Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/wLWTATg-o-SSP4AdpvfnI9FosMI.roa
File: wLWTATg-o-SSP4AdpvfnI9FosMI.roa (raw, json)
Hash identifier: s4jm5KwSUcSQfcUISHbyf2Kq2p0sPuu4MqJ1gkw0M80=
Subject key identifier: C0:B5:93:01:38:3E:A3:E4:92:3F:80:1D:A6:F7:E7:23:D1:68:B0:C2
Certificate issuer: /CN=f75d2c053b62966a209d4d211225c91b13bcdb13
Certificate serial: 018C6CA7826FB1902667296B21B93A642A91
Authority key identifier: F7:5D:2C:05:3B:62:96:6A:20:9D:4D:21:12:25:C9:1B:13:BC:DB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/910sBTtilmognU0hEiXJGxO82xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/wLWTATg-o-SSP4AdpvfnI9FosMI.roa
Signing time: Fri 15 Dec 2023 08:46:06 +0000
ROA not before: Fri 15 Dec 2023 08:46:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206265
IP address blocks: 185.188.210.0/24 maxlen: 24
185.188.211.0/24 maxlen: 24
185.188.208.0/24 maxlen: 24
185.188.209.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6c:a7:82:6f:b1:90:26:67:29:6b:21:b9:3a:64:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d2c053b62966a209d4d211225c91b13bcdb13
Validity
Not Before: Dec 15 08:46:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b59301383ea3e4923f801da6f7e723d168b0c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:b2:a2:e2:29:bb:1c:d7:af:69:72:58:56:
36:27:9b:19:5b:3c:78:6e:b0:55:c9:48:7e:d5:42:
3d:0a:ac:44:d1:6d:c0:b4:9b:77:6c:31:68:ef:bc:
70:ae:6b:fa:73:14:27:6c:ea:a9:bc:fa:4b:97:4e:
b7:6b:d9:cd:c7:9f:6c:1a:cb:99:23:3e:42:d6:3f:
7c:d8:09:a6:8f:a5:e6:f2:97:f1:33:7d:85:df:da:
42:a7:fb:0e:fd:49:23:53:8c:71:a5:7f:b7:d3:1c:
cc:9d:d6:32:45:d9:14:98:6e:8f:fc:7c:0e:11:10:
62:8e:ae:97:91:bd:09:c7:48:aa:5a:e8:75:9c:75:
6e:a1:43:5f:76:e5:92:e4:0f:f0:36:e6:21:62:d9:
cb:78:0b:5a:fb:6a:27:46:b3:6b:6b:29:30:87:86:
a1:06:48:0b:83:d0:04:1a:39:3a:05:6f:f9:ac:7b:
5f:4e:f5:89:9d:29:49:a2:35:06:0b:d2:37:66:e0:
95:3f:07:7b:b5:33:b0:86:d2:fe:14:f4:9b:42:60:
11:6b:f7:fa:0c:41:6b:58:cd:64:04:b4:72:fa:c3:
5c:87:7f:d2:00:62:f8:a5:3c:64:84:eb:10:cb:fe:
ed:12:43:cf:a5:b1:99:9d:f3:30:27:2c:88:36:65:
67:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:93:01:38:3E:A3:E4:92:3F:80:1D:A6:F7:E7:23:D1:68:B0:C2
X509v3 Authority Key Identifier:
keyid:F7:5D:2C:05:3B:62:96:6A:20:9D:4D:21:12:25:C9:1B:13:BC:DB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/910sBTtilmognU0hEiXJGxO82xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/wLWTATg-o-SSP4AdpvfnI9FosMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/120e16-e241-49f5-a6cc-666e554dbb62/1/910sBTtilmognU0hEiXJGxO82xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.188.208.0/22
