Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/WWXkFuOLV-Y_uG-WN_ccAL9PyF0.roa
File: WWXkFuOLV-Y_uG-WN_ccAL9PyF0.roa (raw, json)
Hash identifier: nzTajs+e/hOprwQdX+Rs+LyFbrKjdEpyaXnG4nv3Le4=
Subject key identifier: 59:65:E4:16:E3:8B:57:E6:3F:B8:6F:96:37:F7:1C:00:BF:4F:C8:5D
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 018CC7274E966A404A472496E2A28E359EBD
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/WWXkFuOLV-Y_uG-WN_ccAL9PyF0.roa
Signing time: Mon 01 Jan 2024 22:31:31 +0000
ROA not before: Mon 01 Jan 2024 22:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56912
IP address blocks: 185.75.150.0/24 maxlen: 24
185.75.149.0/24 maxlen: 24
188.74.32.0/22 maxlen: 24
2a03:4b20::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 31 Jan 2024 03:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:4e:96:6a:40:4a:47:24:96:e2:a2:8e:35:9e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Jan 1 22:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5965e416e38b57e63fb86f9637f71c00bf4fc85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:bd:83:2e:bf:e6:c7:44:a7:1c:dc:1b:6c:
fd:50:3e:4a:3c:43:6e:c1:fc:b6:e8:74:a5:fc:e4:
9e:92:1e:83:b8:4f:32:b2:83:27:3b:cc:ba:af:d3:
cb:c4:ca:01:1c:19:b5:91:ff:14:b6:63:e4:c9:db:
9a:6a:a6:cc:b2:5e:3f:65:d9:54:6e:dd:1b:cc:2f:
ec:60:0f:26:99:db:ae:fc:0a:8b:16:51:3f:a2:84:
d3:52:ca:51:b0:37:4a:0b:d9:e7:de:4d:9b:ef:4c:
eb:41:75:47:f5:c2:8e:ee:c2:10:88:f8:d6:03:4d:
3e:1a:66:c9:a5:24:71:95:59:c9:4d:e0:de:69:d8:
aa:2e:79:5f:82:30:79:9a:49:7b:ed:f5:c6:7e:e2:
14:ba:c5:d6:e7:7d:20:89:13:9f:f1:89:04:bd:e6:
f6:4b:44:5f:20:ce:2e:6b:11:e1:1a:35:72:e3:71:
62:20:47:e4:6e:b2:df:b0:d2:ec:89:c6:e0:cc:e8:
8e:e2:92:a1:c2:9f:35:f2:0f:bc:2f:aa:ad:c9:70:
5f:d6:33:bb:cb:46:0d:3a:7a:57:52:cf:99:fd:b7:
0a:86:b9:47:fa:ec:6e:8b:c1:dd:ea:07:48:5c:31:
7b:b8:bc:0c:3a:c6:6d:36:75:fd:84:7f:bd:89:c1:
33:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:65:E4:16:E3:8B:57:E6:3F:B8:6F:96:37:F7:1C:00:BF:4F:C8:5D
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/WWXkFuOLV-Y_uG-WN_ccAL9PyF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.149.0-185.75.150.255
188.74.32.0/22
IPv6:
2a03:4b20::/32
Signature Algorithm: sha256WithRSAEncryption
9a:80:b3:4c:3a:1b:c5:0f:8c:b3:67:aa:02:1a:05:72:4e:93:
62:3d:cb:ea:e9:b1:9e:cd:3e:1f:3f:3f:29:e1:57:ce:87:44:
71:55:58:3d:17:0e:98:85:fd:5c:31:70:e4:51:20:34:c7:78:
03:7a:93:5f:1f:0d:f5:f9:fa:0d:18:db:a0:a4:86:ff:88:47:
89:e5:b7:de:64:91:37:0f:7c:94:f0:8e:72:c8:56:06:fb:2e:
c4:11:01:23:ab:50:76:a2:cf:7c:55:23:60:a2:77:46:cd:ba:
f3:7f:91:4b:42:e1:2d:1d:b7:0c:64:1b:e3:8f:6f:80:35:cd:
8f:6c:c9:e8:b4:af:15:e3:13:d3:a6:d1:ad:d1:ca:97:38:0e:
8e:5d:12:01:3a:85:47:5e:d6:41:12:ea:d5:52:c6:35:5e:58:
f6:ad:4b:05:51:a4:2d:cf:b5:e5:ef:2e:1a:c0:4d:59:f5:1c:
6e:f1:49:ec:4e:b7:98:f7:e0:c9:29:5d:fa:cb:73:5f:38:31:
87:e6:80:e0:d8:3f:b0:70:3c:5e:64:47:7e:34:41:14:ff:33:
b6:7d:28:7b:b9:aa:04:4a:0b:0d:90:8f:5e:5d:ba:10:6a:97:
9f:a0:2c:55:e5:29:56:53:6a:89:38:5b:48:40:df:91:65:9c:
a2:8b:e3:23
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzHJ06WakBKRySW4qKONZ69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzOWYxYTZlODRjMDI3N2VmY2I1NmQ5NDJiMGViNWU0NTY0
NzExMjkwHhcNMjQwMTAxMjIzMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTY1ZTQxNmUzOGI1N2U2M2ZiODZmOTYzN2Y3MWMwMGJmNGZjODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbW9gy6/5sdEpxzcG2z9UD5KPENu
wfy26HSl/OSekh6DuE8ysoMnO8y6r9PLxMoBHBm1kf8UtmPkyduaaqbMsl4/ZdlU
bt0bzC/sYA8mmduu/AqLFlE/ooTTUspRsDdKC9nn3k2b70zrQXVH9cKO7sIQiPjW
A00+GmbJpSRxlVnJTeDeadiqLnlfgjB5mkl77fXGfuIUusXW530giROf8YkEveb2
S0RfIM4uaxHhGjVy43FiIEfkbrLfsNLsicbgzOiO4pKhwp818g+8L6qtyXBf1jO7
y0YNOnpXUs+Z/bcKhrlH+uxui8Hd6gdIXDF7uLwMOsZtNnX9hH+9icEz7QIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFll5Bbji1fmP7hvljf3HAC/T8hdMB8GA1UdIwQY
MBaAFOOfGm6EwCd+/LVtlCsOteRWRxEpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMt
MGU1MzkyNzU3ZjgyLzEvV1dYa0Z1T0xWLVlfdUctV05fY2NBTDlQeUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8xNjBhNzctNzU2ZC00NDFhLTg2YzMtMGU1MzkyNzU3Zjgy
LzEvNDU4YWJvVEFKMzc4dFcyVUt3NjE1RlpIRVNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUMAwDBAC5S5UD
BAC5S5YDBAK8SiAwDQQCAAIwBwMFACoDSyAwDQYJKoZIhvcNAQELBQADggEBAJqA
s0w6G8UPjLNnqgIaBXJOk2I9y+rpsZ7NPh8/PynhV86HRHFVWD0XDpiF/VwxcORR
IDTHeAN6k18fDfX5+g0Y26Ckhv+IR4nlt95kkTcPfJTwjnLIVgb7LsQRASOrUHai
z3xVI2Cid0bNuvN/kUtC4S0dtwxkG+OPb4A1zY9syei0rxXjE9Om0a3Rypc4Do5d
EgE6hUde1kES6tVSxjVeWPatSwVRpC3PteXvLhrATVn1HG7xSexOt5j34MkpXfrL
c184MYfmgODYP7BwPF5kR340QRT/M7Z9KHu5qgRKCw2Qj15duhBql5+gLFXlKVZT
aok4W0hA35FlnKKL4yM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org