Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa
File: Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa (raw, json)
Hash identifier: MuZ1ZOwmqrX+6hdbqM7V06om55KbG04Sl8wkHxg5r+w=
Subject key identifier: 5B:08:BC:57:72:18:CE:33:67:47:6B:0A:D4:8E:9D:4B:8D:AC:D0:43
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018794ABD426A7566F1D948A9043B1B3BBC5
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa
Signing time: Tue 18 Apr 2023 14:01:41 +0000
ROA not before: Tue 18 Apr 2023 14:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 85.202.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:94:ab:d4:26:a7:56:6f:1d:94:8a:90:43:b1:b3:bb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Apr 18 14:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b08bc577218ce3367476b0ad48e9d4b8dacd043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:07:6f:4e:33:3d:9d:c7:88:c7:13:58:7e:
7c:2c:a1:b4:45:de:43:19:e4:4f:b0:8f:d1:d2:ef:
94:3c:9d:59:4c:39:04:9d:a2:31:0d:87:c0:ce:e1:
79:6d:ba:ca:c8:2b:35:08:7f:cb:e6:c3:39:1f:d1:
ff:1f:18:f6:80:e5:0e:ea:33:db:e9:0d:42:e9:76:
ca:de:fe:25:c4:27:3f:70:9e:cf:22:2b:12:cf:d3:
ec:46:f0:9d:da:ed:68:39:8e:c3:60:65:3d:e4:07:
20:63:2f:10:8d:8c:23:7c:e7:59:8d:ab:37:47:c5:
fb:d0:15:4d:96:48:fb:60:42:2e:2b:0d:0a:ac:2a:
3c:94:9d:f5:19:19:6d:29:64:eb:66:a2:a4:10:1d:
ab:83:2e:dc:79:75:63:33:e5:83:37:37:78:98:5d:
f4:bc:7f:de:19:f2:65:44:eb:27:f6:cb:72:aa:5d:
05:29:6c:d4:04:32:d3:15:a4:1b:b6:6b:47:47:b9:
a5:7d:b5:96:4a:d5:e6:6b:db:07:63:06:05:f4:05:
80:58:a4:78:27:e4:5f:2c:1b:e2:e7:1b:2b:f5:2f:
4d:09:fd:0f:24:34:8d:0c:da:65:c2:e1:6b:a6:1d:
a4:b6:76:43:40:2d:ab:f8:d1:dc:f4:54:94:c2:1a:
88:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:BC:57:72:18:CE:33:67:47:6B:0A:D4:8E:9D:4B:8D:AC:D0:43
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Wwi8V3IYzjNnR2sK1I6dS42s0EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:16:d8:01:5c:6d:3d:81:bd:17:fc:05:ec:11:56:af:f4:de:
7b:5c:cd:d0:73:51:1f:16:66:ab:21:76:b0:ab:06:18:83:09:
4a:54:b4:a0:9f:4d:2b:f4:35:c3:cf:66:af:b5:6d:f6:25:6c:
d8:cc:ec:68:c4:66:2f:35:29:d0:84:5f:5d:ef:b2:4a:2d:74:
c8:ce:af:2b:a3:a2:c8:73:50:75:93:e4:c1:d3:04:19:52:a6:
da:c3:c7:66:e1:50:db:4d:7b:d6:a0:fe:b5:e7:26:fa:4c:41:
fe:a9:b8:be:57:3d:4b:d6:fc:05:b2:25:93:61:d3:08:ea:cd:
b5:cd:d3:d7:ff:4f:ed:ad:d5:92:ef:22:f7:0a:20:23:70:16:
74:9a:72:c2:8a:2d:3e:b0:5f:50:71:09:36:86:b3:ef:81:99:
9e:74:36:a1:9f:3c:77:b0:3f:14:2b:77:83:4a:b7:6f:30:91:
49:bd:f3:67:6e:76:ce:7e:e2:a4:b3:c9:98:37:d4:f3:d3:e2:
3e:0c:21:e3:80:fc:ac:9f:0b:6f:a6:f2:d5:9d:87:ed:cc:22:
84:14:d9:fa:bd:6b:f3:65:58:c7:57:db:dd:be:9f:15:1d:8f:
59:f2:37:f0:6c:b9:07:26:11:e4:5a:07:a0:02:0f:23:b7:09:
46:4f:28:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeUq9Qmp1ZvHZSKkEOxs7vFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwNDE4MTQwMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjA4YmM1NzcyMThjZTMzNjc0NzZiMGFkNDhlOWQ0YjhkYWNkMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbEHb04zPZ3HiMcTWH58LKG0Rd5D
GeRPsI/R0u+UPJ1ZTDkEnaIxDYfAzuF5bbrKyCs1CH/L5sM5H9H/Hxj2gOUO6jPb
6Q1C6XbK3v4lxCc/cJ7PIisSz9PsRvCd2u1oOY7DYGU95AcgYy8QjYwjfOdZjas3
R8X70BVNlkj7YEIuKw0KrCo8lJ31GRltKWTrZqKkEB2rgy7ceXVjM+WDNzd4mF30
vH/eGfJlROsn9styql0FKWzUBDLTFaQbtmtHR7mlfbWWStXma9sHYwYF9AWAWKR4
J+RfLBvi5xsr9S9NCf0PJDSNDNplwuFrph2ktnZDQC2r+NHc9FSUwhqI0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFsIvFdyGM4zZ0drCtSOnUuNrNBDMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvV3dpOFYzSVl6ak5uUjJzSzFJNmRTNDJzMEVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVcqjMA0G
CSqGSIb3DQEBCwUAA4IBAQCLFtgBXG09gb0X/AXsEVav9N57XM3Qc1EfFmarIXaw
qwYYgwlKVLSgn00r9DXDz2avtW32JWzYzOxoxGYvNSnQhF9d77JKLXTIzq8ro6LI
c1B1k+TB0wQZUqbaw8dm4VDbTXvWoP615yb6TEH+qbi+Vz1L1vwFsiWTYdMI6s21
zdPX/0/trdWS7yL3CiAjcBZ0mnLCii0+sF9QcQk2hrPvgZmedDahnzx3sD8UK3eD
SrdvMJFJvfNnbnbOfuKks8mYN9Tz0+I+DCHjgPysnwtvpvLVnYftzCKEFNn6vWvz
ZVjHV9vdvp8VHY9Z8jfwbLkHJhHkWgegAg8jtwlGTyjp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org