Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WgGJgAWO8H9EYTS2_ay2BLiqX_g.roa
File: WgGJgAWO8H9EYTS2_ay2BLiqX_g.roa (raw, json)
Hash identifier: 4TLGS5HEECyp5YKn8D8G8BHwaHQt94Zxe8VyavWRTB0=
Subject key identifier: 5A:01:89:80:05:8E:F0:7F:44:61:34:B6:FD:AC:B6:04:B8:AA:5F:F8
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 0185739004F0F4C4E87E6AC0BCCEF63803E8
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WgGJgAWO8H9EYTS2_ay2BLiqX_g.roa
Signing time: Mon 02 Jan 2023 17:38:16 +0000
ROA not before: Mon 02 Jan 2023 17:38:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209181
IP address blocks: 5.182.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:90:04:f0:f4:c4:e8:7e:6a:c0:bc:ce:f6:38:03:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 2 17:38:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a018980058ef07f446134b6fdacb604b8aa5ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:d9:e7:27:f0:5b:2b:9b:31:12:02:17:f8:77:
39:9a:9c:70:57:61:f2:fd:99:94:58:52:ef:43:9f:
e9:c5:7c:34:95:5d:2f:2e:96:32:cd:eb:e3:98:7c:
0a:54:4d:1a:f1:4b:18:08:7c:67:c2:1d:f4:4c:3f:
60:11:a7:01:08:18:a4:10:fe:6b:78:cb:10:a2:51:
80:97:76:73:83:9d:22:d9:db:c1:4f:b9:e6:a8:bb:
f2:b2:6d:03:9f:fe:7b:6d:24:33:0b:69:ed:87:0f:
9e:a6:4c:98:bb:42:cd:22:04:3c:63:09:62:54:63:
d6:40:66:e2:ea:77:d3:4b:29:20:cd:a9:ec:26:f1:
bd:35:8d:2d:e5:4e:02:53:58:22:bc:fd:9f:01:fb:
80:29:07:03:ac:79:67:8e:55:62:4e:c4:90:d5:39:
92:02:13:56:dd:bd:13:54:85:30:73:2c:f0:ea:73:
10:f3:0d:9f:3d:10:c9:76:a5:9b:8f:9c:80:9b:b0:
d2:09:fa:dd:38:c6:84:0d:e5:e9:6c:8d:bd:58:c7:
79:42:0b:dd:65:08:f9:67:1c:79:7f:24:22:44:7a:
8d:1f:e7:5c:be:a9:60:4c:9c:a7:c4:d7:bb:41:12:
27:9e:80:b6:47:6c:ff:c0:b7:28:5f:6f:12:89:cf:
90:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:89:80:05:8E:F0:7F:44:61:34:B6:FD:AC:B6:04:B8:AA:5F:F8
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/WgGJgAWO8H9EYTS2_ay2BLiqX_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.49.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:2a:07:81:e8:8a:f2:6c:11:1c:be:e8:13:0e:5b:05:2a:e0:
8a:79:4d:dd:2a:ac:3c:2c:9a:dd:d3:5a:58:46:e6:5b:f5:6c:
57:19:48:f2:e7:00:c7:2a:ef:2f:54:76:1e:ed:43:bb:b7:54:
54:27:bf:5a:e6:3e:d7:45:ca:8d:99:8f:38:da:20:3b:34:2a:
59:e5:56:59:8a:f0:b6:af:c6:e4:6d:db:95:6b:18:49:72:7b:
83:4c:14:b6:69:f5:a5:9f:59:23:7e:c4:80:c8:cd:29:de:f5:
20:58:8f:0f:e2:85:e9:16:10:a5:8f:b5:93:40:d2:fb:bb:6a:
db:a9:a7:cb:43:41:dc:05:96:07:c5:88:86:97:97:5e:65:89:
15:2a:f7:7a:07:c9:de:69:ed:cd:7d:3f:0a:76:ca:32:d6:20:
c3:b9:b3:3a:1a:6d:68:2d:a7:b4:09:12:75:bc:6c:0a:cc:32:
a0:a9:16:64:8b:bc:b9:1d:72:7d:03:db:03:b7:66:90:ca:91:
70:74:e9:d6:ee:f9:ae:2e:5f:d4:3c:42:4f:81:46:96:ac:be:
f4:3d:ef:33:07:39:63:a5:85:fe:0f:ef:ca:f2:4b:0e:3c:1a:
2d:69:f4:b9:25:0e:b1:a3:06:c8:79:6c:56:12:55:11:0b:62:
19:0a:0e:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzkATw9MTofmrAvM72OAPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwMTAyMTczODE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTAxODk4MDA1OGVmMDdmNDQ2MTM0YjZmZGFjYjYwNGI4YWE1ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8NnnJ/BbK5sxEgIX+Hc5mpxwV2Hy
/ZmUWFLvQ5/pxXw0lV0vLpYyzevjmHwKVE0a8UsYCHxnwh30TD9gEacBCBikEP5r
eMsQolGAl3Zzg50i2dvBT7nmqLvysm0Dn/57bSQzC2nthw+epkyYu0LNIgQ8Ywli
VGPWQGbi6nfTSykgzansJvG9NY0t5U4CU1givP2fAfuAKQcDrHlnjlViTsSQ1TmS
AhNW3b0TVIUwcyzw6nMQ8w2fPRDJdqWbj5yAm7DSCfrdOMaEDeXpbI29WMd5Qgvd
ZQj5Zxx5fyQiRHqNH+dcvqlgTJynxNe7QRInnoC2R2z/wLcoX28Sic+Q3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFoBiYAFjvB/RGE0tv2stgS4ql/4MB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvV2dHSmdBV084SDlFWVRTMl9heTJCTGlxWF9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbYxMA0G
CSqGSIb3DQEBCwUAA4IBAQBqKgeB6IrybBEcvugTDlsFKuCKeU3dKqw8LJrd01pY
RuZb9WxXGUjy5wDHKu8vVHYe7UO7t1RUJ79a5j7XRcqNmY842iA7NCpZ5VZZivC2
r8bkbduVaxhJcnuDTBS2afWln1kjfsSAyM0p3vUgWI8P4oXpFhClj7WTQNL7u2rb
qafLQ0HcBZYHxYiGl5deZYkVKvd6B8neae3NfT8Kdsoy1iDDubM6Gm1oLae0CRJ1
vGwKzDKgqRZki7y5HXJ9A9sDt2aQypFwdOnW7vmuLl/UPEJPgUaWrL70Pe8zBzlj
pYX+D+/K8ksOPBotafS5JQ6xowbIeWxWElURC2IZCg45
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:20 2024 by rpki-client on console-fra.rpki-client.org