Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DWPX-tMQ-t82pTMTj4qTHj3eZqI.roa
File: DWPX-tMQ-t82pTMTj4qTHj3eZqI.roa (raw, json)
Hash identifier: I9UanS3rTKCgu85Pmzh8/mLle3zW44PhhLXEiLhuwgk=
Subject key identifier: 0D:63:D7:FA:D3:10:FA:DF:36:A5:33:13:8F:8A:93:1E:3D:DE:66:A2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0185709550D958A357F1ABA6BD696BC0233A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DWPX-tMQ-t82pTMTj4qTHj3eZqI.roa
Signing time: Mon 02 Jan 2023 03:45:11 +0000
ROA not before: Mon 02 Jan 2023 03:45:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51495
IP address blocks: 95.47.57.0/24 maxlen: 24
93.171.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:50:d9:58:a3:57:f1:ab:a6:bd:69:6b:c0:23:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 03:45:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d63d7fad310fadf36a533138f8a931e3dde66a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:cd:9c:3b:92:f1:9e:5a:79:b7:cf:f7:dd:
c3:64:b5:63:c6:8d:6d:bc:0d:ce:f1:a9:c7:49:5b:
7f:7d:cd:b7:3e:e1:4d:fd:cb:0d:c3:21:fe:1a:ff:
ce:b9:2c:ae:f5:42:cb:7e:a6:dd:66:25:77:0e:bf:
12:b7:59:4e:c5:eb:f1:21:a9:1a:02:6b:5e:1d:b4:
37:0c:b8:2a:23:02:9a:2e:f2:26:f0:59:bd:77:44:
c5:5b:23:c5:c1:14:e4:5e:0e:86:34:d3:11:ed:97:
92:ad:f8:e2:12:c2:5a:60:d0:c4:44:8c:19:a9:00:
92:fc:f8:9d:35:cd:95:83:4f:55:83:96:b2:f4:a9:
3b:1f:d2:6e:15:b1:2e:29:8c:4b:1a:1b:ef:2c:dd:
76:74:7d:da:c2:56:b5:a7:20:d7:a1:a7:07:6f:27:
90:01:4d:72:2b:2c:32:4b:e3:7a:d6:80:e1:e3:b3:
e6:fe:23:26:1d:cf:f3:b1:32:42:81:6c:b6:6b:ec:
61:30:7d:3f:5b:a9:a7:61:77:77:50:f5:fe:3e:ca:
51:02:4c:6d:fd:ad:69:34:9e:96:2c:3b:27:3e:81:
ad:4d:28:11:0e:13:7a:bf:b2:7b:87:eb:77:0b:6c:
15:78:34:26:f4:e3:5a:36:27:00:8f:cc:69:c0:27:
02:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:D7:FA:D3:10:FA:DF:36:A5:33:13:8F:8A:93:1E:3D:DE:66:A2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DWPX-tMQ-t82pTMTj4qTHj3eZqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.220.0/22
95.47.57.0/24
Signature Algorithm: sha256WithRSAEncryption
93:22:91:3e:5d:dc:82:d5:06:e3:24:23:e2:97:51:da:4a:da:
f2:e3:2f:15:f4:9f:d1:4e:08:8c:f0:ac:b5:a4:f7:21:14:ee:
cc:1e:b6:b4:db:76:cd:d9:ab:f8:d8:cd:5a:2a:6c:e1:90:d3:
76:67:6f:fa:19:4c:62:65:a1:41:71:e1:c9:6d:3d:78:9a:f8:
73:c8:8b:11:99:5a:ce:2f:55:24:16:2e:02:3d:d8:b9:57:7c:
f5:4a:08:31:b4:9a:98:40:d8:38:74:27:7c:f7:e5:b9:27:0c:
89:39:64:92:ba:bf:74:de:5f:6e:41:00:51:ff:cd:ed:2e:eb:
00:a7:13:6b:7f:85:79:61:1d:4a:95:bd:e9:8e:19:6f:c7:92:
f1:55:59:22:d0:48:c1:f1:50:cd:93:b3:39:a3:48:72:57:60:
a3:44:4b:ad:e4:98:64:cf:63:32:52:46:0d:fb:d4:62:81:37:
8a:49:0c:fd:90:fa:56:f7:09:02:0b:b4:39:2b:99:75:17:6f:
ed:5d:3f:87:da:fc:26:5d:9a:ad:b4:0e:28:dd:8b:75:47:94:
b9:25:61:8e:bb:21:9f:9a:c5:10:94:c0:10:04:a1:56:0b:5c:
fa:f1:05:b0:7f:20:b6:b5:d5:e1:b2:a9:82:b6:4e:61:5d:bc:
97:b9:66:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwlVDZWKNX8aumvWlrwCM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjMwMTAyMDM0NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDYzZDdmYWQzMTBmYWRmMzZhNTMzMTM4ZjhhOTMxZTNkZGU2NmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbfNnDuS8Z5aebfP993DZLVjxo1t
vA3O8anHSVt/fc23PuFN/csNwyH+Gv/OuSyu9ULLfqbdZiV3Dr8St1lOxevxIaka
AmteHbQ3DLgqIwKaLvIm8Fm9d0TFWyPFwRTkXg6GNNMR7ZeSrfjiEsJaYNDERIwZ
qQCS/PidNc2Vg09Vg5ay9Kk7H9JuFbEuKYxLGhvvLN12dH3awla1pyDXoacHbyeQ
AU1yKywyS+N61oDh47Pm/iMmHc/zsTJCgWy2a+xhMH0/W6mnYXd3UPX+PspRAkxt
/a1pNJ6WLDsnPoGtTSgRDhN6v7J7h+t3C2wVeDQm9ONaNicAj8xpwCcCnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA1j1/rTEPrfNqUzE4+Kkx493maiMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRFdQWC10TVEtdDgycFRNVGo0cVRIajNlWnFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCXavcAwQA
Xy85MA0GCSqGSIb3DQEBCwUAA4IBAQCTIpE+XdyC1QbjJCPil1HaStry4y8V9J/R
TgiM8Ky1pPchFO7MHra023bN2av42M1aKmzhkNN2Z2/6GUxiZaFBceHJbT14mvhz
yIsRmVrOL1UkFi4CPdi5V3z1SggxtJqYQNg4dCd89+W5JwyJOWSSur903l9uQQBR
/83tLusApxNrf4V5YR1Klb3pjhlvx5LxVVki0EjB8VDNk7M5o0hyV2CjREut5Jhk
z2MyUkYN+9RigTeKSQz9kPpW9wkCC7Q5K5l1F2/tXT+H2vwmXZqttA4o3Yt1R5S5
JWGOuyGfmsUQlMAQBKFWC1z68QWwfyC2tdXhsqmCtk5hXbyXuWaT
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:41 2023 by rpki-client on console-fra.rpki-client.org