Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/WtCI3InDrKXgNDM219MfIhPuwBQ.roa
File: WtCI3InDrKXgNDM219MfIhPuwBQ.roa (raw, json)
Hash identifier: monDwpbLkqQDfaI/KPDcHN9gqt5jHVnc0nvDir+nH9w=
Subject key identifier: 5A:D0:88:DC:89:C3:AC:A5:E0:34:33:36:D7:D3:1F:22:13:EE:C0:14
Certificate issuer: /CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Certificate serial: 01856B2E744C04E6005E40D9060956FCDAC7
Authority key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/WtCI3InDrKXgNDM219MfIhPuwBQ.roa
Signing time: Sun 01 Jan 2023 02:34:44 +0000
ROA not before: Sun 01 Jan 2023 02:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9180
IP address blocks: 195.214.225.0/24 maxlen: 24
195.214.226.0/24 maxlen: 24
195.214.224.0/24 maxlen: 24
195.214.229.0/24 maxlen: 24
195.214.227.0/24 maxlen: 24
195.214.230.0/24 maxlen: 24
195.214.228.0/24 maxlen: 24
195.214.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:74:4c:04:e6:00:5e:40:d9:06:09:56:fc:da:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Validity
Not Before: Jan 1 02:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ad088dc89c3aca5e0343336d7d31f2213eec014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:24:79:9c:47:12:47:e1:ef:0f:94:9d:d6:
f7:92:2a:57:79:a0:85:82:c2:60:14:13:7c:f1:06:
03:c9:a8:8d:c3:e7:0f:ff:6a:c3:a7:0e:88:4d:43:
c6:72:dd:f8:4e:a2:d8:8b:64:f0:e1:ff:32:c2:f6:
4e:84:88:3a:81:20:3b:31:97:e4:1f:a2:45:81:7a:
9f:91:1c:56:55:37:a3:10:10:de:df:a8:10:4e:c1:
7b:3b:d0:d4:5e:73:8e:ba:42:f9:56:33:8b:03:bd:
f7:a0:10:68:1d:85:57:4e:8f:d2:ab:99:6c:5d:a0:
4c:7b:02:ff:1a:48:3a:90:11:02:6d:26:06:f8:54:
25:a8:e2:71:dd:e9:5e:a4:cb:46:01:7f:8f:c6:54:
79:1a:f7:64:9e:f1:02:c3:b6:e7:07:a0:12:18:61:
0d:1f:db:8a:81:ea:7d:0d:42:95:df:45:c0:11:e3:
1d:ff:7c:e8:2c:d9:90:0e:9e:99:96:75:32:d2:68:
a0:77:b1:0a:62:b1:c1:1c:43:62:8e:ba:fb:76:6b:
58:cf:bb:63:ee:88:ee:0c:25:05:76:4b:bb:a9:2d:
3d:3c:38:0c:de:9b:09:84:d3:e9:f7:a9:ab:23:73:
4e:2f:a9:c8:57:b0:80:15:19:a5:f4:29:24:c2:7e:
89:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D0:88:DC:89:C3:AC:A5:E0:34:33:36:D7:D3:1F:22:13:EE:C0:14
X509v3 Authority Key Identifier:
keyid:B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/WtCI3InDrKXgNDM219MfIhPuwBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.224.0/21
Signature Algorithm: sha256WithRSAEncryption
93:95:23:42:a2:d6:38:21:5d:32:b1:86:4f:6e:14:56:34:ae:
e1:57:bd:29:b2:0f:77:ec:4b:79:c3:f8:d5:bb:1c:cf:ec:e8:
15:e3:09:73:a6:2b:60:23:a0:d6:64:67:1e:6b:35:f8:22:9c:
9f:00:44:a1:98:4b:ec:32:4c:36:e3:7f:60:60:38:f9:72:a8:
af:5e:04:4f:f7:42:e4:ba:7d:d4:a1:85:b7:d6:6c:b3:ce:13:
26:47:f9:51:68:58:6d:64:0a:24:f6:ab:79:2c:ca:5c:a1:ee:
24:87:18:c7:8f:49:78:29:51:6f:22:4b:92:ff:09:7c:f6:d0:
1f:88:0c:e8:5c:78:2b:bc:b2:cf:98:cd:fb:13:16:94:a0:25:
93:1b:e6:9e:fb:d3:04:e9:f7:3e:84:c8:45:19:9f:35:90:28:
26:15:d4:63:72:85:d6:6a:0b:48:24:4b:a7:f5:a7:84:95:ae:
42:93:18:51:18:66:5e:dd:76:bc:0b:b0:f9:3a:71:c2:c0:73:
14:64:84:94:90:ee:16:85:f4:61:c1:2d:49:6a:0f:f2:a3:27:
46:bd:a0:b4:06:ea:2a:85:d7:f5:44:24:3c:a6:ed:ad:17:51:
71:02:49:73:c0:1f:b6:06:8a:bb:5c:aa:24:a7:33:2e:73:2a:
56:8e:21:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrLnRMBOYAXkDZBglW/NrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwOTQ3ODBmZmJiMDZiN2I1N2YwMjE0ZTg0NTUyYjk2NGM1
MDQxZDYwHhcNMjMwMTAxMDIzNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWQwODhkYzg5YzNhY2E1ZTAzNDMzMzZkN2QzMWYyMjEzZWVjMDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxIkeZxHEkfh7w+Undb3kipXeaCF
gsJgFBN88QYDyaiNw+cP/2rDpw6ITUPGct34TqLYi2Tw4f8ywvZOhIg6gSA7MZfk
H6JFgXqfkRxWVTejEBDe36gQTsF7O9DUXnOOukL5VjOLA733oBBoHYVXTo/Sq5ls
XaBMewL/Gkg6kBECbSYG+FQlqOJx3elepMtGAX+PxlR5GvdknvECw7bnB6ASGGEN
H9uKgep9DUKV30XAEeMd/3zoLNmQDp6ZlnUy0migd7EKYrHBHENijrr7dmtYz7tj
7ojuDCUFdku7qS09PDgM3psJhNPp96mrI3NOL6nIV7CAFRml9Ckkwn6JvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFrQiNyJw6yl4DQzNtfTHyIT7sAUMB8GA1UdIwQY
MBaAFLCUeA/7sGt7V/AhToRVK5ZMUEHWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEt
OGFkZjBkYTIyNTQ1LzEvV3RDSTNJbkRyS1hnTkRNMjE5TWZJaFB1d0JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS82NjgzY2EtYTY4OC00MTQxLWFkNDEtOGFkZjBkYTIyNTQ1
LzEvc0pSNERfdXdhM3RYOENGT2hGVXJsa3hRUWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw9bgMA0G
CSqGSIb3DQEBCwUAA4IBAQCTlSNCotY4IV0ysYZPbhRWNK7hV70psg937Et5w/jV
uxzP7OgV4wlzpitgI6DWZGceazX4IpyfAEShmEvsMkw2439gYDj5cqivXgRP90Lk
un3UoYW31myzzhMmR/lRaFhtZAok9qt5LMpcoe4khxjHj0l4KVFvIkuS/wl89tAf
iAzoXHgrvLLPmM37ExaUoCWTG+ae+9ME6fc+hMhFGZ81kCgmFdRjcoXWagtIJEun
9aeEla5CkxhRGGZe3Xa8C7D5OnHCwHMUZISUkO4WhfRhwS1Jag/yoydGvaC0Buoq
hdf1RCQ8pu2tF1FxAklzwB+2Boq7XKokpzMucypWjiER
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:31 2024 by rpki-client on console-fra.rpki-client.org