Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/WHUXnNXaY9VsAj4JHIQPXrqvqDQ.roa
File: WHUXnNXaY9VsAj4JHIQPXrqvqDQ.roa (raw, json)
Hash identifier: KE2S4UP8jaOTHdxvowJ6ZPKOrhQLMCW+fCZKN+ORdMY=
Subject key identifier: 58:75:17:9C:D5:DA:63:D5:6C:02:3E:09:1C:84:0F:5E:BA:AF:A8:34
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 0188735E2D9517361C94C8575A5813C15A0C
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/WHUXnNXaY9VsAj4JHIQPXrqvqDQ.roa
Signing time: Wed 31 May 2023 19:52:11 +0000
ROA not before: Wed 31 May 2023 19:52:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34225
IP address blocks: 185.48.92.0/22 maxlen: 22
193.138.164.0/22 maxlen: 22
91.184.32.0/20 maxlen: 20
2a01:198::/32 maxlen: 32
2001:67c:20e0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:73:5e:2d:95:17:36:1c:94:c8:57:5a:58:13:c1:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: May 31 19:52:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5875179cd5da63d56c023e091c840f5ebaafa834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:67:87:06:c7:37:4e:6c:1f:a9:9d:b1:13:c0:
9d:7a:71:67:03:72:61:fc:c6:3d:75:7d:e1:7d:54:
f1:33:57:b9:bb:69:cb:c2:34:a6:d6:d2:61:60:03:
5e:99:05:dc:13:98:4a:5c:6f:a8:bb:76:ca:4d:32:
ec:22:a1:37:95:7f:57:5b:f1:1b:e4:81:be:fd:88:
4a:1d:59:27:a6:dd:ce:46:d9:86:79:59:b0:66:9b:
2e:85:44:a1:ea:73:b7:54:56:0f:6c:a7:74:d1:52:
51:1e:7d:6c:35:a7:44:05:3b:89:48:f6:6c:68:0c:
e0:78:91:87:98:f5:a4:55:76:30:74:e2:aa:9b:ff:
78:9b:d1:9b:ad:3d:3a:81:6b:d2:02:e1:0d:05:e2:
88:3b:32:e8:af:a9:5f:75:e8:1e:a5:4c:c1:15:79:
ce:03:d3:e4:06:68:8b:20:7b:62:0b:64:f7:df:9c:
67:de:9c:af:b5:f2:5c:75:32:33:ae:b1:75:3f:6d:
60:47:a4:34:ab:25:76:02:1b:0c:11:f6:b4:70:58:
0c:78:a1:49:62:09:c2:14:67:b9:3d:c4:18:62:ae:
78:b4:bb:a1:5c:86:3b:f3:eb:e2:05:e6:44:58:8c:
5e:da:27:d9:0c:6c:a2:50:f1:69:2e:c4:a5:e1:a8:
f7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:75:17:9C:D5:DA:63:D5:6C:02:3E:09:1C:84:0F:5E:BA:AF:A8:34
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/WHUXnNXaY9VsAj4JHIQPXrqvqDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.32.0/20
185.48.92.0/22
193.138.164.0/22
IPv6:
2001:67c:20e0::/48
2a01:198::/32
Signature Algorithm: sha256WithRSAEncryption
53:77:83:76:fc:56:cf:da:35:0a:1c:02:ec:9e:45:14:81:28:
7b:5d:8d:d1:31:65:12:4d:66:37:47:15:c4:e6:ff:38:75:b0:
09:f0:49:0c:ef:0f:1b:98:89:d6:30:37:f7:c8:c3:eb:02:ae:
ce:61:b8:10:f4:90:b2:71:e2:c3:68:f4:4e:3a:8e:39:77:d9:
