Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/W7P77sKdCbMrdvabUsVJw9yEEKU.roa
File: W7P77sKdCbMrdvabUsVJw9yEEKU.roa (raw, json)
Hash identifier: NR1roa0G1zdHX5Tn0dbPnG9xxZRMkTYwgFRrTDoU5to=
Subject key identifier: 5B:B3:FB:EE:C2:9D:09:B3:2B:76:F6:9B:52:C5:49:C3:DC:84:10:A5
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 01886CBCC205C8E9E73018FFBD311037E6CA
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/W7P77sKdCbMrdvabUsVJw9yEEKU.roa
Signing time: Tue 30 May 2023 12:58:09 +0000
ROA not before: Tue 30 May 2023 12:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
46.229.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Jun 2023 17:59:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:6c:bc:c2:05:c8:e9:e7:30:18:ff:bd:31:10:37:e6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: May 30 12:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5bb3fbeec29d09b32b76f69b52c549c3dc8410a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:c9:35:42:68:70:75:d8:69:4d:6e:df:b2:
85:83:ef:21:dd:a6:03:21:73:92:ed:8e:b0:1f:3d:
1c:47:6e:35:df:9c:8c:bb:20:c0:8a:ee:88:6f:35:
91:86:b7:d9:29:e5:9e:e5:94:a3:c0:9f:c4:1a:e8:
6f:ed:0e:ab:70:c0:c2:fd:ae:4b:68:de:ca:4f:34:
ea:7a:1c:28:05:e6:f6:d0:d2:2b:b4:50:34:e1:4e:
73:1e:38:ca:b3:cf:88:d2:52:39:b0:cf:2e:9e:53:
f7:f6:72:f2:71:8a:7a:15:3e:cc:15:25:10:68:9a:
08:f0:3c:af:bb:5f:2d:7b:83:67:10:ad:bf:fd:73:
8d:e1:df:c9:73:2f:b0:0f:e6:ad:92:d6:d4:97:a4:
c4:92:22:2a:f5:be:09:6d:66:a7:59:32:f0:74:70:
e5:de:d5:34:7d:eb:94:9f:f4:a2:b5:87:7f:98:15:
19:7f:02:37:c0:03:71:24:a1:cb:1f:20:b0:47:64:
30:82:7a:c9:51:54:ea:da:5f:1a:f0:8a:eb:4c:b8:
99:c8:7c:59:a3:69:0e:4e:78:3c:cd:80:ec:4d:5f:
52:37:41:6c:b6:9a:a4:e6:bf:92:e4:96:09:48:cb:
63:c8:c8:7a:a2:c2:e9:a2:e1:26:43:eb:f4:4e:3e:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B3:FB:EE:C2:9D:09:B3:2B:76:F6:9B:52:C5:49:C3:DC:84:10:A5
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/W7P77sKdCbMrdvabUsVJw9yEEKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.251.0/24
46.229.253.0/24
195.74.93.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:aa:41:64:d3:a3:73:9f:dc:e6:25:75:47:c1:c7:61:ef:b9:
d6:0d:4d:6b:e7:05:69:1c:28:92:03:2d:ec:93:8c:84:6e:75:
df:b6:1e:6b:fb:21:00:7a:37:c1:56:10:ec:e8:44:c8:44:d3:
4b:ec:8c:59:ba:e8:f7:f6:9c:fb:4c:58:ee:6f:02:b7:f6:94:
74:5f:13:5a:07:ec:38:fa:75:cd:88:79:4a:ee:61:08:e9:26:
35:dc:96:a4:c0:bd:a5:bb:2d:84:b1:d7:c5:94:a6:6d:11:fe:
99:d7:3a:47:2b:ff:c4:0c:6f:d8:6c:43:9b:ff:02:dc:7c:4c:
4e:21:a8:b1:d1:c8:7f:28:1d:c3:87:c8:22:45:26:94:61:79:
c5:1e:8d:06:83:84:e0:d3:91:c5:2e:8d:db:b6:63:4d:83:61:
bd:3a:13:60:c0:44:28:ab:b6:69:03:c1:45:b5:e2:7b:3c:f4:
ea:9b:8c:d6:90:53:18:26:96:11:3e:ca:9e:3b:9d:0f:d0:78:
28:72:cc:93:ae:e4:0c:be:f9:d1:e9:94:c6:05:cb:ab:83:29:
6e:e2:a1:27:e9:ba:12:6c:6b:5d:a3:ac:57:1a:07:9d:d2:3b:
a6:ed:b5:c4:6e:9b:7c:8c:00:92:ee:c5:ec:f6:3e:a6:1d:bb:
eb:90:3f:65
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYhsvMIFyOnnMBj/vTEQN+bKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjMwNTMwMTI1ODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmIzZmJlZWMyOWQwOWIzMmI3NmY2OWI1MmM1NDljM2RjODQxMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowvJNUJocHXYaU1u37KFg+8h3aYD
IXOS7Y6wHz0cR24135yMuyDAiu6IbzWRhrfZKeWe5ZSjwJ/EGuhv7Q6rcMDC/a5L
aN7KTzTqehwoBeb20NIrtFA04U5zHjjKs8+I0lI5sM8unlP39nLycYp6FT7MFSUQ
aJoI8Dyvu18te4NnEK2//XON4d/Jcy+wD+atktbUl6TEkiIq9b4JbWanWTLwdHDl
3tU0feuUn/SitYd/mBUZfwI3wANxJKHLHyCwR2QwgnrJUVTq2l8a8IrrTLiZyHxZ
o2kOTng8zYDsTV9SN0Fstpqk5r+S5JYJSMtjyMh6osLpouEmQ+v0Tj6jOwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFuz++7CnQmzK3b2m1LFScPchBClMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvVzdQNzdzS2RDYk1yZHZhYlVzVkp3OXlFRUtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALuXzAwQA
LuX7AwQALuX9AwQAw0pdMA0GCSqGSIb3DQEBCwUAA4IBAQDEqkFk06Nzn9zmJXVH
wcdh77nWDU1r5wVpHCiSAy3sk4yEbnXfth5r+yEAejfBVhDs6ETIRNNL7IxZuuj3
9pz7TFjubwK39pR0XxNaB+w4+nXNiHlK7mEI6SY13JakwL2luy2EsdfFlKZtEf6Z
1zpHK//EDG/YbEOb/wLcfExOIaix0ch/KB3Dh8giRSaUYXnFHo0Gg4Tg05HFLo3b
tmNNg2G9OhNgwEQoq7ZpA8FFteJ7PPTqm4zWkFMYJpYRPsqeO50P0HgocsyTruQM
vvnR6ZTGBcurgylu4qEn6boSbGtdo6xXGged0jum7bXEbpt8jACS7sXs9j6mHbvr
kD9l
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:15 2024 by rpki-client on console-ams.rpki-client.org