5:60:22:73:38:
0a:df:e8:be:b5:a8:8d:cd:11:52:af:10:5a:2d:3b:9d:c7:55:
2e:68:0e:d7:47:cd:9a:e7:1d:0b:c1:3b:8a:2b:c8:02:2b:31:
67:74:b3:01:fa:1b:12:68:18:ee:a5:79:8d:52:44:01:a0:da:
29:13:59:d5:65:57:07:c8:da:cc:ed:b5:a7:52:d7:6e:8a:fd:
9f:43:f9:f1:6b:21:1c:83:92:52:10:67:d9:46:de:99:b4:4e:
3c:3d:73:52:32:b4:a9:fd:70:fd:eb:3e:69:e0:0c:1c:56:0c:
00:bc:c4:79:e7:e8:87:d5:b2:69:d8:2a:c3:13:3f:77:e5:88:
5c:19:de:12:8a:51:a2:02:e3:47:2f:bc:e6:81:bf:76:0c:2a:
91:bc:bd:18:72:4c:8b:54:d5:95:42:94:c0:a7:5b:f5:08:ae:
fc:7b:c5:03:b0:62:80:aa:ec:74:b0:52:a1:8c:1b:27:98:7b:
c3:48:b4:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsJesmQqeJGCFX9v+PtQQAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNjczNDIyZWZmN2U0MWM1ZTA2ZDc4ZTUyOWY0OTFmNTkx
NTBmZjkwHhcNMjMwMTAxMDcwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTY1NGZkZjk5YTZhNzRlMDliODJiZDk3NjJhODMwNzBhOGEwY2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+89EwGk0wFb97R8wxXufDPOp3iS
Xd4Fr20AeW5NF96JFm5hQVXC8x8f7vs269ripbbP6LfhdAvSUJNWKckSEzXvLgXy
y+LafqwAk45fXs3qSfpJLV03GNSAzRw1Ut7cfxh+kura2Am6hiqZQwxZwnytChbT
Ey+UQAF3RpWKxSZ/iziJumEYVF4oDQgBiYmQFXgWb26A/5ghqhg4Q8OuxuZMc85C
n0nzWLfI+36AQDT9wf6sZQpTsI0cLWGWs4PAYwypekIgEaOHqwuWteVVGA5N+A1f
SyzEBlWJ6O9fESBwm1RbWt2a5BmjMO0AmPjQmm+LfJx5ELqnIaaNT+kRywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEVlT9+ZpqdOCbgr2XYqgwcKigyxMB8GA1UdIwQY
MBaAFFtnNCLv9+QcXgbXjlKfSR9ZFQ/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9jN2QyMmItMjE0Ny00MzM2LTkwMDkt
ZjkzNTVmZDk4YjZiLzEvUldWUDM1bW1wMDRKdUN2WmRpcURCd3FLRExFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9jN2QyMmItMjE0Ny00MzM2LTkwMDktZjkzNTVmZDk4YjZi
LzEvVzJjMEl1XzM1QnhlQnRlT1VwOUpIMWtWRF9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSncMA0G
CSqGSIb3DQEBCwUAA4IBAQBjg91TetPeJEhOjya2EZV6T+7ggKvR1b1LW76ES/LY
ensX8H2Eafu5axBFABqkw/qcnIOvqnkWp8dbsQJDzSroGe+s5WAiczgK3+i+taiN
zRFSrxBaLTudx1UuaA7XR82a5x0LwTuKK8gCKzFndLMB+hsSaBjupXmNUkQBoNop
E1nVZVcHyNrM7bWnUtduiv2fQ/nxayEcg5JSEGfZRt6ZtE48PXNSMrSp/XD96z5p
4AwcVgwAvMR55+iH1bJp2CrDEz935YhcGd4SilGiAuNHL7zmgb92DCqRvL0YckyL
VNWVQpTAp1v1CK78e8UDsGKAqux0sFKhjBsnmHvDSLQr
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:07 2024 by rpki-client on console-fra.rpki-client.org