Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WEPoTuZ_o1OB4tG2pq3KVRhSJSo.roa
File: WEPoTuZ_o1OB4tG2pq3KVRhSJSo.roa (raw, json)
Hash identifier: G8z+76Z9+NdjgnvnV905AhTjHPjIYZVBPqt3ABNd2RQ=
Subject key identifier: 58:43:E8:4E:E6:7F:A3:53:81:E2:D1:B6:A6:AD:CA:55:18:52:25:2A
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018BF350D04B494D048BEF0527C59D99987C
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WEPoTuZ_o1OB4tG2pq3KVRhSJSo.roa
Signing time: Tue 21 Nov 2023 19:17:21 +0000
ROA not before: Tue 21 Nov 2023 19:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 45.151.97.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f3:50:d0:4b:49:4d:04:8b:ef:05:27:c5:9d:99:98:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Nov 21 19:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5843e84ee67fa35381e2d1b6a6adca551852252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7d:bf:77:fa:99:f4:f8:86:8b:9b:b0:c7:9e:
0e:bb:80:2a:26:7f:6e:89:ca:7c:fc:98:9c:f7:82:
1c:9b:40:af:e8:db:23:bc:f5:35:6f:2c:e0:d2:7b:
8b:ae:5c:2d:08:c5:91:31:f7:b0:0d:ef:e0:90:92:
f3:39:25:28:0c:54:5e:55:5f:28:5e:63:04:8d:af:
cd:9d:f7:36:02:52:0c:da:5c:6e:10:38:07:08:62:
42:4b:61:30:3f:58:50:1d:51:d5:a8:ff:92:b8:95:
5a:b6:96:12:d5:24:29:06:e9:f7:27:61:f3:04:0a:
4f:c9:49:76:97:8f:f7:63:55:d0:43:56:30:15:cf:
ea:88:4f:f2:63:13:2d:6f:24:b0:be:60:21:81:0a:
8d:78:c1:ab:fb:61:13:b6:7a:38:b6:f6:5a:3f:da:
96:ac:3b:9c:b8:f6:f4:51:65:09:4f:5c:bf:a3:31:
83:85:8d:bb:ec:d3:ba:91:34:00:e8:be:5a:f2:64:
f0:85:46:f2:8a:1f:ef:4c:d1:ef:fb:46:df:9c:bc:
2c:55:c0:41:62:f7:cc:65:e7:2d:a9:45:27:bf:22:
2d:91:40:09:f6:d7:b9:08:67:1b:76:07:cd:41:33:
4a:dd:86:e6:b0:97:82:4f:62:db:ec:b6:79:54:b0:
8f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:43:E8:4E:E6:7F:A3:53:81:E2:D1:B6:A6:AD:CA:55:18:52:25:2A
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/WEPoTuZ_o1OB4tG2pq3KVRhSJSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0/24
Signature Algorithm: sha256WithRSAEncryption
99:18:3f:35:0d:41:7d:20:3f:0b:14:84:7a:3b:91:e0:f7:f8:
04:7a:dd:fe:a1:4a:ef:00:02:86:53:6e:63:74:88:a0:52:4c:
67:06:85:52:0d:42:90:78:73:59:4e:78:0c:a7:ba:f0:88:5c:
df:82:08:b5:78:71:5f:c7:92:3c:d4:14:b5:f7:15:42:6b:92:
27:9c:c3:46:d5:e6:16:0e:a2:4f:6e:20:e9:31:65:23:08:b0:
bc:7e:ac:3e:d1:a7:d6:8c:6e:87:30:67:b7:96:dd:e6:48:51:
68:85:da:1b:33:8a:07:ec:af:d3:02:c8:8e:95:c0:6d:90:7e:
56:23:7f:52:7c:63:22:32:ad:b0:59:5d:24:a5:37:af:75:da:
b4:52:a6:25:a0:99:ad:9c:ae:b9:1b:2f:8f:4f:c3:23:17:7c:
69:da:2e:9e:eb:bf:93:af:c3:85:2e:c0:ee:2f:d1:cc:1e:d7:
19:c3:83:ee:0f:b4:d9:19:5f:48:2f:e4:74:1e:c4:e2:ca:88:
df:61:2a:e1:b4:87:a2:c6:99:04:ab:17:72:1e:0b:cc:98:39:
f1:a1:c4:83:b0:05:42:a6:61:1b:1a:ba:d0:f8:03:b9:37:50:
14:9f:25:00:c7:fa:22:ec:bd:ac:5b:8b:53:33:73:6d:ac:a1:
34:20:41:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvzUNBLSU0Ei+8FJ8WdmZh8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMxMTIxMTkxNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODQzZTg0ZWU2N2ZhMzUzODFlMmQxYjZhNmFkY2E1NTE4NTIyNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4n2/d/qZ9PiGi5uwx54Ou4AqJn9u
icp8/Jic94Icm0Cv6NsjvPU1byzg0nuLrlwtCMWRMfewDe/gkJLzOSUoDFReVV8o
XmMEja/Nnfc2AlIM2lxuEDgHCGJCS2EwP1hQHVHVqP+SuJVatpYS1SQpBun3J2Hz
BApPyUl2l4/3Y1XQQ1YwFc/qiE/yYxMtbySwvmAhgQqNeMGr+2ETtno4tvZaP9qW
rDucuPb0UWUJT1y/ozGDhY277NO6kTQA6L5a8mTwhUbyih/vTNHv+0bfnLwsVcBB
YvfMZectqUUnvyItkUAJ9te5CGcbdgfNQTNK3YbmsJeCT2Lb7LZ5VLCPZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFhD6E7mf6NTgeLRtqatylUYUiUqMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvV0VQb1R1Wl9vMU9CNHRHMnBxM0tWUmhTSlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdhMA0G
CSqGSIb3DQEBCwUAA4IBAQCZGD81DUF9ID8LFIR6O5Hg9/gEet3+oUrvAAKGU25j
dIigUkxnBoVSDUKQeHNZTngMp7rwiFzfggi1eHFfx5I81BS19xVCa5InnMNG1eYW
DqJPbiDpMWUjCLC8fqw+0afWjG6HMGe3lt3mSFFohdobM4oH7K/TAsiOlcBtkH5W
I39SfGMiMq2wWV0kpTevddq0UqYloJmtnK65Gy+PT8MjF3xp2i6e67+Tr8OFLsDu
L9HMHtcZw4PuD7TZGV9IL+R0HsTiyojfYSrhtIeixpkEqxdyHgvMmDnxocSDsAVC
pmEbGrrQ+AO5N1AUnyUAx/oi7L2sW4tTM3NtrKE0IEGz
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:33 2024 by rpki-client on console-fra.rpki-client.org