Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/W3jHQKNLtB4Z-1cuxQHgO6-UHDY.roa
File: W3jHQKNLtB4Z-1cuxQHgO6-UHDY.roa (raw, json)
Hash identifier: /EFG8dy7HYzGBNZbLEn8Pok0i/8qCKtbZVBefA7lyKQ=
Subject key identifier: 5B:78:C7:40:A3:4B:B4:1E:19:FB:57:2E:C5:01:E0:3B:AF:94:1C:36
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 01867815D675DB7408E11689544B3A727785
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/W3jHQKNLtB4Z-1cuxQHgO6-UHDY.roa
Signing time: Wed 22 Feb 2023 07:45:42 +0000
ROA not before: Wed 22 Feb 2023 07:45:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328867
IP address blocks: 188.253.12.0/24 maxlen: 24
82.115.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:15:d6:75:db:74:08:e1:16:89:54:4b:3a:72:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Feb 22 07:45:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b78c740a34bb41e19fb572ec501e03baf941c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:77:53:0b:9f:12:d5:88:28:74:00:1a:aa:16:
45:b2:98:a0:9a:ff:e5:63:59:8e:63:52:d9:16:e6:
86:65:82:6f:3b:2e:bd:b1:0d:1c:ee:73:c4:66:18:
0e:00:61:0f:23:43:74:38:65:69:ca:2f:cb:35:f9:
3a:7b:28:e9:b7:32:28:bf:5d:41:39:76:05:a0:c3:
34:59:cd:ec:d5:70:3f:c9:4c:e3:cb:6e:a8:59:dd:
6f:6b:a2:89:5e:14:c9:67:c2:37:5e:18:e8:19:91:
5f:f0:1f:34:4c:90:f9:7e:f9:c3:26:9f:be:e3:0c:
9a:28:76:84:f4:9e:9c:16:70:10:ee:3a:1f:35:b0:
30:a8:3e:ea:0b:f0:02:df:e9:34:09:ff:cf:23:71:
f0:25:90:f3:86:28:1d:b7:ef:d3:cd:3b:81:32:cc:
44:6a:47:54:62:cc:ce:46:93:71:3c:f9:78:63:21:
b6:b4:6e:49:53:1b:e0:89:62:47:f5:17:3c:5e:01:
79:a2:56:35:ff:70:5c:9d:f9:7c:1e:b3:f6:ed:89:
35:d5:37:83:16:eb:05:ab:99:35:71:47:29:d0:c9:
4a:64:88:9f:36:fe:5b:75:c7:3f:de:70:3a:2d:52:
6d:35:0c:3e:ac:88:67:85:aa:36:92:49:09:cb:40:
d2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:C7:40:A3:4B:B4:1E:19:FB:57:2E:C5:01:E0:3B:AF:94:1C:36
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/W3jHQKNLtB4Z-1cuxQHgO6-UHDY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.115.12.0/24
188.253.12.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:87:cc:6c:df:6f:22:53:1a:bc:6c:23:3f:e3:5c:6d:55:6a:
ca:d6:2c:a9:d6:d1:86:4d:01:39:38:bc:c4:ad:17:ec:91:b1:
6f:ad:9e:9f:ac:8e:e9:54:c6:d6:83:d1:2b:bb:47:f6:91:86:
da:de:3f:67:69:ec:a6:93:94:6e:49:66:b1:28:e0:73:6d:53:
fd:92:4a:7b:55:95:82:4b:77:2e:5c:b4:57:5c:4f:02:5e:1c:
fb:9b:df:70:63:d4:db:38:a6:76:55:14:49:02:f6:f6:12:da:
0d:8a:17:0a:8c:3c:f7:d0:3a:88:4d:8c:37:0c:7b:ed:19:27:
92:0d:26:bd:c2:ff:c9:12:36:3f:56:ff:bd:30:48:9b:6b:ff:
40:33:f8:7f:61:b9:5e:a1:9f:ec:72:0e:46:78:98:fb:a5:40:
3e:61:5a:40:76:94:06:15:33:ab:46:5f:42:ed:e7:14:db:72:
12:d8:8f:3c:2d:b9:2d:23:8d:f4:68:74:e2:d7:77:2c:60:f9:
55:4a:62:d9:f8:bf:df:37:18:d8:58:1a:a5:55:79:60:52:5f:
9b:58:95:5d:40:4a:64:f0:2e:68:d9:6e:a6:a1:e7:2e:1d:6d:
08:dd:97:ad:7e:5c:63:ce:d4:d9:87:79:00:ce:0b:34:cc:1e:
e4:23:c0:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZ4FdZ123QI4RaJVEs6cneFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwMjIyMDc0NTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjc4Yzc0MGEzNGJiNDFlMTlmYjU3MmVjNTAxZTAzYmFmOTQxYzM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHdTC58S1YgodAAaqhZFspigmv/l
Y1mOY1LZFuaGZYJvOy69sQ0c7nPEZhgOAGEPI0N0OGVpyi/LNfk6eyjptzIov11B
OXYFoMM0Wc3s1XA/yUzjy26oWd1va6KJXhTJZ8I3XhjoGZFf8B80TJD5fvnDJp++
4wyaKHaE9J6cFnAQ7jofNbAwqD7qC/AC3+k0Cf/PI3HwJZDzhigdt+/TzTuBMsxE
akdUYszORpNxPPl4YyG2tG5JUxvgiWJH9Rc8XgF5olY1/3Bcnfl8HrP27Yk11TeD
FusFq5k1cUcp0MlKZIifNv5bdcc/3nA6LVJtNQw+rIhnhao2kkkJy0DSfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFt4x0CjS7QeGftXLsUB4DuvlBw2MB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvVzNqSFFLTkx0QjRaLTFjdXhRSGdPNi1VSERZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUnMMAwQA
vP0MMA0GCSqGSIb3DQEBCwUAA4IBAQDSh8xs328iUxq8bCM/41xtVWrK1iyp1tGG
TQE5OLzErRfskbFvrZ6frI7pVMbWg9Eru0f2kYba3j9naeymk5RuSWaxKOBzbVP9
kkp7VZWCS3cuXLRXXE8CXhz7m99wY9TbOKZ2VRRJAvb2EtoNihcKjDz30DqITYw3
DHvtGSeSDSa9wv/JEjY/Vv+9MEiba/9AM/h/YbleoZ/scg5GeJj7pUA+YVpAdpQG
FTOrRl9C7ecU23IS2I88LbktI430aHTi13csYPlVSmLZ+L/fNxjYWBqlVXlgUl+b
WJVdQEpk8C5o2W6moecuHW0I3ZetflxjztTZh3kAzgs0zB7kI8CE
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:45 2023 by rpki-client on console-fra.rpki-client.org