Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/w_Ysxu8iWQJwUQLyKx6A8pfSGzQ.roa
File: w_Ysxu8iWQJwUQLyKx6A8pfSGzQ.roa (raw, json)
Hash identifier: VrJGKjjKN4UkZgsvVqgusFOrqunip/V2UtCL24Jlwno=
Subject key identifier: C3:F6:2C:C6:EF:22:59:02:70:51:02:F2:2B:1E:80:F2:97:D2:1B:34
Certificate issuer: /CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Certificate serial: 01856D2F217328E16A34BFB2A6B40C644330
Authority key identifier: 83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/w_Ysxu8iWQJwUQLyKx6A8pfSGzQ.roa
Signing time: Sun 01 Jan 2023 11:54:43 +0000
ROA not before: Sun 01 Jan 2023 11:54:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212944
IP address blocks: 185.163.51.0/24 maxlen: 24
89.35.78.0/23 maxlen: 24
2a07:dfc0::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:2f:21:73:28:e1:6a:34:bf:b2:a6:b4:0c:64:43:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8309f81737d6f17e7c1ad58849aff71c50064f04
Validity
Not Before: Jan 1 11:54:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c3f62cc6ef225902705102f22b1e80f297d21b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:da:21:97:cd:71:e9:b9:37:fe:42:3b:1e:
42:11:18:72:ac:d5:2c:13:64:ed:16:23:20:de:13:
e2:b8:bd:8f:3d:f4:39:1d:07:59:7f:77:db:47:cc:
8e:25:09:2a:2c:a9:d1:48:93:f8:36:e4:0d:b2:c5:
d1:d6:bc:96:fb:a3:42:57:37:fc:e5:26:ec:11:23:
57:97:b6:51:55:f8:ad:87:00:ec:9b:60:c3:14:a1:
82:13:e3:49:fb:83:c6:69:29:7b:ed:cf:35:fb:1e:
32:59:38:0f:ed:0e:cb:cc:88:da:2e:18:29:2f:18:
64:b3:bf:76:fb:bb:67:fe:e2:c3:88:7e:47:5d:fa:
54:77:b9:ce:09:54:48:4a:21:b5:30:2e:28:0e:64:
c6:7b:33:e2:05:4e:92:2a:92:53:c5:21:ac:09:3b:
83:ea:68:31:24:f9:f8:ca:a4:a5:42:57:f7:28:f0:
f7:c9:76:5f:7b:74:33:de:2d:42:a9:97:ce:2c:0f:
11:0e:a6:ad:1a:7c:59:3c:4b:75:45:4f:fc:ab:76:
5b:e1:a9:9b:42:56:e5:e7:3d:f6:ae:1f:99:64:45:
46:45:ea:92:35:b7:ff:f6:e3:38:f7:50:73:d8:ab:
da:04:6a:ec:7d:8a:4d:ff:de:ab:a6:2c:a2:25:bb:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:2C:C6:EF:22:59:02:70:51:02:F2:2B:1E:80:F2:97:D2:1B:34
X509v3 Authority Key Identifier:
keyid:83:09:F8:17:37:D6:F1:7E:7C:1A:D5:88:49:AF:F7:1C:50:06:4F:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gwn4FzfW8X58GtWISa_3HFAGTwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/w_Ysxu8iWQJwUQLyKx6A8pfSGzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3a0026-2847-4276-96ba-1747378e6594/1/gwn4FzfW8X58GtWISa_3HFAGTwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.78.0/23
185.163.51.0/24
IPv6:
