Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dwXAM6S2_Ax5yB0bwla1WJrD1cM.roa
File: dwXAM6S2_Ax5yB0bwla1WJrD1cM.roa (raw, json)
Hash identifier: ED5+X96XLuEC9779Oh+G26+sygmT5Kw3kN9OSXZ4wyY=
Subject key identifier: 77:05:C0:33:A4:B6:FC:0C:79:C8:1D:1B:C2:56:B5:58:9A:C3:D5:C3
Certificate issuer: /CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Certificate serial: 01856EB8E6B8F16BB7BDF407A48907E2C3EA
Authority key identifier: 74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dwXAM6S2_Ax5yB0bwla1WJrD1cM.roa
Signing time: Sun 01 Jan 2023 19:04:49 +0000
ROA not before: Sun 01 Jan 2023 19:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 88.202.210.0/24 maxlen: 24
88.202.208.0/24 maxlen: 24
88.202.208.0/23 maxlen: 23
88.212.156.0/24 maxlen: 24
88.212.158.0/24 maxlen: 24
88.212.159.0/24 maxlen: 24
185.8.135.0/24 maxlen: 24
185.8.133.0/24 maxlen: 24
83.151.192.0/24 maxlen: 24
83.151.195.0/24 maxlen: 24
83.151.193.0/24 maxlen: 24
83.151.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Jan 2023 12:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:e6:b8:f1:6b:b7:bd:f4:07:a4:89:07:e2:c3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7445ddeedfbd72d313e9ee8cceeae8403cc34146
Validity
Not Before: Jan 1 19:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7705c033a4b6fc0c79c81d1bc256b5589ac3d5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:0b:ae:ef:50:45:19:16:74:ec:eb:bf:7a:
1e:27:95:2f:7c:f2:08:e1:7a:5c:ac:c1:e7:c7:a1:
95:93:6e:01:5d:a5:d6:05:e5:5c:a8:bb:da:06:bf:
14:10:eb:ca:3c:c0:c3:c6:d7:a0:55:f1:05:f8:e3:
86:b6:a5:af:90:d0:b5:55:42:b6:41:3c:ac:18:67:
4b:8f:c8:68:b5:c8:44:cc:64:ea:56:08:6c:23:19:
06:6a:5d:b3:7e:be:91:a7:be:42:3e:18:7a:99:0e:
6d:e3:1e:85:bf:2b:cf:af:27:4d:11:eb:42:51:d7:
f1:0d:cc:bb:3a:b8:4e:9e:eb:13:3e:f9:80:94:8f:
b2:e5:ee:02:7f:7c:91:88:ba:d6:43:6e:89:f9:fc:
4a:7f:0a:ef:18:98:3a:7c:cf:bc:3e:ed:1b:98:95:
9a:c2:62:ed:ee:91:71:1e:80:21:93:8b:60:79:f1:
6f:f9:eb:11:c2:f4:27:b7:58:14:51:ce:b5:83:58:
e8:2b:02:d0:75:12:42:c3:e5:61:93:4e:57:63:c5:
b5:81:4b:b7:da:cb:46:c5:d5:fe:60:66:31:b5:a3:
30:9a:f6:03:a7:7a:79:91:94:1c:66:ae:b4:c2:60:
ed:10:17:81:88:8b:98:8e:3c:33:7c:28:09:72:10:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:05:C0:33:A4:B6:FC:0C:79:C8:1D:1B:C2:56:B5:58:9A:C3:D5:C3
X509v3 Authority Key Identifier:
keyid:74:45:DD:EE:DF:BD:72:D3:13:E9:EE:8C:CE:EA:E8:40:3C:C3:41:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEXd7t-9ctMT6e6MzuroQDzDQUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dwXAM6S2_Ax5yB0bwla1WJrD1cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/dEXd7t-9ctMT6e6MzuroQDzDQUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.151.192.0/22