Signature Algorithm: sha256WithRSAEncryption
33:43:82:50:49:85:ea:57:23:70:58:c8:84:88:2d:e0:cf:51:
43:23:6e:d8:9b:81:39:94:8c:ae:a8:72:5f:f6:72:af:7f:7d:
33:c6:8c:04:1d:02:67:b0:b6:c5:a5:79:79:f9:13:c5:a6:a9:
2a:c7:07:16:85:e4:5b:26:ad:a9:64:de:44:46:7a:44:20:be:
fc:dc:3a:90:3d:0b:f1:d2:97:39:84:db:a2:33:27:9f:88:60:
f0:f4:89:3b:a4:37:9f:1c:95:db:b8:78:93:c8:d1:80:37:ab:
03:5b:1e:d6:82:5d:91:7a:1c:40:80:15:0f:e8:fd:30:2b:2d:
a5:59:fc:a2:34:57:f6:84:a6:68:bd:a8:0b:eb:99:44:74:5c:
00:8b:ca:83:1a:11:a9:3e:21:2e:1c:70:bd:da:ff:ae:9a:11:
05:eb:2d:15:45:25:3a:d2:50:85:33:29:9a:c8:64:68:b1:be:
52:3e:c6:e7:61:b2:c1:5f:5c:3f:15:69:db:fa:f8:7d:ad:85:
6e:6c:63:1d:33:bc:50:38:3a:ba:c9:bd:b1:80:ff:a2:f1:6d:
29:9e:b8:9b:81:a4:07:50:75:ae:55:ef:c3:a9:20:32:4d:c9:
45:1e:9b:2c:c9:72:79:0b:4e:36:64:a0:5d:61:9c:ed:3e:43:
39:f3:58:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxsp4JvsZAmZylrIbk6ZCqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NWQyYzA1M2I2Mjk2NmEyMDlkNGQyMTEyMjVjOTFiMTNi
Y2RiMTMwHhcNMjMxMjE1MDg0NjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGI1OTMwMTM4M2VhM2U0OTIzZjgwMWRhNmY3ZTcyM2QxNjhiMGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFSyouIpuxzXr2lyWFY2J5sZWzx4
brBVyUh+1UI9CqxE0W3AtJt3bDFo77xwrmv6cxQnbOqpvPpLl063a9nNx59sGsuZ
Iz5C1j982Ammj6Xm8pfxM32F39pCp/sO/UkjU4xxpX+30xzMndYyRdkUmG6P/HwO
ERBijq6Xkb0Jx0iqWuh1nHVuoUNfduWS5A/wNuYhYtnLeAta+2onRrNraykwh4ah
BkgLg9AEGjk6BW/5rHtfTvWJnSlJojUGC9I3ZuCVPwd7tTOwhtL+FPSbQmARa/f6
DEFrWM1kBLRy+sNch3/SAGL4pTxkhOsQy/7tEkPPpbGZnfMwJyyINmVn4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMC1kwE4PqPkkj+AHab35yPRaLDCMB8GA1UdIwQY
MBaAFPddLAU7YpZqIJ1NIRIlyRsTvNsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTEwc0JUdGlsbW9nblUwaEVpWEpHeE84MnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMjBlMTYtZTI0MS00OWY1LWE2Y2Mt
NjY2ZTU1NGRiYjYyLzEvd0xXVEFUZy1vLVNTUDRBZHB2Zm5JOUZvc01JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMjBlMTYtZTI0MS00OWY1LWE2Y2MtNjY2ZTU1NGRiYjYy
LzEvOTEwc0JUdGlsbW9nblUwaEVpWEpHeE84MnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubzQMA0G
CSqGSIb3DQEBCwUAA4IBAQAzQ4JQSYXqVyNwWMiEiC3gz1FDI27Ym4E5lIyuqHJf
9nKvf30zxowEHQJnsLbFpXl5+RPFpqkqxwcWheRbJq2pZN5ERnpEIL783DqQPQvx
0pc5hNuiMyefiGDw9Ik7pDefHJXbuHiTyNGAN6sDWx7Wgl2RehxAgBUP6P0wKy2l
WfyiNFf2hKZovagL65lEdFwAi8qDGhGpPiEuHHC92v+umhEF6y0VRSU60lCFMyma
yGRosb5SPsbnYbLBX1w/FWnb+vh9rYVubGMdM7xQODq6yb2xgP+i8W0pnribgaQH
UHWuVe/DqSAyTclFHpssyXJ5C042ZKBdYZztPkM581gX
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:39:33 2024 by rpki-client on console-fra.rpki-client.org