Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/wisjCHq2MVCPYaN6-cAxtPbu2dw.roa
File: wisjCHq2MVCPYaN6-cAxtPbu2dw.roa (raw, json)
Hash identifier: xmCwZvQiJiNRFDK4mjOhhRZQ0AyIpgs+Xpw5tqCIux0=
Subject key identifier: C2:2B:23:08:7A:B6:31:50:8F:61:A3:7A:F9:C0:31:B4:F6:EE:D9:DC
Certificate issuer: /CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Certificate serial: 01856C414D03C7AA6D625CEA9C355DB94CFE
Authority key identifier: 54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/wisjCHq2MVCPYaN6-cAxtPbu2dw.roa
Signing time: Sun 01 Jan 2023 07:34:56 +0000
ROA not before: Sun 01 Jan 2023 07:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47372
IP address blocks: 185.192.168.0/22 maxlen: 32
93.191.160.0/21 maxlen: 32
2a06:5d00::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Mar 2023 09:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:4d:03:c7:aa:6d:62:5c:ea:9c:35:5d:b9:4c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f87b5a62c1ff0f522812e9add1756bc73384c5
Validity
Not Before: Jan 1 07:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c22b23087ab631508f61a37af9c031b4f6eed9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3d:0c:5d:de:4f:d1:2a:e8:c1:a1:7b:67:bf:
9a:2b:59:b2:46:7d:fa:8e:73:53:f5:97:9a:b1:f5:
7a:55:47:88:69:b2:8f:85:28:e6:ba:37:75:19:af:
19:e1:90:f4:29:80:d7:16:19:3a:4d:5a:f0:7f:14:
31:ff:f2:21:05:2b:b9:4c:e2:2f:98:f6:ab:48:be:
fc:85:df:69:14:e0:81:40:8e:62:c8:70:e7:25:b8:
26:4d:c0:62:90:c5:60:7f:62:62:b2:95:b9:e6:4f:
67:6a:24:09:d3:55:76:0d:b8:2e:aa:33:8f:42:ea:
de:4c:c9:9d:0d:08:ab:dd:8c:a0:8f:79:7f:cb:ff:
a4:e5:d7:cf:25:ff:5a:4f:90:ab:f4:5e:2b:d4:92:
83:04:1a:ba:d1:34:c4:61:6a:fa:6b:ec:ac:32:84:
14:76:f6:fe:21:a4:3a:44:bf:6d:f5:6b:6a:6f:ab:
20:e6:24:d3:2e:59:bd:d4:37:ca:21:a7:d5:ca:e7:
0f:38:ff:7b:54:36:9c:c2:56:96:c2:16:65:c6:1c:
3d:42:b9:c1:2e:c0:8a:09:78:74:64:66:07:83:65:
f5:46:8c:5e:ee:8f:b8:b8:34:db:97:cb:38:ce:39:
cf:ce:fa:ce:71:30:2b:2b:d5:a1:25:cf:68:44:68:
6f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2B:23:08:7A:B6:31:50:8F:61:A3:7A:F9:C0:31:B4:F6:EE:D9:DC
X509v3 Authority Key Identifier:
keyid:54:F8:7B:5A:62:C1:FF:0F:52:28:12:E9:AD:D1:75:6B:C7:33:84:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPh7WmLB_w9SKBLprdF1a8czhMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/wisjCHq2MVCPYaN6-cAxtPbu2dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/VPh7WmLB_w9SKBLprdF1a8czhMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.160.0/21
185.192.168.0/22
IPv6:
