Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/bWWtN815wdNdwD5p3wImQWr3rBk.roa
File: bWWtN815wdNdwD5p3wImQWr3rBk.roa (raw, json)
Hash identifier: 8lHy03LfV5p7Rr6ioufilx2Nz8gd+YUJmy06HXpGbfM=
Subject key identifier: 6D:65:AD:37:CD:79:C1:D3:5D:C0:3E:69:DF:02:26:41:6A:F7:AC:19
Certificate issuer: /CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Certificate serial: 018C865B680C5079368B7259203531EA1824
Authority key identifier: 58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/bWWtN815wdNdwD5p3wImQWr3rBk.roa
Signing time: Wed 20 Dec 2023 08:33:06 +0000
ROA not before: Wed 20 Dec 2023 08:33:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 176.97.210.0/24 maxlen: 24
2a12:b200::/29 maxlen: 29
2a07:4b40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:5b:68:0c:50:79:36:8b:72:59:20:35:31:ea:18:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ff89023b87c0bf8479b9ff4725258613e4f0b5
Validity
Not Before: Dec 20 08:33:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d65ad37cd79c1d35dc03e69df0226416af7ac19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:52:62:eb:66:18:4d:a1:fb:97:32:ed:8d:
e2:79:24:89:85:23:b5:c5:a4:12:bf:62:cc:c2:99:
da:9a:66:9d:2e:6a:28:c1:89:04:b4:d6:ed:05:e1:
52:e2:77:e2:a2:d6:bf:51:8d:25:2e:1d:88:95:6a:
e9:10:11:77:5b:16:8b:f8:f0:74:50:17:b3:41:d6:
57:06:a4:55:ef:67:50:99:60:cf:31:22:b9:f1:ac:
e8:b2:14:a0:87:7d:aa:95:34:89:bb:8f:47:13:1a:
e0:14:e0:06:01:63:5d:6b:02:5a:9b:2d:65:3f:0c:
d6:1c:80:6b:7e:ad:9e:11:bd:f5:3f:10:ea:85:8f:
4f:29:ae:88:8c:6c:67:75:d2:72:fc:99:d6:e0:86:
17:3e:1d:52:80:e7:f8:ec:4b:b6:e6:4b:25:c2:b8:
fb:1e:53:17:30:b1:05:7e:2f:60:9d:55:c9:bc:14:
95:9b:a1:26:f0:c0:a5:d1:fe:3b:c3:7f:3b:bd:b9:
87:a5:1b:94:85:12:97:5f:2d:56:2f:bb:41:3f:a9:
40:99:f5:18:45:15:5c:a1:de:df:07:48:b8:fb:68:
71:41:24:8f:06:e3:80:0d:54:75:39:d8:6b:08:59:
8f:c7:e5:f5:45:d5:f2:73:9c:a8:cc:47:d5:93:dd:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:65:AD:37:CD:79:C1:D3:5D:C0:3E:69:DF:02:26:41:6A:F7:AC:19
X509v3 Authority Key Identifier:
keyid:58:FF:89:02:3B:87:C0:BF:84:79:B9:FF:47:25:25:86:13:E4:F0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WP-JAjuHwL-Eebn_RyUlhhPk8LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/bWWtN815wdNdwD5p3wImQWr3rBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/bebb6f-947a-4eac-85b1-36313c532d04/1/WP-JAjuHwL-Eebn_RyUlhhPk8LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.97.210.0/24
IPv6:
2a07:4b40::/29
2a12:b200::/29
