Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbSmj-vo3zL222biuPvFFH3ZHjU.roa
File: wbSmj-vo3zL222biuPvFFH3ZHjU.roa (raw, json)
Hash identifier: e4Zfl8nLYe8C26SBq3bxLdhVuVZ/A/JVFYN1x61stiw=
Subject key identifier: C1:B4:A6:8F:EB:E8:DF:32:F6:DB:66:E2:B8:FB:C5:14:7D:D9:1E:35
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0188C54E9E7BA58FB736F4B6496C78258398
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbSmj-vo3zL222biuPvFFH3ZHjU.roa
Signing time: Fri 16 Jun 2023 17:44:03 +0000
ROA not before: Fri 16 Jun 2023 17:44:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 86.107.51.0/24 maxlen: 24
89.36.140.0/24 maxlen: 24
89.35.130.0/23 maxlen: 23
89.35.131.0/24 maxlen: 24
46.102.237.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
94.198.171.0/24 maxlen: 24
92.114.32.0/24 maxlen: 24
77.81.88.0/24 maxlen: 24
89.45.35.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
176.223.188.0/24 maxlen: 24
86.105.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Jun 2023 20:46:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c5:4e:9e:7b:a5:8f:b7:36:f4:b6:49:6c:78:25:83:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 16 17:44:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1b4a68febe8df32f6db66e2b8fbc5147dd91e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:88:1e:8a:e6:ab:0f:f4:02:76:1d:91:1d:24:
e9:e3:e3:d0:75:54:09:82:a7:32:eb:56:9d:0d:1a:
d8:9e:f1:a3:8e:c1:83:aa:b9:ce:5e:e1:ae:4d:89:
28:bf:9c:da:18:9e:24:0d:12:fd:17:b5:f4:24:d5:
62:63:ee:cf:0a:31:8d:aa:61:8c:af:48:1c:65:10:
6d:27:aa:61:80:e8:11:a9:e0:79:41:10:4f:b6:8b:
26:b5:85:bf:c1:b5:cb:da:46:90:30:13:d7:06:9e:
e0:89:c9:96:e8:c3:5e:28:44:7c:95:68:4c:96:6c:
e8:e4:16:01:d6:d1:1c:78:7e:54:a7:ad:3f:8d:86:
53:44:27:90:f8:4e:ee:de:b0:4c:84:30:26:c2:11:
93:e9:1d:4c:63:af:4d:5c:d3:06:d7:99:ee:03:f5:
26:16:7a:88:1a:12:46:a3:52:b3:b3:7a:70:40:04:
cc:7e:b7:2e:63:0a:78:a3:0f:23:34:9e:22:7a:93:
7c:ee:48:fc:a5:2e:72:14:3c:42:bc:20:70:97:61:
02:9a:6b:0a:f4:a9:c3:ab:bc:49:d9:1a:5e:0a:75:
39:0f:db:1e:93:3b:8a:da:87:74:84:57:d5:0d:da:
d9:8c:6e:7e:2c:42:da:97:ee:68:6b:c8:25:1c:f4:
28:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B4:A6:8F:EB:E8:DF:32:F6:DB:66:E2:B8:FB:C5:14:7D:D9:1E:35
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wbSmj-vo3zL222biuPvFFH3ZHjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.237.0/24
77.81.88.0/24
86.105.4.0/24
86.107.51.0/24
89.35.130.0/23
89.36.140.0/24
89.45.35.0/24
92.114.32.0/24
94.198.171.0/24
176.223.188.0/24
188.214.107.0/24
188.241.137.0/24
Signature Algorithm: sha256WithRSAEncryption
67:84:aa:4e:e0:6d:b0:ca:08:79:ba:91:40:08:05:c5:2c:2c:
9d:eb:7e:39:2e:3a:07:84:11:16:e6:62:9a:b6:b4:d2:90:09:
6d:94:66:c4:09:5a:ce:6b:47:65:85:a2:3d:f5:3b:29:1f:ab:
36:0b:ce:8e:04:36:1b:7d:bb:d6:99:d6:44:57:e7:03:0f:85:
43:27:15:72:4b:af:fc:e5:dd:1c:a8:e7:21:af:fd:3c:72:0f:
f9:cc:ab:f5:cb:11:b2:a0:4c:93:73:c2:af:c5:df:a4:76:d0:
0d:92:87:19:83:2d:4b:80:14:1d:78:db:35:bd:08:32:ea:9c:
e3:94:e1:b4:51:79:54:27:62:8b:44:98:36:9c:d5:2b:a2:e9:
b0:d1:97:58:61:18:61:0f:56:48:e5:8d:40:db:a9:81:44:14:
d3:d1:00:ed:69:2f:b6:70:0c:ee:51:92:f9:87:96:d8:91:8e:
e0:36:3c:07:d7:2f:a9:42:f1:9f:0a:66:5c:24:cc:43:e2:81:
5a:11:89:3c:fb:c2:b0:d0:e1:db:4d:b7:4c:a2:3f:72:6c:53:
83:b7:1e:c3:32:2d:e1:c1:67:26:df:52:38:d8:00:2c:a4:0b:
46:99:fc:53:06:e4:b9:dd:f2:5a:90:26:fe:a8:af:e5:ab:c7:
11:7c:69:f0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAYjFTp57pY+3NvS2SWx4JYOYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwNjE2MTc0NDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWI0YTY4ZmViZThkZjMyZjZkYjY2ZTJiOGZiYzUxNDdkZDkxZTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIgeiuarD/QCdh2RHSTp4+PQdVQJ
gqcy61adDRrYnvGjjsGDqrnOXuGuTYkov5zaGJ4kDRL9F7X0JNViY+7PCjGNqmGM
r0gcZRBtJ6phgOgRqeB5QRBPtosmtYW/wbXL2kaQMBPXBp7gicmW6MNeKER8lWhM
lmzo5BYB1tEceH5Up60/jYZTRCeQ+E7u3rBMhDAmwhGT6R1MY69NXNMG15nuA/Um
FnqIGhJGo1Kzs3pwQATMfrcuYwp4ow8jNJ4iepN87kj8pS5yFDxCvCBwl2ECmmsK
9KnDq7xJ2RpeCnU5D9sekzuK2od0hFfVDdrZjG5+LELal+5oa8glHPQoZQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFMG0po/r6N8y9ttm4rj7xRR92R41MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd2JTbWotdm8zekwyMjJiaXVQdkZGSDNaSGpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQALmbtAwQA
TVFYAwQAVmkEAwQAVmszAwQBWSOCAwQAWSSMAwQAWS0jAwQAXHIgAwQAXsarAwQA
sN+8AwQAvNZrAwQAvPGJMA0GCSqGSIb3DQEBCwUAA4IBAQBnhKpO4G2wygh5upFA
CAXFLCyd6345LjoHhBEW5mKatrTSkAltlGbECVrOa0dlhaI99TspH6s2C86OBDYb
fbvWmdZEV+cDD4VDJxVyS6/85d0cqOchr/08cg/5zKv1yxGyoEyTc8Kvxd+kdtAN
kocZgy1LgBQdeNs1vQgy6pzjlOG0UXlUJ2KLRJg2nNUroumw0ZdYYRhhD1ZI5Y1A
26mBRBTT0QDtaS+2cAzuUZL5h5bYkY7gNjwH1y+pQvGfCmZcJMxD4oFaEYk8+8Kw
0OHbTbdMoj9ybFODtx7DMi3hwWcm31I42AAspAtGmfxTBuS53fJakCb+qK/lq8cR
fGnw
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:11 2024 by rpki-client on console-fra.rpki-client.org