2a06:5d00::/29
Signature Algorithm: sha256WithRSAEncryption
ae:86:dc:9c:17:2d:86:14:9d:b3:07:61:73:a4:52:e0:53:a2:
52:c1:25:76:5c:43:8b:9e:0f:78:3a:e4:26:e8:46:81:51:05:
83:60:7b:e3:ee:8f:1a:09:35:db:a8:22:b9:a1:fa:79:41:97:
b8:4e:c8:0a:aa:a5:61:ec:6b:dd:d9:70:16:94:a1:f4:f9:8e:
a1:b9:a4:68:cb:4e:2a:4f:fe:b7:df:4e:29:33:c0:38:44:67:
9f:d5:e9:c7:14:d6:ea:2e:60:9e:73:8c:31:4d:a2:c8:c9:51:
d6:4a:e7:e7:9c:77:93:64:38:af:c3:8e:23:a2:13:5e:bb:ae:
5a:fe:ba:03:65:4f:61:ff:79:dc:d2:5a:07:41:c7:c7:c5:01:
86:bd:01:b1:c4:9d:1b:53:97:e8:4d:38:0e:9c:42:c7:21:71:
6f:74:d1:e7:1b:0e:b4:b4:1b:02:1a:31:fa:6f:35:21:34:13:
10:32:68:6b:ce:78:55:e9:2e:3f:d9:3a:03:ac:77:b7:fc:4a:
e1:81:72:0e:2d:e5:64:64:79:2f:03:51:e8:f3:d7:07:46:1d:
b4:d2:3e:4d:7e:29:eb:54:7a:21:da:76:e6:f1:2f:99:1e:40:
08:fa:e2:d9:44:fc:73:c1:bf:f1:69:bc:99:22:ff:fe:ff:58:
2f:34:63:30
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVsQU0Dx6ptYlzqnDVduUz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Zjg3YjVhNjJjMWZmMGY1MjI4MTJlOWFkZDE3NTZiYzcz
Mzg0YzUwHhcNMjMwMTAxMDczNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjJiMjMwODdhYjYzMTUwOGY2MWEzN2FmOWMwMzFiNGY2ZWVkOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkD0MXd5P0SrowaF7Z7+aK1myRn36
jnNT9ZeasfV6VUeIabKPhSjmujd1Ga8Z4ZD0KYDXFhk6TVrwfxQx//IhBSu5TOIv
mParSL78hd9pFOCBQI5iyHDnJbgmTcBikMVgf2JispW55k9naiQJ01V2DbguqjOP
QureTMmdDQir3Yygj3l/y/+k5dfPJf9aT5Cr9F4r1JKDBBq60TTEYWr6a+ysMoQU
dvb+IaQ6RL9t9Wtqb6sg5iTTLlm91DfKIafVyucPOP97VDacwlaWwhZlxhw9QrnB
LsCKCXh0ZGYHg2X1Roxe7o+4uDTbl8s4zjnPzvrOcTArK9WhJc9oRGhvyQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMIrIwh6tjFQj2GjevnAMbT27tncMB8GA1UdIwQY
MBaAFFT4e1piwf8PUigS6a3RdWvHM4TFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMt
ODU1NDE4ZmZlZDQxLzEvd2lzakNIcTJNVkNQWWFONi1jQXh0UGJ1MmR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8yY2M0MTktOGUzNC00MWE5LWIyNDMtODU1NDE4ZmZlZDQx
LzEvVlBoN1dtTEJfdzlTS0JMcHJkRjFhOGN6aE1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXb+gAwQC
ucCoMA0EAgACMAcDBQMqBl0AMA0GCSqGSIb3DQEBCwUAA4IBAQCuhtycFy2GFJ2z
B2FzpFLgU6JSwSV2XEOLng94OuQm6EaBUQWDYHvj7o8aCTXbqCK5ofp5QZe4TsgK
qqVh7Gvd2XAWlKH0+Y6huaRoy04qT/63304pM8A4RGef1enHFNbqLmCec4wxTaLI
yVHWSufnnHeTZDivw44johNeu65a/roDZU9h/3nc0loHQcfHxQGGvQGxxJ0bU5fo
TTgOnELHIXFvdNHnGw60tBsCGjH6bzUhNBMQMmhrznhV6S4/2ToDrHe3/ErhgXIO
LeVkZHkvA1Ho89cHRh200j5NfinrVHoh2nbm8S+ZHkAI+uLZRPxzwb/xabyZIv/+
/1gvNGMw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:52 2024 by rpki-client on console-fra.rpki-client.org