Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/WgGAyxbhXUA8N4Edbh3SjPrCNs4.roa
File: WgGAyxbhXUA8N4Edbh3SjPrCNs4.roa (raw, json)
Hash identifier: K3p8R2SmJuqPhI9VT0/Hn7gjuRc+1rvCDzItPtFz+cg=
Subject key identifier: 5A:01:80:CB:16:E1:5D:40:3C:37:81:1D:6E:1D:D2:8C:FA:C2:36:CE
Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial: 018CFDA6429399E88DBC1F2475688349B2A3
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/WgGAyxbhXUA8N4Edbh3SjPrCNs4.roa
Signing time: Fri 12 Jan 2024 12:29:40 +0000
ROA not before: Fri 12 Jan 2024 12:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209505
IP address blocks: 78.41.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Apr 2024 08:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fd:a6:42:93:99:e8:8d:bc:1f:24:75:68:83:49:b2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
Validity
Not Before: Jan 12 12:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a0180cb16e15d403c37811d6e1dd28cfac236ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:75:99:52:72:63:cd:6e:bd:42:e1:7b:82:44:
a3:a3:3d:ce:f5:af:a6:56:27:c5:e1:86:c8:32:bb:
55:42:17:de:80:00:f8:a5:c9:90:94:20:09:df:2c:
70:47:68:3b:b8:a2:bd:75:30:52:fb:c3:84:23:d2:
5c:53:dd:92:8c:9a:a0:4b:12:99:4c:12:43:54:67:
0c:b1:03:02:ab:c5:78:aa:08:03:02:c1:e2:f6:3c:
61:5e:b2:f4:75:34:91:7e:93:b1:c1:30:e4:9c:82:
6d:52:fe:fc:ae:f8:56:90:63:c8:f8:66:48:30:fa:
68:d8:e7:51:22:2c:34:a3:d6:2f:73:3d:73:ba:0b:
9d:e1:9b:0e:cc:a3:31:1f:28:ec:13:5d:2f:f2:82:
7e:99:d9:0a:07:7a:4d:5e:bd:99:82:d9:25:dd:d4:
a7:0c:89:fa:8f:3c:53:6b:03:93:03:eb:8e:a6:72:
50:b7:0c:46:da:2f:1f:5d:f3:82:7d:b4:f2:85:ff:
74:6a:af:d2:5d:66:0c:a9:45:74:47:19:73:a3:47:
87:9d:11:00:c9:32:06:38:61:2a:fa:66:04:54:60:
e3:cc:14:5e:f2:e7:b1:d4:5d:d3:a1:a0:84:a7:30:
89:ff:53:e4:7b:27:99:40:2c:56:a7:3f:1f:47:5e:
ae:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:01:80:CB:16:E1:5D:40:3C:37:81:1D:6E:1D:D2:8C:FA:C2:36:CE
X509v3 Authority Key Identifier:
keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/WgGAyxbhXUA8N4Edbh3SjPrCNs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.41.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:88:cd:ae:9f:af:ac:40:60:c0:2d:69:73:a7:c2:c1:c8:30:
aa:55:d3:14:fa:44:bf:03:e2:08:4b:9f:fe:f7:e1:4e:a9:07:
d3:4d:33:5f:26:d6:57:1d:e6:e6:8d:dc:e8:93:87:1b:d8:8a:
5b:87:9c:9c:7c:0e:22:d8:9d:9d:2d:c1:2d:c6:cd:0d:1a:d0:
19:c6:98:9d:78:18:19:0e:83:1f:d4:12:2b:ba:a2:d2:f4:c3:
4f:0f:71:8e:bc:62:7c:e9:4c:8d:f6:13:33:76:fc:49:2f:8c:
f9:f5:91:fa:49:03:60:20:f7:80:1d:5d:1c:f5:9b:46:97:2a:
9c:76:ff:2c:bd:40:81:95:88:97:b4:73:03:ce:6a:fe:9e:c7:
86:ea:17:0d:44:91:a3:a9:90:f4:c3:2f:0b:b2:a8:75:ac:bd:
26:6b:9d:dd:ce:d9:4c:58:f8:f0:f6:37:7c:08:4b:61:76:53:
5c:52:d3:5b:13:f5:29:da:ca:3e:25:68:c7:56:ae:4f:85:d8:
47:88:c3:15:ea:c8:7a:78:2c:6d:e9:cd:70:50:4a:fe:b2:da:
e6:1a:d4:75:5b:85:3d:0f:dc:82:31:91:dc:74:ba:78:53:fb:
c3:88:7d:40:e4:c5:0d:50:2a:7a:84:b9:d7:56:d9:5c:fa:73:
3d:67:28:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz9pkKTmeiNvB8kdWiDSbKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjQwMTEyMTIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTAxODBjYjE2ZTE1ZDQwM2MzNzgxMWQ2ZTFkZDI4Y2ZhYzIzNmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XWZUnJjzW69QuF7gkSjoz3O9a+m
VifF4YbIMrtVQhfegAD4pcmQlCAJ3yxwR2g7uKK9dTBS+8OEI9JcU92SjJqgSxKZ
TBJDVGcMsQMCq8V4qggDAsHi9jxhXrL0dTSRfpOxwTDknIJtUv78rvhWkGPI+GZI
MPpo2OdRIiw0o9Yvcz1zugud4ZsOzKMxHyjsE10v8oJ+mdkKB3pNXr2Zgtkl3dSn
DIn6jzxTawOTA+uOpnJQtwxG2i8fXfOCfbTyhf90aq/SXWYMqUV0Rxlzo0eHnREA
yTIGOGEq+mYEVGDjzBRe8uex1F3ToaCEpzCJ/1PkeyeZQCxWpz8fR16uaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFoBgMsW4V1APDeBHW4d0oz6wjbOMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvV2dHQXl4YmhYVUE4TjRFZGJoM1NqUHJDTnM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATimIMA0G
CSqGSIb3DQEBCwUAA4IBAQBKiM2un6+sQGDALWlzp8LByDCqVdMU+kS/A+IIS5/+
9+FOqQfTTTNfJtZXHebmjdzok4cb2Ipbh5ycfA4i2J2dLcEtxs0NGtAZxpideBgZ
DoMf1BIruqLS9MNPD3GOvGJ86UyN9hMzdvxJL4z59ZH6SQNgIPeAHV0c9ZtGlyqc
dv8svUCBlYiXtHMDzmr+nseG6hcNRJGjqZD0wy8Lsqh1rL0ma53dztlMWPjw9jd8
CEthdlNcUtNbE/Up2so+JWjHVq5PhdhHiMMV6sh6eCxt6c1wUEr+strmGtR1W4U9
D9yCMZHcdLp4U/vDiH1A5MUNUCp6hLnXVtlc+nM9ZyiT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:55 2024 by rpki-client on console-fra.rpki-client.org