7e:78:7a:63:f8:68:3f:6d:e3:ac:58:d4:34:5f:95:35:4f:ef:
74:40:d3:71:f9:a5:48:72:1f:09:aa:5b:1a:d5:32:93:c4:f9:
54:c9:13:c5:b1:bd:ce:66:f4:e2:13:db:59:8f:90:8e:44:66:
1c:8b:00:19:ea:da:ef:85:7a:1d:58:71:f2:1d:0a:19:ca:75:
63:0e:9b:e6:57:b4:41:8e:51:e3:f7:5f:a9:51:97:d3:60:8c:
cd:0f:2d:5e:a3:33:87:7f:92:13:4a:79:32:c4:1f:86:02:fa:
22:d8:ad:fa:e2:60:1b:cb:e7:85:bc:7f:e4:d7:a8:76:d7:92:
f6:74:5a:9f:04:62:bc:a1:01:7f:9a:88:10:a1:46:e7:17:2e:
cb:de:21:c6:9d:4d:b4:96:a1:86:ab:32:58:bd:c3:ee:2a:ab:
11:d4:45:f3:c6:ec:cb:85:09:3b:26:5f:3f:14:42:f3:a4:22:
a6:05:e9:5f
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYhzXi2VFzYclMhXWlgTwVoMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NGRmMmY4ZjVhMTNjNjQ1MzY4OTE0ZTNkYmU0MmEyNGEz
NmRhNWQwHhcNMjMwNTMxMTk1MjExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODc1MTc5Y2Q1ZGE2M2Q1NmMwMjNlMDkxYzg0MGY1ZWJhYWZhODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGeHBsc3TmwfqZ2xE8CdenFnA3Jh
/MY9dX3hfVTxM1e5u2nLwjSm1tJhYANemQXcE5hKXG+ou3bKTTLsIqE3lX9XW/Eb
5IG+/YhKHVknpt3ORtmGeVmwZpsuhUSh6nO3VFYPbKd00VJRHn1sNadEBTuJSPZs
aAzgeJGHmPWkVXYwdOKqm/94m9GbrT06gWvSAuENBeKIOzLor6lfdegepUzBFXnO
A9PkBmiLIHtiC2T335xn3pyvtfJcdTIzrrF1P21gR6Q0qyV2AhsMEfa0cFgMeKFJ
YgnCFGe5PcQYYq54tLuhXIY78+viBeZEWIxe2ifZDGyiUPFpLsSl4aj3YQIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFFh1F5zV2mPVbAI+CRyED166r6g0MB8GA1UdIwQY
MBaAFPlN8vj1oTxkU2iRTj2+QqJKNtpdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1VM3ktUFdoUEdSVGFKRk9QYjVDb2tvMjJsMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRk
LTY2YmRmZmE4YmRjMS8xL1dIVVhuTlhhWTlWc0FqNEpISVFQWHJxdnFEUS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmIvZmQ4MDc0LTIyM2EtNGI1Mi1iZWRkLTY2YmRmZmE4YmRj
MS8xLzEtVTN5LVBXaFBHUlRhSkZPUGI1Q29rbzIybDAuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwQwYIKwYBBQUHAQcBAf8ENDAyMBgEAgABMBIDBARbuCAD
BAK5MFwDBALBiqQwFgQCAAIwEAMHACABBnwg4AMFACoBAZgwDQYJKoZIhvcNAQEL
BQADggEBAFN3g3b8Vs/aNQocAuyeRRSBKHtdjdExZRJNZjdHFcTm/zh1sAnwSQzv
DxuYidYwN/fIw+sCrs5huBD0kLJx4sNo9E46jjl32X54emP4aD9t46xY1DRflTVP
73RA03H5pUhyHwmqWxrVMpPE+VTJE8Wxvc5m9OIT21mPkI5EZhyLABnq2u+Feh1Y
cfIdChnKdWMOm+ZXtEGOUeP3X6lRl9NgjM0PLV6jM4d/khNKeTLEH4YC+iLYrfri
YBvL54W8f+TXqHbXkvZ0Wp8EYryhAX+aiBChRucXLsveIcadTbSWoYarMli9w+4q
qxHURfPG7MuFCTsmXz8UQvOkIqYF6V8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:45 2024 by rpki-client on console-fra.rpki-client.org