Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ww19i20nPbjIwdH4Q8xcGUbncrA.roa
File: ww19i20nPbjIwdH4Q8xcGUbncrA.roa (raw, json)
Hash identifier: mKePAv9ihRDSfYK89H1H1xEsxyjxby4KZJ2i/zJErXc=
Subject key identifier: C3:0D:7D:8B:6D:27:3D:B8:C8:C1:D1:F8:43:CC:5C:19:46:E7:72:B0
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0188DFCAE5B46CDD6A4C07CFC5193F51B81B
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ww19i20nPbjIwdH4Q8xcGUbncrA.roa
Signing time: Wed 21 Jun 2023 21:09:56 +0000
ROA not before: Wed 21 Jun 2023 21:09:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 91.226.57.0/24 maxlen: 24
89.251.24.0/24 maxlen: 24
89.251.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 11:27:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:df:ca:e5:b4:6c:dd:6a:4c:07:cf:c5:19:3f:51:b8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jun 21 21:09:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c30d7d8b6d273db8c8c1d1f843cc5c1946e772b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:8b:bf:d6:f4:01:ec:ee:aa:18:b9:7d:c2:
08:2f:20:f9:33:69:68:9c:67:df:7f:b4:21:d7:e4:
73:f6:8c:16:89:27:3c:51:88:86:bb:26:5e:1b:83:
bb:a6:4a:48:04:e8:42:94:e7:45:d5:a2:a0:f4:38:
f8:23:a0:c3:32:93:f0:cf:60:5d:a1:7b:2d:47:16:
d7:0c:d9:e2:63:d1:56:b2:dd:23:a9:d8:0d:2f:1b:
0d:39:31:c5:9c:d7:fc:a0:2f:4a:fc:f9:99:b6:2d:
ee:6c:12:27:0c:a4:9d:3c:40:31:c7:91:e9:7b:32:
ee:33:da:6d:28:58:11:af:2f:93:5b:d4:18:c5:18:
ff:42:a3:5c:cf:20:6f:53:4a:16:54:08:90:87:41:
08:80:20:50:36:13:d9:46:92:75:d0:84:d4:d9:40:
8b:6a:c2:ff:e6:56:5b:3a:0b:19:19:0d:35:b2:9a:
37:75:32:18:46:84:5e:d2:d7:e5:5a:66:7c:71:99:
6b:ec:4d:4c:59:c3:34:a0:38:80:c7:91:22:42:1a:
52:08:b5:9d:ec:a1:c3:e3:dc:60:b2:0c:ad:9a:40:
c7:e4:1c:51:24:ce:4c:a8:11:a2:5c:f8:99:06:6e:
b2:2f:84:07:2f:c5:98:2c:c4:8e:3a:e6:49:a0:26:
3a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:7D:8B:6D:27:3D:B8:C8:C1:D1:F8:43:CC:5C:19:46:E7:72:B0
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/ww19i20nPbjIwdH4Q8xcGUbncrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.251.24.0/24
89.251.27.0/24
91.226.57.0/24
Signature Algorithm: sha256WithRSAEncryption
76:56:37:fa:83:a0:bf:3f:3a:5b:69:9a:35:2e:3e:5d:24:db:
43:8d:41:89:b6:3d:71:f8:e4:d0:cc:4d:7a:60:63:e9:61:13:
6e:fc:b7:bb:41:fe:69:54:c4:b4:7f:84:39:70:52:f0:2e:78:
fe:e7:19:85:51:38:ae:f0:34:48:a7:95:dc:3b:de:e8:c6:ec:
c3:ff:4e:c6:c0:5e:63:9f:5f:ef:da:f5:13:77:36:14:63:a7:
cb:c6:45:a8:71:1a:ef:70:28:4a:5a:27:af:5f:82:5d:4d:cd:
a9:9c:98:98:70:aa:fa:73:15:2f:6b:71:b5:cb:22:60:b5:8f:
ce:f0:8a:f6:82:d9:ae:b6:88:01:81:5d:38:03:c6:7d:c9:a8:
f8:b2:43:c8:eb:25:06:b5:00:37:77:e8:1b:74:4a:d3:48:d7:
ce:25:60:64:b2:69:a9:91:dd:ef:28:95:16:18:2d:47:38:36:
05:12:c7:48:0c:9a:26:69:01:50:97:fa:62:8e:18:5e:14:a8:
87:2c:07:57:ac:2a:5a:c7:24:f8:0f:fa:53:d7:bd:7e:d7:6a:
b0:6b:6e:33:1c:61:94:f5:74:73:5a:8b:35:67:56:57:2c:43:
30:55:cc:8b:07:0e:35:a3:dc:a4:0a:53:68:88:0f:e8:50:4d:
c5:62:20:54
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYjfyuW0bN1qTAfPxRk/UbgbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjMwNjIxMjEwOTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMzBkN2Q4YjZkMjczZGI4YzhjMWQxZjg0M2NjNWMxOTQ2ZTc3MmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtKLv9b0Aezuqhi5fcIILyD5M2lo
nGfff7Qh1+Rz9owWiSc8UYiGuyZeG4O7pkpIBOhClOdF1aKg9Dj4I6DDMpPwz2Bd
oXstRxbXDNniY9FWst0jqdgNLxsNOTHFnNf8oC9K/PmZti3ubBInDKSdPEAxx5Hp
ezLuM9ptKFgRry+TW9QYxRj/QqNczyBvU0oWVAiQh0EIgCBQNhPZRpJ10ITU2UCL
asL/5lZbOgsZGQ01spo3dTIYRoRe0tflWmZ8cZlr7E1MWcM0oDiAx5EiQhpSCLWd
7KHD49xgsgytmkDH5BxRJM5MqBGiXPiZBm6yL4QHL8WYLMSOOuZJoCY6jwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMMNfYttJz24yMHR+EPMXBlG53KwMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvd3cxOWkyMG5QYmpJd2RINFE4eGNHVWJuY3JBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAWfsYAwQA
WfsbAwQAW+I5MA0GCSqGSIb3DQEBCwUAA4IBAQB2Vjf6g6C/PzpbaZo1Lj5dJNtD
jUGJtj1x+OTQzE16YGPpYRNu/Le7Qf5pVMS0f4Q5cFLwLnj+5xmFUTiu8DRIp5Xc
O97oxuzD/07GwF5jn1/v2vUTdzYUY6fLxkWocRrvcChKWievX4JdTc2pnJiYcKr6
cxUva3G1yyJgtY/O8Ir2gtmutogBgV04A8Z9yaj4skPI6yUGtQA3d+gbdErTSNfO
JWBksmmpkd3vKJUWGC1HODYFEsdIDJomaQFQl/pijhheFKiHLAdXrCpaxyT4D/pT
171+12qwa24zHGGU9XRzWos1Z1ZXLEMwVcyLBw41o9ykClNoiA/oUE3FYiBU
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org