Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/wA_UAAdT1UsFDQIA94pUx9BvQRM.roa
File: wA_UAAdT1UsFDQIA94pUx9BvQRM.roa (raw, json)
Hash identifier: fgmAM8g1TRpZ2udnAATN/SYvaUDswUzI64RAR0YZdIM=
Subject key identifier: C0:0F:D4:00:07:53:D5:4B:05:0D:02:00:F7:8A:54:C7:D0:6F:41:13
Certificate issuer: /CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Certificate serial: 01856F79A447A053C31C7D6EE58E33497E6F
Authority key identifier: D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/wA_UAAdT1UsFDQIA94pUx9BvQRM.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48233
IP address blocks: 151.237.84.0/22 maxlen: 24
194.69.201.0/24 maxlen: 24
85.187.192.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a4:47:a0:53:c3:1c:7d:6e:e5:8e:33:49:7e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2622fdec8fadfca58e7575c29f10e73ae775715
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c00fd4000753d54b050d0200f78a54c7d06f4113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:26:51:7d:d7:d3:37:c7:03:43:52:c9:c5:88:
44:be:7d:07:51:59:11:93:54:3b:09:49:39:ee:e1:
39:d7:ff:e1:2d:ae:66:fc:b9:29:d9:7e:18:71:00:
ab:0a:ce:b1:69:2e:bf:a1:cc:23:5c:db:73:ed:26:
d9:4b:0a:99:b3:17:9f:f6:0e:82:59:9e:87:bb:ea:
19:94:2a:3e:68:72:ea:74:d7:2b:da:41:59:fc:97:
24:77:80:47:66:cb:0b:4a:b9:11:0d:fe:5f:4e:f1:
12:ed:54:d7:c4:db:05:00:7a:03:b2:e9:84:a3:c6:
9d:47:79:64:d2:9c:ec:f4:10:dc:42:09:16:1d:b7:
90:f5:12:2e:03:6d:f8:86:8e:60:7d:a6:c3:1c:eb:
0b:5b:60:ea:5c:2e:62:c6:32:3d:31:43:5d:3f:56:
59:6f:39:d9:41:06:75:8f:41:2f:9c:0a:b6:21:12:
59:cb:b6:57:e5:0d:27:f4:65:47:d1:9d:45:fc:34:
23:41:c8:c3:d5:db:10:7b:d2:8e:cd:a5:ec:4f:5b:
79:53:b4:0c:d7:31:72:11:99:52:c3:81:cc:89:06:
17:f7:7e:f5:f5:78:47:5e:fc:ab:b4:0f:53:fa:9a:
d8:a7:7b:09:c5:3e:5e:e4:ec:f0:76:21:cb:8f:30:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0F:D4:00:07:53:D5:4B:05:0D:02:00:F7:8A:54:C7:D0:6F:41:13
X509v3 Authority Key Identifier:
keyid:D2:62:2F:DE:C8:FA:DF:CA:58:E7:57:5C:29:F1:0E:73:AE:77:57:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mIv3sj638pY51dcKfEOc653VxU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/wA_UAAdT1UsFDQIA94pUx9BvQRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/85f02e-f1ac-44fb-92eb-f05aa229d638/1/0mIv3sj638pY51dcKfEOc653VxU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.192.0/21
151.237.84.0/22
194.69.201.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:09:03:cf:47:0f:a7:40:c5:18:bf:e1:0b:94:72:5c:5f:e1:
