Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/WdbegdNIxjGswSrOz9WD7CUW6Rg.roa
File: WdbegdNIxjGswSrOz9WD7CUW6Rg.roa (raw, json)
Hash identifier: NJ1IBOnkeqSCMbtSSk/otvOwIzg9GdrLjWHiuL0RB2g=
Subject key identifier: 59:D6:DE:81:D3:48:C6:31:AC:C1:2A:CE:CF:D5:83:EC:25:16:E9:18
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018571956690B3D5DB366BF8296459D1D088
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/WdbegdNIxjGswSrOz9WD7CUW6Rg.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3917
IP address blocks: 145.26.0.0/16 maxlen: 16
145.26.56.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:66:90:b3:d5:db:36:6b:f8:29:64:59:d1:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=59d6de81d348c631acc12acecfd583ec2516e918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:92:e6:cd:f5:1d:ca:e7:12:6c:03:a0:c9:dd:
4f:78:8c:1b:5c:31:f7:bd:84:b0:93:a6:a8:ec:9a:
f7:5c:0d:58:85:08:e6:20:bf:07:bd:41:bb:9d:2e:
bb:52:cc:17:fe:57:04:e5:17:e8:ec:68:6b:42:6c:
64:f2:4b:31:1d:b7:c9:b5:82:8d:d0:21:da:71:19:
98:4f:7a:54:49:75:52:3f:14:47:77:83:b9:cb:11:
d5:2e:53:da:29:54:d6:e9:65:76:bd:7b:d1:a3:ea:
30:28:e3:04:4f:5c:ee:08:c0:c3:c3:3e:45:15:36:
20:6b:7a:b1:ab:5d:19:13:89:64:40:82:27:02:d1:
4d:54:2a:76:c0:c2:22:e7:9e:7d:00:85:33:0e:3d:
f4:76:31:46:d2:eb:b6:30:24:c7:94:d6:a2:89:2e:
3b:ec:37:e8:1c:34:88:5c:09:21:ba:37:96:e2:f8:
5d:23:aa:3b:4a:7c:81:30:55:0f:71:b8:fb:79:5c:
cb:d3:1c:45:dc:8b:f1:b5:97:2c:b0:ad:2d:45:5e:
6e:ed:5b:fc:87:31:69:6d:20:5e:1d:ac:06:2f:d0:
c6:88:cd:06:41:a1:b7:1d:09:df:5e:83:64:d0:9f:
0d:44:01:28:ea:80:35:e2:bf:38:49:8b:d8:38:e1:
de:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D6:DE:81:D3:48:C6:31:AC:C1:2A:CE:CF:D5:83:EC:25:16:E9:18
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/WdbegdNIxjGswSrOz9WD7CUW6Rg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.26.0.0/16
Signature Algorithm: sha256WithRSAEncryption
68:22:e6:ad:df:91:06:84:ad:2a:91:91:c4:e5:4a:e3:cd:08:
ee:1d:71:ab:bd:70:6a:94:ac:3f:da:04:b5:c2:a3:c7:a2:69:
05:7b:df:2a:5d:f0:6c:a8:13:e3:58:49:c5:33:b5:c6:4d:e0:
7c:76:1c:94:4a:d7:27:67:4f:23:97:9c:87:27:15:d2:08:32:
3b:55:73:1a:66:1f:9a:91:54:db:77:fa:41:00:c0:fa:bf:39:
28:a5:69:b9:17:2e:a9:ed:76:b3:d3:75:59:3f:6e:a7:10:7a:
24:6c:e2:e2:d9:a0:fb:60:d4:03:4c:9c:18:ad:2c:cf:24:73:
ba:c0:8c:5b:3a:02:d0:41:12:78:73:3e:ff:52:50:00:e8:2d:
c5:9e:80:c2:ce:aa:78:d6:f9:b8:6e:21:5b:a3:f7:12:b1:62:
1b:85:ff:8e:4e:f2:34:a8:90:52:df:65:25:fa:17:48:49:dd:
cb:cb:a0:e4:43:ce:ac:65:d7:bb:53:b3:e6:de:17:0e:41:e6:
d9:8a:32:82:5c:b5:e9:44:82:32:a2:9b:40:d4:c6:42:d7:ee:
7f:96:f3:59:e6:53:f7:e2:8a:5d:2c:46:63:dc:81:9e:8c:ff:
61:8e:24:b1:2b:69:be:8e:19:1b:0a:61:68:f7:10:41:28:18:
cf:34:de:04
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVxlWaQs9XbNmv4KWRZ0dCIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjMwMTAyMDgyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWQ2ZGU4MWQzNDhjNjMxYWNjMTJhY2VjZmQ1ODNlYzI1MTZlOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJLmzfUdyucSbAOgyd1PeIwbXDH3
vYSwk6ao7Jr3XA1YhQjmIL8HvUG7nS67UswX/lcE5Rfo7GhrQmxk8ksxHbfJtYKN
0CHacRmYT3pUSXVSPxRHd4O5yxHVLlPaKVTW6WV2vXvRo+owKOMET1zuCMDDwz5F
FTYga3qxq10ZE4lkQIInAtFNVCp2wMIi5559AIUzDj30djFG0uu2MCTHlNaiiS47
7DfoHDSIXAkhujeW4vhdI6o7SnyBMFUPcbj7eVzL0xxF3IvxtZcssK0tRV5u7Vv8
hzFpbSBeHawGL9DGiM0GQaG3HQnfXoNk0J8NRAEo6oA14r84SYvYOOHeJwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFnW3oHTSMYxrMEqzs/Vg+wlFukYMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvV2RiZWdkTkl4akdzd1NyT3o5V0Q3Q1VXNlJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkRowDQYJ
KoZIhvcNAQELBQADggEBAGgi5q3fkQaErSqRkcTlSuPNCO4dcau9cGqUrD/aBLXC
o8eiaQV73ypd8GyoE+NYScUztcZN4Hx2HJRK1ydnTyOXnIcnFdIIMjtVcxpmH5qR
VNt3+kEAwPq/OSilabkXLqntdrPTdVk/bqcQeiRs4uLZoPtg1ANMnBitLM8kc7rA
jFs6AtBBEnhzPv9SUADoLcWegMLOqnjW+bhuIVuj9xKxYhuF/45O8jSokFLfZSX6
F0hJ3cvLoORDzqxl17tTs+beFw5B5tmKMoJctelEgjKim0DUxkLX7n+W81nmU/fi
il0sRmPcgZ6M/2GOJLErab6OGRsKYWj3EEEoGM803gQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org