2a07:dfc0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:c5:96:1e:a8:a0:02:db:3c:bb:e4:b1:ce:ab:dc:e0:2b:40:
92:bd:21:dd:48:1a:8c:01:a6:71:a0:ff:b5:54:9d:e4:58:08:
1d:ea:6c:df:af:95:95:b6:c9:90:82:ae:72:a6:b9:e2:1f:b7:
6c:0d:ed:f5:2a:6a:c5:78:07:7b:9e:82:1f:57:eb:f4:6f:fa:
40:73:fc:5d:7e:33:a6:90:cc:36:0c:6c:b4:28:bb:da:eb:50:
a8:7a:a2:55:75:b7:92:36:d2:dc:f4:d3:ee:43:87:80:7b:69:
05:15:4a:6a:c4:0a:10:d8:3d:34:cf:e8:71:68:36:8a:75:c4:
04:96:15:e9:8b:e1:aa:70:4f:3a:48:68:09:79:63:d2:99:d9:
c9:a6:83:1b:14:9f:4f:7b:83:72:a3:99:be:85:00:76:b5:67:
ae:69:15:0d:60:a2:da:b1:17:9d:3d:5a:6b:b6:39:aa:9e:68:
19:b6:ea:b9:21:48:d8:60:9d:d6:52:81:c6:42:fa:43:3c:f2:
b6:05:cf:ae:8a:30:99:04:23:5b:49:3f:8a:4a:91:65:26:95:
0d:9a:f3:df:ed:e6:0a:03:df:ae:0f:05:c3:81:8f:87:f8:45:
18:b9:d3:9b:0c:54:bb:62:cc:91:4c:5e:24:25:f9:32:a5:2c:
41:cc:78:3d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVtLyFzKOFqNL+yprQMZEMwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzMDlmODE3MzdkNmYxN2U3YzFhZDU4ODQ5YWZmNzFjNTAw
NjRmMDQwHhcNMjMwMTAxMTE1NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Y2MmNjNmVmMjI1OTAyNzA1MTAyZjIyYjFlODBmMjk3ZDIxYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1raIZfNcem5N/5COx5CERhyrNUs
E2TtFiMg3hPiuL2PPfQ5HQdZf3fbR8yOJQkqLKnRSJP4NuQNssXR1ryW+6NCVzf8
5SbsESNXl7ZRVfithwDsm2DDFKGCE+NJ+4PGaSl77c81+x4yWTgP7Q7LzIjaLhgp
Lxhks792+7tn/uLDiH5HXfpUd7nOCVRISiG1MC4oDmTGezPiBU6SKpJTxSGsCTuD
6mgxJPn4yqSlQlf3KPD3yXZfe3Qz3i1CqZfOLA8RDqatGnxZPEt1RU/8q3Zb4amb
Qlbl5z32rh+ZZEVGReqSNbf/9uM491Bz2KvaBGrsfYpN/96rpiyiJbuN3QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMP2LMbvIlkCcFEC8isegPKX0hs0MB8GA1UdIwQY
MBaAFIMJ+Bc31vF+fBrViEmv9xxQBk8EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYTAwMjYtMjg0Ny00Mjc2LTk2YmEt
MTc0NzM3OGU2NTk0LzEvd19Zc3h1OGlXUUp3VVFMeUt4NkE4cGZTR3pRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zYTAwMjYtMjg0Ny00Mjc2LTk2YmEtMTc0NzM3OGU2NTk0
LzEvZ3duNEZ6Zlc4WDU4R3RXSVNhXzNIRkFHVHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBWSNOAwQA
uaMzMA0EAgACMAcDBQAqB9/AMA0GCSqGSIb3DQEBCwUAA4IBAQBvxZYeqKAC2zy7
5LHOq9zgK0CSvSHdSBqMAaZxoP+1VJ3kWAgd6mzfr5WVtsmQgq5yprniH7dsDe31
KmrFeAd7noIfV+v0b/pAc/xdfjOmkMw2DGy0KLva61CoeqJVdbeSNtLc9NPuQ4eA
e2kFFUpqxAoQ2D00z+hxaDaKdcQElhXpi+GqcE86SGgJeWPSmdnJpoMbFJ9Pe4Ny
o5m+hQB2tWeuaRUNYKLasRedPVprtjmqnmgZtuq5IUjYYJ3WUoHGQvpDPPK2Bc+u
ijCZBCNbST+KSpFlJpUNmvPf7eYKA9+uDwXDgY+H+EUYudObDFS7YsyRTF4kJfky
pSxBzHg9
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:32 2024 by rpki-client on console-ams.rpki-client.org