88.202.208.0-88.202.210.255
88.212.156.0/24
88.212.158.0/23
185.8.133.0/24
185.8.135.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:a3:27:ca:22:02:f1:04:0e:7d:10:56:77:db:3d:9a:40:eb:
24:52:84:15:3a:c8:26:12:81:f0:4a:82:6e:df:a0:58:a2:6a:
c3:fc:ce:72:a3:99:fd:d9:73:bb:a7:d0:f2:4d:4c:ea:4f:6a:
77:3e:5d:51:34:8c:cc:17:34:94:7e:5f:da:58:e2:d5:ac:8f:
8f:e0:f5:c1:d8:7f:2d:04:5e:a1:f9:f3:20:24:18:0f:c0:5e:
12:4e:3c:c7:0b:61:91:9a:77:8f:db:a1:8a:1b:6e:e5:76:1d:
85:d1:aa:e5:fc:db:49:cb:7b:9b:59:0a:88:b3:a3:bb:31:e2:
0c:55:10:f3:23:b2:97:14:a7:2b:5f:f5:23:8d:0b:86:4a:f3:
30:d1:1f:f2:4c:63:fc:97:c6:6b:44:7c:57:d1:d9:e5:fa:0a:
e8:92:49:e7:1c:f5:ec:c2:89:ae:d1:8a:f7:08:08:d3:7a:a2:
71:53:2c:6a:ba:5a:45:5a:83:e1:5a:fa:cd:f4:89:ff:a9:50:
b6:38:74:0c:95:f3:2f:64:5a:10:26:30:62:f4:81:69:a3:39:
69:ab:a3:73:c4:e3:4c:84:cf:47:0d:4a:b9:09:16:6c:c5:16:
6b:39:94:f4:f0:6b:94:f4:11:4e:ed:0d:6e:ef:e3:c3:2f:fd:
f8:97:21:60
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYVuuOa48Wu3vfQHpIkH4sPqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDVkZGVlZGZiZDcyZDMxM2U5ZWU4Y2NlZWFlODQwM2Nj
MzQxNDYwHhcNMjMwMTAxMTkwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzA1YzAzM2E0YjZmYzBjNzljODFkMWJjMjU2YjU1ODlhYzNkNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjkLru9QRRkWdOzrv3oeJ5UvfPII
4XpcrMHnx6GVk24BXaXWBeVcqLvaBr8UEOvKPMDDxtegVfEF+OOGtqWvkNC1VUK2
QTysGGdLj8hotchEzGTqVghsIxkGal2zfr6Rp75CPhh6mQ5t4x6FvyvPrydNEetC
UdfxDcy7OrhOnusTPvmAlI+y5e4Cf3yRiLrWQ26J+fxKfwrvGJg6fM+8Pu0bmJWa
wmLt7pFxHoAhk4tgefFv+esRwvQnt1gUUc61g1joKwLQdRJCw+Vhk05XY8W1gUu3
2stGxdX+YGYxtaMwmvYDp3p5kZQcZq60wmDtEBeBiIuYjjwzfCgJchDeZwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFHcFwDOktvwMecgdG8JWtViaw9XDMB8GA1UdIwQY
MBaAFHRF3e7fvXLTE+nujM7q6EA8w0FGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMt
NmNhMzQwZmE3NDkzLzEvZHdYQU02UzJfQXg1eUIwYndsYTFXSnJEMWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9jMTc2NWItZTNhNS00MTBjLTljZDMtNmNhMzQwZmE3NDkz
LzEvZEVYZDd0LTljdE1UNmU2TXp1cm9RRHpEUVVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQCU5fAMAwD
BARYytADBABYytIDBABY1JwDBAFY1J4DBAC5CIUDBAC5CIcwDQYJKoZIhvcNAQEL
BQADggEBAEqjJ8oiAvEEDn0QVnfbPZpA6yRShBU6yCYSgfBKgm7foFiiasP8znKj
mf3Zc7un0PJNTOpPanc+XVE0jMwXNJR+X9pY4tWsj4/g9cHYfy0EXqH58yAkGA/A
XhJOPMcLYZGad4/boYobbuV2HYXRquX820nLe5tZCoizo7sx4gxVEPMjspcUpytf
9SONC4ZK8zDRH/JMY/yXxmtEfFfR2eX6CuiSSecc9ezCia7RivcICNN6onFTLGq6
WkVag+Fa+s30if+pULY4dAyV8y9kWhAmMGL0gWmjOWmro3PE40yEz0cNSrkJFmzF
Fms5lPTwa5T0EU7tDW7v48Mv/fiXIWA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:41 2024 by rpki-client on console-ams.rpki-client.org