40:6f:d4:a6:85:6f:a2:d0:33:82:73:dc:31:bc:2e:b8:d9:65:
6d:c4:44:04:14:5c:97:57:eb:eb:97:8d:65:41:d7:3e:49:65:
8e:b8:8e:a5:37:63:32:a0:ef:07:f4:2b:b4:00:6c:35:25:37:
c7:9b:b1:87:cb:6c:8b:55:69:a3:54:64:9c:c1:f7:04:15:1b:
26:b4:79:92:98:5e:c2:e9:57:c8:16:2e:6a:42:0e:0a:af:4b:
fe:a4:9d:d7:9f:0b:0d:67:c9:9d:b8:77:b6:77:09:f3:85:9e:
a5:93:4d:23:e2:bd:95:84:5a:ac:a5:fd:87:b0:57:e8:e7:f6:
90:da:98:7f:0c:e6:f4:7a:e9:51:d8:ef:f1:06:13:c4:49:31:
75:f5:14:3f:6d:09:1c:fb:7e:99:c7:d9:7d:63:60:69:ec:be:
61:01:4e:8f:3e:d8:eb:a4:21:c3:6f:f2:5c:d4:2f:49:3a:5f:
ee:b4:b9:6b:ab:65:53:5a:30:b8:38:69:0e:14:ea:58:7f:a7:
e4:2a:76:c0:cf:28:31:3b:fb:d5:61:6c:3c:10:69:97:f4:fa:
bf:7b:66:a3:64:9a:b7:08:b0:ce:a7:d4:68:4c:ea:7a:17:02:
35:e0:55:28
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVveaRHoFPDHH1u5Y4zSX5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjIyZmRlYzhmYWRmY2E1OGU3NTc1YzI5ZjEwZTczYWU3
NzU3MTUwHhcNMjMwMTAxMjIzNTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDBmZDQwMDA3NTNkNTRiMDUwZDAyMDBmNzhhNTRjN2QwNmY0MTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSZRfdfTN8cDQ1LJxYhEvn0HUVkR
k1Q7CUk57uE51//hLa5m/Lkp2X4YcQCrCs6xaS6/ocwjXNtz7SbZSwqZsxef9g6C
WZ6Hu+oZlCo+aHLqdNcr2kFZ/Jckd4BHZssLSrkRDf5fTvES7VTXxNsFAHoDsumE
o8adR3lk0pzs9BDcQgkWHbeQ9RIuA234ho5gfabDHOsLW2DqXC5ixjI9MUNdP1ZZ
bznZQQZ1j0EvnAq2IRJZy7ZX5Q0n9GVH0Z1F/DQjQcjD1dsQe9KOzaXsT1t5U7QM
1zFyEZlSw4HMiQYX93719XhHXvyrtA9T+prYp3sJxT5e5OzwdiHLjzB8gwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMAP1AAHU9VLBQ0CAPeKVMfQb0ETMB8GA1UdIwQY
MBaAFNJiL97I+t/KWOdXXCnxDnOud1cVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWIt
ZjA1YWEyMjlkNjM4LzEvd0FfVUFBZFQxVXNGRFFJQTk0cFV4OUJ2UVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS84NWYwMmUtZjFhYy00NGZiLTkyZWItZjA1YWEyMjlkNjM4
LzEvMG1JdjNzajYzOHBZNTFkY0tmRU9jNjUzVnhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDVbvAAwQC
l+1UAwQAwkXJMA0GCSqGSIb3DQEBCwUAA4IBAQBNCQPPRw+nQMUYv+ELlHJcX+FA
b9SmhW+i0DOCc9wxvC642WVtxEQEFFyXV+vrl41lQdc+SWWOuI6lN2MyoO8H9Cu0
AGw1JTfHm7GHy2yLVWmjVGScwfcEFRsmtHmSmF7C6VfIFi5qQg4Kr0v+pJ3XnwsN
Z8mduHe2dwnzhZ6lk00j4r2VhFqspf2HsFfo5/aQ2ph/DOb0eulR2O/xBhPESTF1
9RQ/bQkc+36Zx9l9Y2Bp7L5hAU6PPtjrpCHDb/Jc1C9JOl/utLlrq2VTWjC4OGkO
FOpYf6fkKnbAzygxO/vVYWw8EGmX9Pq/e2ajZJq3CLDOp9RoTOp6FwI14FUo
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:45 2024 by rpki-client on console-ams.rpki-client.org