Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/wX6n-45uvpcr3R7dENV9EMN2kcU.roa
File: wX6n-45uvpcr3R7dENV9EMN2kcU.roa (raw, json)
Hash identifier: IsAoAPJnT5TsoKZXNLIx9q7mXv4H8GxQFq7aFP9LxfU=
Subject key identifier: C1:7E:A7:FB:8E:6E:BE:97:2B:DD:1E:DD:10:D5:7D:10:C3:76:91:C5
Certificate issuer: /CN=cb4d83a67fb35af88de83c1304c6743a51531361
Certificate serial: 018CCA29E9D30AF3A29AF99506B6A25CEDA6
Authority key identifier: CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/wX6n-45uvpcr3R7dENV9EMN2kcU.roa
Signing time: Tue 02 Jan 2024 12:33:13 +0000
ROA not before: Tue 02 Jan 2024 12:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57219
IP address blocks: 185.144.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 20:40:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e9:d3:0a:f3:a2:9a:f9:95:06:b6:a2:5c:ed:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb4d83a67fb35af88de83c1304c6743a51531361
Validity
Not Before: Jan 2 12:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c17ea7fb8e6ebe972bdd1edd10d57d10c37691c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:31:0a:26:62:ac:93:d8:98:e1:21:13:f0:5f:
f9:98:7e:d3:39:3c:d0:db:9d:49:f2:ef:07:90:2f:
43:d9:ce:f5:1f:c3:06:c0:ff:93:16:f7:b9:1e:80:
29:f1:65:8e:87:9b:59:89:08:f1:6e:3f:43:de:61:
86:81:e0:e6:5f:40:5f:be:38:0e:23:53:6e:33:45:
94:78:dc:a0:25:fe:d3:ec:91:92:a1:61:ea:17:aa:
6f:d2:60:82:e2:0e:7f:27:4d:75:f9:bc:c2:f8:a5:
0b:93:12:bd:5f:5e:14:a2:b4:10:fb:c2:7f:3b:82:
de:b0:02:7b:84:a3:4a:07:e0:de:e2:e2:0f:e5:0a:
0d:c2:70:cf:3c:a6:75:9a:da:61:1a:ad:48:8d:ac:
c3:af:a9:92:6a:94:f8:29:f9:7f:66:12:f4:cb:92:
ee:b7:4b:c9:a5:e9:41:1b:a4:38:cf:51:20:7c:7f:
22:bf:76:fd:c0:64:c8:81:c5:35:69:6b:d0:7d:62:
33:85:5e:b9:c5:ad:a4:20:db:34:0a:d5:e9:76:67:
16:1a:94:32:bd:56:0e:12:b4:1c:b2:3e:ac:f3:db:
57:cb:09:c6:c9:31:50:64:e3:b0:f0:53:51:2d:9e:
85:6d:45:b6:3a:aa:0f:8c:c0:5d:88:38:74:57:64:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7E:A7:FB:8E:6E:BE:97:2B:DD:1E:DD:10:D5:7D:10:C3:76:91:C5
X509v3 Authority Key Identifier:
keyid:CB:4D:83:A6:7F:B3:5A:F8:8D:E8:3C:13:04:C6:74:3A:51:53:13:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y02Dpn-zWviN6DwTBMZ0OlFTE2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/wX6n-45uvpcr3R7dENV9EMN2kcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7e90ac-90cf-4523-8f97-31660c22d19e/1/y02Dpn-zWviN6DwTBMZ0OlFTE2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.113.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8f:5d:ce:c2:b6:e3:1e:30:1d:40:66:82:2a:b4:81:89:4a:
de:3f:fe:b1:8f:6a:ef:94:06:4d:9b:b6:bd:5d:6c:b2:ae:e4:
22:ee:1b:3a:07:60:05:8c:6b:54:9a:30:b8:b0:e2:d2:4f:71:
e3:c5:cf:ae:c6:3f:3f:d5:aa:92:03:8b:bc:f0:8a:fe:52:16:
6b:1e:e8:45:11:89:3d:b9:cc:91:29:4a:62:92:e4:54:48:72:
89:a9:79:10:36:ee:ca:4d:e1:87:bc:41:99:fc:fe:3c:34:dc:
8c:fc:c2:e4:45:b1:a5:e6:b0:7f:eb:f2:05:71:b9:8c:46:de:
37:9d:6b:dd:09:a2:d3:d5:fb:cc:ce:fe:75:6c:7a:99:b9:ed:
02:85:24:61:f4:eb:0f:ce:61:2d:e4:c8:b4:40:e3:af:bc:46:
a5:be:08:00:e2:9a:15:f1:53:93:15:48:66:be:2f:6d:cc:d6:
a4:1d:a8:28:51:70:ff:27:05:f7:62:47:09:72:7e:46:03:c5:
77:b0:42:58:99:6b:34:28:d5:5c:3e:a6:df:48:fc:12:ea:bb:
51:06:b9:48:c8:27:2a:4f:2e:09:46:2d:e9:cf:a7:9e:a1:61:
d0:52:b9:42:9d:40:ed:4e:fc:62:87:a4:85:83:ec:84:de:9a:
ce:da:6e:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKenTCvOimvmVBraiXO2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNGQ4M2E2N2ZiMzVhZjg4ZGU4M2MxMzA0YzY3NDNhNTE1
MzEzNjEwHhcNMjQwMTAyMTIzMzEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTdlYTdmYjhlNmViZTk3MmJkZDFlZGQxMGQ1N2QxMGMzNzY5MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDEKJmKsk9iY4SET8F/5mH7TOTzQ
251J8u8HkC9D2c71H8MGwP+TFve5HoAp8WWOh5tZiQjxbj9D3mGGgeDmX0BfvjgO
I1NuM0WUeNygJf7T7JGSoWHqF6pv0mCC4g5/J011+bzC+KULkxK9X14UorQQ+8J/
O4LesAJ7hKNKB+De4uIP5QoNwnDPPKZ1mtphGq1IjazDr6mSapT4Kfl/ZhL0y5Lu
t0vJpelBG6Q4z1EgfH8iv3b9wGTIgcU1aWvQfWIzhV65xa2kINs0CtXpdmcWGpQy
vVYOErQcsj6s89tXywnGyTFQZOOw8FNRLZ6FbUW2OqoPjMBdiDh0V2RLlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMF+p/uObr6XK90e3RDVfRDDdpHFMB8GA1UdIwQY
MBaAFMtNg6Z/s1r4jeg8EwTGdDpRUxNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTct
MzE2NjBjMjJkMTllLzEvd1g2bi00NXV2cGNyM1I3ZEVOVjlFTU4ya2NVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS83ZTkwYWMtOTBjZi00NTIzLThmOTctMzE2NjBjMjJkMTll
LzEveTAyRHBuLXpXdmlONkR3VEJNWjBPbEZURTJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZBxMA0G
CSqGSIb3DQEBCwUAA4IBAQCDj13OwrbjHjAdQGaCKrSBiUreP/6xj2rvlAZNm7a9
XWyyruQi7hs6B2AFjGtUmjC4sOLST3Hjxc+uxj8/1aqSA4u88Ir+UhZrHuhFEYk9
ucyRKUpikuRUSHKJqXkQNu7KTeGHvEGZ/P48NNyM/MLkRbGl5rB/6/IFcbmMRt43
nWvdCaLT1fvMzv51bHqZue0ChSRh9OsPzmEt5Mi0QOOvvEalvggA4poV8VOTFUhm
vi9tzNakHagoUXD/JwX3YkcJcn5GA8V3sEJYmWs0KNVcPqbfSPwS6rtRBrlIyCcq
Ty4JRi3pz6eeoWHQUrlCnUDtTvxih6SFg+yE3prO2m6e
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:08:19 2025 by rpki-client