Signature Algorithm: sha256WithRSAEncryption
8d:26:35:38:98:f3:88:ba:86:0f:65:29:cc:9c:a1:ef:b0:2c:
21:fc:43:2d:e9:e5:f5:8e:8c:80:05:57:84:0e:6a:1a:36:62:
0a:b6:1a:08:b8:10:2c:b5:59:05:3e:04:b6:99:31:4b:18:f6:
89:24:6c:53:5b:99:d4:25:54:d3:2c:f0:bd:73:d1:03:4f:d3:
9e:5b:2c:08:80:8f:4a:f2:bd:cd:70:7e:e4:34:7f:40:13:f2:
ae:e8:5d:9b:66:cc:9d:5e:da:c0:92:03:3b:42:3d:c3:7e:98:
0c:27:f5:dd:fb:99:db:0f:65:12:fd:18:e2:10:1f:e9:b6:50:
29:38:df:f2:6f:3e:df:ba:84:e7:27:99:a3:4a:95:49:89:82:
ae:dc:7a:4a:83:ce:dd:a0:6b:6b:9b:45:3e:be:63:e2:c1:15:
52:14:3f:7a:27:ef:1d:0b:5c:26:88:b2:a8:ed:c8:84:62:4f:
e2:0f:d7:48:bc:b1:00:a2:61:38:91:1a:28:69:96:a5:b0:1e:
4c:5c:a2:4b:27:da:b2:fc:83:49:34:1d:1f:04:da:f0:7e:40:
03:03:53:89:ca:9c:a2:b8:2b:46:22:bd:3a:98:4d:8b:a3:53:
32:1e:f6:01:ed:fa:21:99:26:e1:fb:05:95:f2:23:41:0d:95:
20:29:c1:5d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYyGW2gMUHk2i3JZIDUx6hgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZmY4OTAyM2I4N2MwYmY4NDc5YjlmZjQ3MjUyNTg2MTNl
NGYwYjUwHhcNMjMxMjIwMDgzMzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDY1YWQzN2NkNzljMWQzNWRjMDNlNjlkZjAyMjY0MTZhZjdhYzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygtSYutmGE2h+5cy7Y3ieSSJhSO1
xaQSv2LMwpnammadLmoowYkEtNbtBeFS4nfiota/UY0lLh2IlWrpEBF3WxaL+PB0
UBezQdZXBqRV72dQmWDPMSK58azoshSgh32qlTSJu49HExrgFOAGAWNdawJamy1l
PwzWHIBrfq2eEb31PxDqhY9PKa6IjGxnddJy/JnW4IYXPh1SgOf47Eu25kslwrj7
HlMXMLEFfi9gnVXJvBSVm6Em8MCl0f47w387vbmHpRuUhRKXXy1WL7tBP6lAmfUY
RRVcod7fB0i4+2hxQSSPBuOADVR1OdhrCFmPx+X1RdXyc5yozEfVk91OfQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFG1lrTfNecHTXcA+ad8CJkFq96wZMB8GA1UdIwQY
MBaAFFj/iQI7h8C/hHm5/0clJYYT5PC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEt
MzYzMTNjNTMyZDA0LzEvYldXdE44MTV3ZE5kd0Q1cDN3SW1RV3IzckJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9iZWJiNmYtOTQ3YS00ZWFjLTg1YjEtMzYzMTNjNTMyZDA0
LzEvV1AtSkFqdUh3TC1FZWJuX1J5VWxoaFBrOExVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQAsGHSMBQE
AgACMA4DBQMqB0tAAwUDKhKyADANBgkqhkiG9w0BAQsFAAOCAQEAjSY1OJjziLqG
D2UpzJyh77AsIfxDLenl9Y6MgAVXhA5qGjZiCrYaCLgQLLVZBT4EtpkxSxj2iSRs
U1uZ1CVU0yzwvXPRA0/TnlssCICPSvK9zXB+5DR/QBPyruhdm2bMnV7awJIDO0I9
w36YDCf13fuZ2w9lEv0Y4hAf6bZQKTjf8m8+37qE5yeZo0qVSYmCrtx6SoPO3aBr
a5tFPr5j4sEVUhQ/eifvHQtcJoiyqO3IhGJP4g/XSLyxAKJhOJEaKGmWpbAeTFyi
SyfasvyDSTQdHwTa8H5AAwNTicqcorgrRiK9OphNi6NTMh72Ae36IZkm4fsFlfIj
QQ2VICnBXQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:33 2024 by rpki-client on console-ams.rpki-client.org