Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wrakHSJuQY76o_2c_pd008GAAvM.roa
File: wrakHSJuQY76o_2c_pd008GAAvM.roa (raw, json)
Hash identifier: 50spvGZEOwv66XRz6R7HpLP/icw7OafXpV6xfPmMBys=
Subject key identifier: C2:B6:A4:1D:22:6E:41:8E:FA:A3:FD:9C:FE:97:74:D3:C1:80:02:F3
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 018CC6B7ACC8292B2757C89CD4E924B04423
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wrakHSJuQY76o_2c_pd008GAAvM.roa
Signing time: Mon 01 Jan 2024 20:29:35 +0000
ROA not before: Mon 01 Jan 2024 20:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 176.57.55.0/24 maxlen: 24
81.21.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 13:43:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ac:c8:29:2b:27:57:c8:9c:d4:e9:24:b0:44:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 20:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2b6a41d226e418efaa3fd9cfe9774d3c18002f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:9b:3d:20:ed:82:25:8b:39:2a:8c:85:80:
3c:a0:22:8a:b7:dd:45:c8:c1:e5:95:80:89:22:02:
5b:ee:af:5c:79:da:c8:f1:b6:7d:75:aa:e1:7c:af:
3a:3a:74:2d:84:2d:47:76:d5:db:ed:7c:9f:e4:cd:
87:41:a8:3d:13:cc:3b:82:ba:20:44:1f:42:24:8e:
ca:f4:43:54:71:3b:d5:09:71:98:08:ca:87:85:d9:
a9:e3:01:2f:18:3e:e2:ba:02:e4:05:5c:cf:83:e3:
d1:18:01:e8:75:f1:75:b6:9f:cc:7d:c8:b3:77:f8:
a7:f2:41:b8:58:ed:05:21:41:86:63:43:5a:69:ea:
5c:ea:00:ef:37:40:0a:02:a3:37:61:5c:25:a1:4e:
0a:85:73:ae:a2:d4:e5:03:df:d4:65:af:2f:2b:31:
61:89:6a:fa:e8:bd:f1:a7:33:b2:a3:32:56:df:1c:
10:ce:ef:c8:98:4d:4f:7c:4d:e0:60:ab:10:0e:84:
2a:7e:f7:d6:39:0d:f2:d7:72:59:b1:9e:0b:89:0b:
f7:db:88:b2:b1:a6:74:a4:9d:80:10:a8:cf:37:ce:
98:fd:48:67:df:f1:65:ee:a8:d7:05:09:50:13:1c:
3e:c3:d2:32:0d:70:0a:f1:d4:cb:c2:ea:0a:f6:64:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B6:A4:1D:22:6E:41:8E:FA:A3:FD:9C:FE:97:74:D3:C1:80:02:F3
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/wrakHSJuQY76o_2c_pd008GAAvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.21.14.0/24
176.57.55.0/24
Signature Algorithm: sha256WithRSAEncryption
31:89:c7:74:38:4f:7f:cd:f4:ff:89:d5:37:e5:3d:20:f6:25:
e8:a4:cb:39:95:0f:6b:0c:d4:62:26:17:cc:da:36:f8:cb:f4:
06:ed:8f:a6:60:a7:45:71:84:ad:cd:48:04:31:b7:c7:33:f1:
78:64:3e:7c:1c:4d:a0:a5:96:27:7e:94:82:4d:98:ed:c9:05:
86:79:85:01:62:bd:19:b8:5f:b0:1f:c2:3d:54:9f:c2:9f:90:
62:31:7c:34:4e:c6:ec:3e:a6:26:ba:50:39:65:9b:28:5f:b8:
d4:1d:6d:04:1e:74:15:7b:04:89:ca:5b:dc:75:b6:2d:c7:1b:
85:66:47:78:a6:30:b8:42:62:db:ef:70:cb:76:fc:97:ae:83:
15:3a:4a:e0:eb:9d:fa:7e:eb:24:53:18:45:25:60:a9:6d:af:
ab:5e:77:fc:06:f1:eb:64:86:e1:08:c8:a3:0a:ea:f0:2d:07:
f3:e8:01:f3:ba:71:18:e7:db:29:20:3f:20:55:cc:d4:01:1c:
3c:62:35:ec:53:82:df:d2:14:50:4d:29:f3:60:47:48:35:ee:
c7:d9:03:2f:c8:8b:c1:03:d4:07:3c:f2:da:08:c1:d2:74:37:
19:13:1c:af:00:43:c3:00:f8:59:ce:1c:e2:db:ff:5a:f6:c2:
44:d6:47:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGt6zIKSsnV8ic1OkksEQjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZjE5MDc0NTQ4ZDJhMjk0ZTQzODVkOTVjZDY3NTI0OTBl
ZTQ2ZDcwHhcNMjQwMTAxMjAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmI2YTQxZDIyNmU0MThlZmFhM2ZkOWNmZTk3NzRkM2MxODAwMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUObPSDtgiWLOSqMhYA8oCKKt91F
yMHllYCJIgJb7q9cedrI8bZ9darhfK86OnQthC1HdtXb7Xyf5M2HQag9E8w7grog
RB9CJI7K9ENUcTvVCXGYCMqHhdmp4wEvGD7iugLkBVzPg+PRGAHodfF1tp/Mfciz
d/in8kG4WO0FIUGGY0Naaepc6gDvN0AKAqM3YVwloU4KhXOuotTlA9/UZa8vKzFh
iWr66L3xpzOyozJW3xwQzu/ImE1PfE3gYKsQDoQqfvfWOQ3y13JZsZ4LiQv324iy
saZ0pJ2AEKjPN86Y/Uhn3/Fl7qjXBQlQExw+w9IyDXAK8dTLwuoK9mQN0QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMK2pB0ibkGO+qP9nP6XdNPBgALzMB8GA1UdIwQY
MBaAFBXxkHRUjSopTkOF2VzWdSSQ7kbXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2Qt
NTYyNDRmNDMwZGNjLzEvd3Jha0hTSnVRWTc2b18yY19wZDAwOEdBQXZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMDYyNDEtODA4ZC00YTQ5LWIwY2QtNTYyNDRmNDMwZGNj
LzEvRmZHUWRGU05LaWxPUTRYWlhOWjFKSkR1UnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURUOAwQA
sDk3MA0GCSqGSIb3DQEBCwUAA4IBAQAxicd0OE9/zfT/idU35T0g9iXopMs5lQ9r
DNRiJhfM2jb4y/QG7Y+mYKdFcYStzUgEMbfHM/F4ZD58HE2gpZYnfpSCTZjtyQWG
eYUBYr0ZuF+wH8I9VJ/Cn5BiMXw0TsbsPqYmulA5ZZsoX7jUHW0EHnQVewSJylvc
dbYtxxuFZkd4pjC4QmLb73DLdvyXroMVOkrg6536fuskUxhFJWCpba+rXnf8BvHr
ZIbhCMijCurwLQfz6AHzunEY59spID8gVczUARw8YjXsU4Lf0hRQTSnzYEdINe7H
2QMvyIvBA9QHPPLaCMHSdDcZExyvAEPDAPhZzhzi2/9a9sJE1kdQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:55 2024 by rpki-client on console-fra.rpki-client.org