Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/wLf6PZtiXndOdzlCXxKsD1Ub5Bg.roa
File: wLf6PZtiXndOdzlCXxKsD1Ub5Bg.roa (raw, json)
Hash identifier: h4B2/kfnxcVMBOsK+OnmtgwSg4OL3dhZMdvN0D/7Fpg=
Subject key identifier: C0:B7:FA:3D:9B:62:5E:77:4E:77:39:42:5F:12:AC:0F:55:1B:E4:18
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018570672123169A9CF39713ED4F502D442D
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/wLf6PZtiXndOdzlCXxKsD1Ub5Bg.roa
Signing time: Mon 02 Jan 2023 02:54:44 +0000
ROA not before: Mon 02 Jan 2023 02:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
94.137.72.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:21:23:16:9a:9c:f3:97:13:ed:4f:50:2d:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b7fa3d9b625e774e7739425f12ac0f551be418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:1f:35:ae:82:59:2e:79:82:e7:65:d7:1b:
8c:6e:c7:38:99:c5:fc:23:dd:47:58:aa:05:91:f7:
7f:07:c1:14:7c:57:e2:1e:0b:2f:f6:9f:78:e9:9b:
9f:a7:e4:01:de:76:44:ec:38:88:c9:0c:ba:20:55:
1c:80:ee:92:90:b1:8a:9b:a1:b5:f1:11:9a:35:9b:
38:81:d8:f3:84:23:75:6d:f5:77:16:f8:b3:24:ef:
ce:de:07:d8:fb:8c:ca:c2:2b:0e:5d:92:1d:f6:84:
f0:47:e0:32:14:21:ce:3c:ce:9a:d1:fd:6f:10:76:
c3:6e:9c:31:0d:58:5f:e2:e6:a5:53:8a:82:ae:3e:
fe:16:3e:e8:6b:e0:be:6d:7c:d4:4b:b3:ce:5c:97:
e9:76:0a:29:76:ac:05:15:ae:3f:61:67:c9:17:d2:
1f:30:55:71:f2:d5:b0:03:5a:8b:52:67:c3:c8:79:
00:ae:b5:5a:83:69:5b:37:6a:c6:14:a2:d3:4e:ae:
52:f9:a3:07:1d:03:04:0c:99:4a:0c:ad:48:98:85:
9d:ee:60:36:ef:7f:0c:5b:a3:96:54:ab:2b:25:31:
c8:8e:ad:6d:c6:5d:0a:71:a1:2d:38:05:62:e9:e1:
d0:3c:82:18:9e:70:98:87:a5:67:d8:06:74:4c:ec:
97:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B7:FA:3D:9B:62:5E:77:4E:77:39:42:5F:12:AC:0F:55:1B:E4:18
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/wLf6PZtiXndOdzlCXxKsD1Ub5Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.72.0/24
94.137.74.0/24
94.137.89.0-94.137.90.255
94.137.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f0:05:ab:3c:4b:a6:19:c6:5d:39:da:56:73:9b:48:54:9e:
64:e1:f5:f2:90:66:97:89:b1:9a:68:75:ed:20:f9:5a:af:f0:
a1:fa:51:04:b0:b2:1a:9b:6c:57:58:b1:31:c9:0a:5e:1a:e4:
f6:42:ea:1f:c5:a5:08:f8:e6:f0:8a:37:d5:a8:b0:80:ed:93:
31:3d:6e:68:92:ef:ed:5a:85:ba:67:a8:af:7e:52:af:d4:99:
dc:43:56:70:07:90:02:ed:52:8a:f8:a5:8b:49:db:d1:17:33:
02:53:9f:8f:e5:ac:0d:3f:5a:93:8e:cf:3a:08:bb:eb:7c:e1:
2a:83:a1:c8:af:49:d8:f1:c3:03:07:07:22:7c:5d:70:60:c6:
cd:76:70:a9:2c:66:32:a2:31:fe:c9:be:1c:51:b0:f4:ba:27:
e1:be:0a:ab:d8:4f:af:86:e4:6b:4a:9d:6d:60:1f:90:17:a7:
ed:18:d3:23:9f:f0:bd:4f:5c:6b:0b:21:61:f2:cb:b7:e8:b0:
7f:3c:a3:1b:92:1d:d5:68:ce:74:99:6e:8d:3b:8a:60:b0:75:
9c:97:d4:e4:f0:a0:6a:2c:a6:c4:7d:8f:4e:37:e3:98:05:81:
62:e5:2a:43:44:db:63:4f:b0:0d:3e:6f:e6:87:5f:67:bd:94:
29:c8:0a:ec
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYVwZyEjFpqc85cT7U9QLUQtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwMTAyMDI1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGI3ZmEzZDliNjI1ZTc3NGU3NzM5NDI1ZjEyYWMwZjU1MWJlNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T0fNa6CWS55gudl1xuMbsc4mcX8
I91HWKoFkfd/B8EUfFfiHgsv9p946Zufp+QB3nZE7DiIyQy6IFUcgO6SkLGKm6G1
8RGaNZs4gdjzhCN1bfV3FvizJO/O3gfY+4zKwisOXZId9oTwR+AyFCHOPM6a0f1v
EHbDbpwxDVhf4ualU4qCrj7+Fj7oa+C+bXzUS7POXJfpdgopdqwFFa4/YWfJF9If
MFVx8tWwA1qLUmfDyHkArrVag2lbN2rGFKLTTq5S+aMHHQMEDJlKDK1ImIWd7mA2
738MW6OWVKsrJTHIjq1txl0KcaEtOAVi6eHQPIIYnnCYh6Vn2AZ0TOyXqQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFMC3+j2bYl53Tnc5Ql8SrA9VG+QYMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvd0xmNlBadGlYbmRPZHpsQ1h4S3NEMVViNUJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAAtl2ED
BAAtl2IDBABeiUgDBABeiUowDAMEAF6JWQMEAF6JWgMEAF6JXTANBgkqhkiG9w0B
AQsFAAOCAQEAGvAFqzxLphnGXTnaVnObSFSeZOH18pBml4mxmmh17SD5Wq/wofpR
BLCyGptsV1ixMckKXhrk9kLqH8WlCPjm8Io31aiwgO2TMT1uaJLv7VqFumeor35S
r9SZ3ENWcAeQAu1Sivili0nb0RczAlOfj+WsDT9ak47POgi763zhKoOhyK9J2PHD
AwcHInxdcGDGzXZwqSxmMqIx/sm+HFGw9Lon4b4Kq9hPr4bka0qdbWAfkBen7RjT
I5/wvU9cawshYfLLt+iwfzyjG5Id1WjOdJlujTuKYLB1nJfU5PCgaiymxH2PTjfj
mAWBYuUqQ0TbY0+wDT5v5odfZ72UKcgK7A==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:12 2023 by rpki-client on console-fra.rpki-client.org