Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/Wa-SM_usxsfXcnOVKMLFBA1mof4.roa
File: Wa-SM_usxsfXcnOVKMLFBA1mof4.roa (raw, json)
Hash identifier: bu4h6OoHNjbnauWExGmGeRR+cL7JcuL8HFxM6OUEOHQ=
Subject key identifier: 59:AF:92:33:FB:AC:C6:C7:D7:72:73:95:28:C2:C5:04:0D:66:A1:FE
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 018572A7FD22A6F84AAA978B24A2FFE3265B
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/Wa-SM_usxsfXcnOVKMLFBA1mof4.roa
Signing time: Mon 02 Jan 2023 13:24:49 +0000
ROA not before: Mon 02 Jan 2023 13:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12570
IP address blocks: 193.17.248.0/22 maxlen: 22
195.78.122.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a7:fd:22:a6:f8:4a:aa:97:8b:24:a2:ff:e3:26:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jan 2 13:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59af9233fbacc6c7d772739528c2c5040d66a1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:88:2d:3b:86:82:fa:0a:6a:03:03:dd:44:
06:68:5c:c4:64:58:10:f6:b6:92:ca:7d:80:66:8b:
9e:97:47:ac:03:5b:72:b7:58:b8:33:b2:42:e9:39:
82:01:07:ec:44:54:a8:0d:a0:9a:ba:85:5f:01:17:
15:49:05:06:b3:51:8c:78:b7:90:c1:4e:23:c1:81:
d0:69:5a:59:b8:7c:5c:64:bb:88:af:6d:10:a2:fa:
cd:72:d2:f0:7f:f7:80:2b:34:85:82:e0:b0:56:99:
fb:2a:26:de:47:2c:e1:fe:6a:bb:3f:87:ce:d0:01:
3a:ab:a1:0f:b7:c2:79:6b:9a:55:64:af:f6:fd:6c:
aa:cb:54:84:c2:27:bc:86:83:17:37:6d:9f:44:c9:
c9:10:a7:1c:1d:bd:7b:c1:81:61:a4:5c:0b:b0:80:
24:c0:0b:e9:0a:18:8a:c8:a4:1d:21:19:ba:c3:8c:
b9:4f:c6:0e:a1:c7:a1:b7:65:e2:70:c8:a6:b1:07:
0d:c6:0d:26:16:a9:49:78:ca:f0:b2:63:31:84:7b:
ae:54:3f:22:df:ab:f7:5a:67:f4:16:cd:16:74:35:
3c:34:04:08:6b:50:21:bf:44:cf:98:3e:e8:db:c9:
3f:40:93:1c:81:e2:3e:ab:0c:d2:13:5a:aa:4a:51:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AF:92:33:FB:AC:C6:C7:D7:72:73:95:28:C2:C5:04:0D:66:A1:FE
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/Wa-SM_usxsfXcnOVKMLFBA1mof4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.248.0/22
195.78.122.0/23
Signature Algorithm: sha256WithRSAEncryption
08:32:14:4c:05:50:e0:4b:ad:a7:0d:56:2c:97:92:36:8c:5b:
28:b9:e0:22:e3:fc:c0:9f:bc:78:4c:33:77:0f:07:1e:0d:97:
20:8d:2c:cc:4a:c0:c1:2c:74:3b:31:1f:4c:48:66:2b:05:e6:
e9:3a:ba:0f:4d:a9:c7:3f:bd:da:90:c8:55:84:59:79:f0:25:
a1:fd:d6:10:eb:29:48:03:db:5c:54:c4:eb:20:da:97:67:8e:
6a:30:43:ab:5b:50:5e:d8:97:f2:a6:0c:16:bf:e2:49:61:b3:
fc:b0:e0:b4:64:1f:3d:78:c9:7a:d4:75:5c:14:6c:e2:b3:4d:
b6:7c:ba:1c:a1:dc:7b:59:6f:78:7c:8e:3b:20:4e:6e:37:bf:
ac:5a:07:30:35:6c:ce:de:a2:9e:6d:68:19:cb:f9:23:c9:76:
7a:62:27:29:25:90:f0:db:b9:7d:9b:74:d5:a1:d1:bd:22:3e:
7d:13:8f:4c:e9:66:77:e0:dc:1c:07:9d:68:3f:64:f7:23:2f:
87:3b:d6:d9:94:70:11:72:22:8e:eb:c5:79:14:80:16:94:20:
82:99:e5:5b:60:bb:86:70:a1:e5:ce:91:85:50:64:37:e8:4a:
52:08:e7:00:f5:cc:1e:b9:ae:61:0f:f7:a1:63:be:db:82:33:
a6:46:ad:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyp/0ipvhKqpeLJKL/4yZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4N2QzMDExOTM1MTUwMGYyNTlhNTdlMmZmNjg1MDc5N2Qx
YjRlMWEwHhcNMjMwMTAyMTMyNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWFmOTIzM2ZiYWNjNmM3ZDc3MjczOTUyOGMyYzUwNDBkNjZhMWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB2ILTuGgvoKagMD3UQGaFzEZFgQ
9raSyn2AZouel0esA1tyt1i4M7JC6TmCAQfsRFSoDaCauoVfARcVSQUGs1GMeLeQ
wU4jwYHQaVpZuHxcZLuIr20QovrNctLwf/eAKzSFguCwVpn7KibeRyzh/mq7P4fO
0AE6q6EPt8J5a5pVZK/2/Wyqy1SEwie8hoMXN22fRMnJEKccHb17wYFhpFwLsIAk
wAvpChiKyKQdIRm6w4y5T8YOoceht2XicMimsQcNxg0mFqlJeMrwsmMxhHuuVD8i
36v3Wmf0Fs0WdDU8NAQIa1Ahv0TPmD7o28k/QJMcgeI+qwzSE1qqSlHrIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFmvkjP7rMbH13JzlSjCxQQNZqH+MB8GA1UdIwQY
MBaAFIh9MBGTUVAPJZpX4v9oUHl9G04aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDct
Zjc0MDFiNGU0YjRhLzEvV2EtU01fdXN4c2ZYY25PVktNTEZCQTFtb2Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mZWJiMmUtZjBkYS00ZDc0LWI1NDctZjc0MDFiNGU0YjRh
LzEvaUgwd0VaTlJVQThsbWxmaV8yaFFlWDBiVGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwRH4AwQB
w056MA0GCSqGSIb3DQEBCwUAA4IBAQAIMhRMBVDgS62nDVYsl5I2jFsoueAi4/zA
n7x4TDN3DwceDZcgjSzMSsDBLHQ7MR9MSGYrBebpOroPTanHP73akMhVhFl58CWh
/dYQ6ylIA9tcVMTrINqXZ45qMEOrW1Be2JfypgwWv+JJYbP8sOC0ZB89eMl61HVc
FGzis022fLocodx7WW94fI47IE5uN7+sWgcwNWzO3qKebWgZy/kjyXZ6YicpJZDw
27l9m3TVodG9Ij59E49M6WZ34NwcB51oP2T3Iy+HO9bZlHARciKO68V5FIAWlCCC
meVbYLuGcKHlzpGFUGQ36EpSCOcA9cweua5hD/ehY77bgjOmRq3n
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:40 2024 by rpki-client on console-ams.rpki-client.org