Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WYeV7K41Byv3Lm27NvMOFLQBT3Y.roa
File: WYeV7K41Byv3Lm27NvMOFLQBT3Y.roa (raw, json)
Hash identifier: xpyHsfLQoazQ+WnOuFZcP8qKMkLpoW4eM+TK7lYD7ck=
Subject key identifier: 59:87:95:EC:AE:35:07:2B:F7:2E:6D:BB:36:F3:0E:14:B4:01:4F:76
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 01856DAF544AC67AE82DD77A86906D32A29A
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WYeV7K41Byv3Lm27NvMOFLQBT3Y.roa
Signing time: Sun 01 Jan 2023 14:14:44 +0000
ROA not before: Sun 01 Jan 2023 14:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6453
IP address blocks: 89.148.0.0/18 maxlen: 18
185.165.176.0/22 maxlen: 22
88.201.37.0/24 maxlen: 24
84.255.128.0/18 maxlen: 18
77.69.128.0/17 maxlen: 17
82.194.32.0/19 maxlen: 19
77.69.148.0/24 maxlen: 24
88.201.99.0/24 maxlen: 24
88.201.0.0/17 maxlen: 17
193.188.96.0/19 maxlen: 19
217.17.224.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:af:54:4a:c6:7a:e8:2d:d7:7a:86:90:6d:32:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Jan 1 14:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=598795ecae35072bf72e6dbb36f30e14b4014f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:9e:3b:f7:31:f1:21:3c:e5:d8:6b:61:19:
37:32:21:32:85:ee:d0:26:f4:6f:0a:17:82:8c:68:
1a:6f:7b:ce:08:84:14:d3:2e:e7:39:d0:e3:08:8d:
55:f3:f4:39:f4:95:84:52:93:70:79:a1:fd:4e:60:
3b:4b:18:07:2d:98:08:31:a9:26:26:ea:71:97:70:
75:6c:12:6d:26:1c:c8:dd:c3:bb:d8:75:d7:d7:d7:
7a:2e:7e:c2:08:89:5e:d7:9e:1c:e2:eb:61:68:9e:
a3:24:90:f9:c1:86:03:ed:a9:bd:4d:02:e9:17:57:
ff:34:60:16:02:6a:ea:5d:3c:72:1f:fc:ba:7c:8d:
a4:ed:8d:0f:fd:55:02:90:fd:46:cc:11:05:7a:34:
12:bb:6f:c3:ae:30:69:e5:14:e3:65:a5:40:87:33:
0a:09:52:fd:96:78:1b:d3:96:1c:96:61:44:6a:5b:
3e:04:f6:e7:67:75:56:8b:24:b1:bd:2c:9a:20:c5:
6a:2d:a8:24:9c:8f:33:cd:eb:c8:28:6e:89:45:8c:
2f:bc:d9:de:62:1f:4e:2b:32:3a:4b:93:09:cc:3e:
6a:cc:5a:8f:1b:f7:f5:94:54:1a:ad:d5:37:19:3f:
95:e5:49:f0:55:36:0e:6e:c3:5a:21:8d:7d:c8:a8:
df:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:95:EC:AE:35:07:2B:F7:2E:6D:BB:36:F3:0E:14:B4:01:4F:76
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/WYeV7K41Byv3Lm27NvMOFLQBT3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.69.128.0/17
82.194.32.0/19
84.255.128.0/18
88.201.0.0/17
89.148.0.0/18
185.165.176.0/22
193.188.96.0/19
217.17.224.0/19
