Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w_WprghCPozOkVsaMDPaNfYfiSU.roa
File: w_WprghCPozOkVsaMDPaNfYfiSU.roa (raw, json)
Hash identifier: Qs2TBWwVr7O+aG2J1bxiMUbAc0cni8FMU0pOOfs1PKg=
Subject key identifier: C3:F5:A9:AE:08:42:3E:8C:CE:91:5B:1A:30:33:DA:35:F6:1F:89:25
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D7E4A2EFBCF07F19F84B66B8153D4090C
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w_WprghCPozOkVsaMDPaNfYfiSU.roa
Signing time: Tue 06 Feb 2024 12:00:07 +0000
ROA not before: Tue 06 Feb 2024 12:00:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 185.212.119.0/24 maxlen: 24
188.215.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 05:36:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7e:4a:2e:fb:cf:07:f1:9f:84:b6:6b:81:53:d4:09:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 6 12:00:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c3f5a9ae08423e8cce915b1a3033da35f61f8925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7a:88:3b:39:b8:c6:a4:63:46:98:73:7d:fd:
12:cb:dc:c7:ce:82:4c:a9:87:3e:d1:b1:16:84:c8:
30:45:11:4f:98:49:4d:b2:88:37:fc:12:76:dc:e4:
86:db:35:41:e8:8a:78:8f:a9:e5:d0:b8:f6:a5:25:
77:ff:ae:70:74:14:94:b4:18:4a:74:19:a6:95:23:
39:de:68:fd:54:06:d6:11:d6:bd:4d:f0:6b:df:a3:
ce:d1:b2:00:53:8b:6c:9a:24:14:1a:b1:a3:3e:d8:
5b:78:72:8b:57:e4:76:7c:99:d2:ae:49:1d:b2:19:
10:38:2f:ed:a7:42:5e:c3:61:48:33:23:ad:96:4b:
37:3e:4c:02:4d:ec:a5:3c:8f:d6:bf:b5:df:50:17:
18:e6:b8:d8:6e:4b:c6:78:b2:da:ec:eb:b1:eb:2b:
46:ad:cf:a7:da:91:ff:81:05:b3:12:bb:c6:c6:9e:
63:71:3b:42:91:d1:80:98:c0:c8:d2:0a:cc:7b:a1:
55:7f:f3:c0:c3:94:72:50:bb:47:07:1c:4d:4b:20:
e3:58:b0:ce:28:c9:c0:57:5a:90:12:49:c8:01:c8:
97:2c:22:f6:26:c7:1b:d0:d7:68:4b:5e:b2:30:8c:
0e:71:3e:26:5f:3f:96:6b:64:eb:33:d4:f7:25:30:
d3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F5:A9:AE:08:42:3E:8C:CE:91:5B:1A:30:33:DA:35:F6:1F:89:25
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/w_WprghCPozOkVsaMDPaNfYfiSU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.119.0/24
188.215.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b2:5b:e8:78:66:53:25:28:93:0b:09:fd:ac:25:e5:12:80:
c8:6f:fc:69:37:29:f8:11:98:20:98:28:dd:3d:e6:4c:4a:2f:
e8:ee:45:30:b0:7e:97:55:0a:77:dc:f3:c4:e4:09:c4:02:da:
24:d3:b8:6e:9f:2e:1b:62:33:3c:51:47:19:91:ae:06:99:4f:
ba:2f:23:7e:73:a9:8b:dd:f7:87:a7:7b:bb:dd:00:ae:ea:4b:
45:76:e7:b2:57:82:b6:0e:13:b2:b4:de:46:e8:85:f7:cb:72:
ad:0c:5c:a6:8a:5e:9f:5e:05:51:dd:f4:89:86:8e:04:8c:49:
af:72:68:04:7f:d6:15:e5:43:eb:4f:ea:c0:0d:f0:20:db:7a:
57:1c:ed:6d:c4:ff:a6:b1:15:4b:38:a0:f1:cb:73:01:fa:24:
71:6e:d9:51:d7:b6:27:a4:8b:95:8e:35:72:f5:aa:f0:be:1d:
03:fc:47:b5:e9:2a:26:c8:32:f4:05:7c:0c:47:2b:ad:55:ac:
2d:28:c4:c8:18:a6:8d:66:45:e0:90:a4:cf:3d:c2:63:36:dd:
78:73:3a:26:3e:2e:6a:8e:c8:38:81:a9:92:46:14:e2:6e:3f:
e3:35:2e:cc:2a:b7:f0:d8:c5:67:00:e8:4e:7c:ec:9c:17:70:
ec:9a:a8:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1+Si77zwfxn4S2a4FT1AkMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwMjA2MTIwMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2Y1YTlhZTA4NDIzZThjY2U5MTViMWEzMDMzZGEzNWY2MWY4OTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXqIOzm4xqRjRphzff0Sy9zHzoJM
qYc+0bEWhMgwRRFPmElNsog3/BJ23OSG2zVB6Ip4j6nl0Lj2pSV3/65wdBSUtBhK
dBmmlSM53mj9VAbWEda9TfBr36PO0bIAU4tsmiQUGrGjPthbeHKLV+R2fJnSrkkd
shkQOC/tp0Jew2FIMyOtlks3PkwCTeylPI/Wv7XfUBcY5rjYbkvGeLLa7Oux6ytG
rc+n2pH/gQWzErvGxp5jcTtCkdGAmMDI0grMe6FVf/PAw5RyULtHBxxNSyDjWLDO
KMnAV1qQEknIAciXLCL2Jscb0NdoS16yMIwOcT4mXz+Wa2TrM9T3JTDTawIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMP1qa4IQj6MzpFbGjAz2jX2H4klMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd19XcHJnaENQb3pPa1ZzYU1EUGFOZllmaVNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAudR3AwQA
vNcfMA0GCSqGSIb3DQEBCwUAA4IBAQAdslvoeGZTJSiTCwn9rCXlEoDIb/xpNyn4
EZggmCjdPeZMSi/o7kUwsH6XVQp33PPE5AnEAtok07huny4bYjM8UUcZka4GmU+6
LyN+c6mL3feHp3u73QCu6ktFdueyV4K2DhOytN5G6IX3y3KtDFymil6fXgVR3fSJ
ho4EjEmvcmgEf9YV5UPrT+rADfAg23pXHO1txP+msRVLOKDxy3MB+iRxbtlR17Yn
pIuVjjVy9arwvh0D/Ee16SomyDL0BXwMRyutVawtKMTIGKaNZkXgkKTPPcJjNt14
czomPi5qjsg4gamSRhTibj/jNS7MKrfw2MVnAOhOfOycF3DsmqgQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org