Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/WL_Tv2ePFrnj_PWskyH3r6RyeoY.roa
File: WL_Tv2ePFrnj_PWskyH3r6RyeoY.roa (raw, json)
Hash identifier: aeXomY1sHgmUNP5n1ohFq2G9G5PJwZh09wSJwmVe3oo=
Subject key identifier: 58:BF:D3:BF:67:8F:16:B9:E3:FC:F5:AC:93:21:F7:AF:A4:72:7A:86
Certificate issuer: /CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Certificate serial: 019228A5D2452F1624E97E2A69AC08C98EC5
Authority key identifier: 17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/WL_Tv2ePFrnj_PWskyH3r6RyeoY.roa
Signing time: Wed 25 Sep 2024 10:06:48 +0000
ROA not before: Wed 25 Sep 2024 10:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 86.110.52.0/24 maxlen: 24
86.110.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 18:03:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:a5:d2:45:2f:16:24:e9:7e:2a:69:ac:08:c9:8e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17067977efd14bc89fb0daba03bb0f600fbb0184
Validity
Not Before: Sep 25 10:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58bfd3bf678f16b9e3fcf5ac9321f7afa4727a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ea:ee:8f:50:4e:ce:d6:6d:83:b8:90:7b:7e:
70:a3:cd:21:f0:0d:b4:aa:5d:f0:56:c7:39:24:47:
ba:3a:06:b2:8c:f9:e7:0f:b7:e7:99:8a:15:31:0a:
51:f5:41:f5:15:d4:fe:34:38:85:4b:e6:a9:37:de:
af:1a:1d:1c:0f:75:88:38:f5:df:e2:c4:2d:18:93:
54:a8:a9:2a:e0:f7:aa:c0:38:8f:ba:bd:00:8e:76:
ff:41:2b:86:77:19:72:2e:85:c3:8a:6a:1b:d8:87:
96:ff:92:d6:cd:2f:f6:10:6e:b0:1d:e8:08:91:36:
04:35:2d:03:30:1a:79:0c:2f:86:df:b9:88:bd:65:
c1:ef:81:30:b9:b6:f8:bf:87:3d:61:d1:93:35:60:
55:fe:11:3c:90:ba:25:02:9b:f8:4c:8c:38:8b:5c:
3f:9d:f2:b5:44:9a:23:be:83:27:4b:88:dc:be:10:
73:b2:74:d4:59:26:9d:44:89:a7:cb:d2:1e:0f:ee:
fe:1a:e9:bc:00:89:b7:a2:c9:7a:d2:17:da:3d:d3:
dd:50:f7:68:0a:68:d5:38:fd:3a:2b:87:a1:4a:c5:
86:eb:82:29:82:47:e9:59:fb:09:69:de:cb:84:10:
fe:b9:76:c2:7b:5d:17:98:19:dc:e6:1a:03:f1:ef:
ab:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BF:D3:BF:67:8F:16:B9:E3:FC:F5:AC:93:21:F7:AF:A4:72:7A:86
X509v3 Authority Key Identifier:
keyid:17:06:79:77:EF:D1:4B:C8:9F:B0:DA:BA:03:BB:0F:60:0F:BB:01:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/WL_Tv2ePFrnj_PWskyH3r6RyeoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/FwZ5d-_RS8ifsNq6A7sPYA-7AYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:db:dc:6c:d3:34:60:bd:96:6f:b7:8e:7c:65:a6:83:69:ff:
26:ce:97:b3:b9:90:b6:c0:dd:43:92:c8:2f:9a:c3:18:f7:4b:
06:dd:f7:2c:a2:02:93:eb:2a:99:cf:19:02:08:c4:c5:bb:65:
52:21:20:9b:67:2c:9c:7c:d7:e1:fe:7a:12:d7:80:ed:f1:9d:
53:89:ed:58:3a:f1:ac:be:68:f3:51:5c:5d:5c:fc:b3:c3:a1:
18:cb:43:6b:72:3e:cb:b9:36:ed:9f:c4:65:96:8c:31:d1:ed:
51:a8:25:74:67:a9:68:d7:9b:08:c9:cd:52:0d:7c:eb:ff:5f:
89:44:b2:0c:e9:3d:48:d3:d7:9f:c5:76:1e:51:50:be:d2:df:
76:46:5c:60:f5:d9:c8:96:7b:bc:df:ae:aa:75:bb:f4:34:9e:
24:60:b0:61:de:74:dd:e7:cd:50:a0:ef:69:16:8a:84:c5:60:
34:7b:86:11:40:73:c1:88:92:be:c4:98:65:d9:67:fd:3d:e7:
d6:16:d0:8b:98:c5:fc:2c:c9:7f:63:b6:06:c6:00:56:f3:13:
31:a8:b4:e2:bf:d4:e3:f8:2e:a2:13:aa:b3:36:46:a6:d6:09:
fe:49:de:2e:12:88:e9:f5:98:99:5f:67:c6:01:47:34:8d:48:
7c:19:11:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZIopdJFLxYk6X4qaawIyY7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MDY3OTc3ZWZkMTRiYzg5ZmIwZGFiYTAzYmIwZjYwMGZi
YjAxODQwHhcNMjQwOTI1MTAwNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJmZDNiZjY3OGYxNmI5ZTNmY2Y1YWM5MzIxZjdhZmE0NzI3YTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+ruj1BOztZtg7iQe35wo80h8A20
ql3wVsc5JEe6OgayjPnnD7fnmYoVMQpR9UH1FdT+NDiFS+apN96vGh0cD3WIOPXf
4sQtGJNUqKkq4PeqwDiPur0Ajnb/QSuGdxlyLoXDimob2IeW/5LWzS/2EG6wHegI
kTYENS0DMBp5DC+G37mIvWXB74Ewubb4v4c9YdGTNWBV/hE8kLolApv4TIw4i1w/
nfK1RJojvoMnS4jcvhBzsnTUWSadRImny9IeD+7+Gum8AIm3osl60hfaPdPdUPdo
CmjVOP06K4ehSsWG64IpgkfpWfsJad7LhBD+uXbCe10XmBnc5hoD8e+rHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFi/079njxa54/z1rJMh96+kcnqGMB8GA1UdIwQY
MBaAFBcGeXfv0UvIn7DaugO7D2APuwGEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvV0xfVHYyZVBGcm5qX1BXc2t5SDNyNlJ5ZW9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvRndaNWQtX1JTOGlmc05xNkE3c1BZQS03QVlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm40MA0G
CSqGSIb3DQEBCwUAA4IBAQAe29xs0zRgvZZvt458ZaaDaf8mzpezuZC2wN1Dksgv
msMY90sG3fcsogKT6yqZzxkCCMTFu2VSISCbZyycfNfh/noS14Dt8Z1Tie1YOvGs
vmjzUVxdXPyzw6EYy0Nrcj7LuTbtn8Rllowx0e1RqCV0Z6lo15sIyc1SDXzr/1+J
RLIM6T1I09efxXYeUVC+0t92Rlxg9dnIlnu8366qdbv0NJ4kYLBh3nTd581QoO9p
FoqExWA0e4YRQHPBiJK+xJhl2Wf9PefWFtCLmMX8LMl/Y7YGxgBW8xMxqLTiv9Tj
+C6iE6qzNkam1gn+Sd4uEojp9ZiZX2fGAUc0jUh8GRGZ
-----END CERTIFICATE-----
Generated at Mon Oct 14 19:24:49 2024 by rpki-client on console-fra.rpki-client.org