Signature Algorithm: sha256WithRSAEncryption
61:43:e5:eb:2d:19:29:a9:bc:81:61:33:f2:b9:35:94:9f:1d:
94:d4:18:47:56:79:5b:7f:f5:3c:03:72:29:39:97:67:f3:2b:
19:04:5a:38:38:96:ac:66:3c:a2:20:a3:2a:e6:9b:1a:e7:ab:
e5:11:12:48:82:1f:f1:5a:76:c0:ec:9a:64:5d:ec:5b:11:36:
70:0f:82:f9:f0:b7:94:b2:8d:c9:4c:03:dd:11:23:c9:ee:0a:
20:9b:3e:dc:8b:3a:dd:06:8a:80:1c:98:16:f3:df:ec:39:25:
f5:cb:b9:cb:78:8b:00:7d:f0:af:d9:90:e1:cd:b8:d6:4d:70:
46:09:3f:ea:94:3b:64:e9:01:1d:21:4e:85:19:7f:6e:aa:af:
c4:8a:ba:cf:76:0f:2b:24:96:42:6d:30:ef:ec:88:bf:ab:64:
fe:ff:ca:8e:a6:f8:43:af:dd:b8:94:b1:94:4d:25:27:4f:74:
b3:c6:7b:50:2e:c3:c9:61:e3:c6:1b:c6:99:3d:15:95:c7:51:
e4:0b:a9:4e:6c:d8:48:2e:a1:cb:f6:e0:a3:65:e7:0b:f8:fa:
f8:81:3e:2b:8f:ff:b7:57:6e:30:35:99:83:e4:0c:1d:00:3d:
09:c5:bb:82:4d:a6:d7:85:61:91:ea:f2:3b:01:6c:d6:18:a7:
24:f7:ca:36
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYVtr1RKxnroLdd6hpBtMqKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi
MzZjNmMwHhcNMjMwMTAxMTQxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTg3OTVlY2FlMzUwNzJiZjcyZTZkYmIzNmYzMGUxNGI0MDE0Zjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNqeO/cx8SE85dhrYRk3MiEyhe7Q
JvRvCheCjGgab3vOCIQU0y7nOdDjCI1V8/Q59JWEUpNweaH9TmA7SxgHLZgIMakm
Jupxl3B1bBJtJhzI3cO72HXX19d6Ln7CCIle154c4uthaJ6jJJD5wYYD7am9TQLp
F1f/NGAWAmrqXTxyH/y6fI2k7Y0P/VUCkP1GzBEFejQSu2/DrjBp5RTjZaVAhzMK
CVL9lngb05YclmFEals+BPbnZ3VWiySxvSyaIMVqLagknI8zzevIKG6JRYwvvNne
Yh9OKzI6S5MJzD5qzFqPG/f1lFQardU3GT+V5UnwVTYObsNaIY19yKjf0wIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFFmHleyuNQcr9y5tuzbzDhS0AU92MB8GA1UdIwQY
MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt
MDc0MDExNWI1YTUyLzEvV1llVjdLNDFCeXYzTG0yN052TU9GTFFCVDNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy
LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQHTUWAAwQF
UsIgAwQGVP+AAwQHWMkAAwQGWZQAAwQCuaWwAwQFwbxgAwQF2RHgMA0GCSqGSIb3
DQEBCwUAA4IBAQBhQ+XrLRkpqbyBYTPyuTWUnx2U1BhHVnlbf/U8A3IpOZdn8ysZ
BFo4OJasZjyiIKMq5psa56vlERJIgh/xWnbA7JpkXexbETZwD4L58LeUso3JTAPd
ESPJ7gogmz7cizrdBoqAHJgW89/sOSX1y7nLeIsAffCv2ZDhzbjWTXBGCT/qlDtk
6QEdIU6FGX9uqq/EirrPdg8rJJZCbTDv7Ii/q2T+/8qOpvhDr924lLGUTSUnT3Sz
xntQLsPJYePGG8aZPRWVx1HkC6lObNhILqHL9uCjZecL+Pr4gT4rj/+3V24wNZmD
5AwdAD0JxbuCTabXhWGR6vI7AWzWGKck98o2
-----END CERTIFICATE-----
Generated at Sun Sep 10 07:40:34 2023 by rpki-client on console-ams.rpki-client.org