Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/wdlWYAguBVwrZiaquSbWup3VEP4.roa
File: wdlWYAguBVwrZiaquSbWup3VEP4.roa (raw, json)
Hash identifier: 1ITDO8yFI9e9djBCTv2IzsnIvujKP2HHTrA5hNrXxU0=
Subject key identifier: C1:D9:56:60:08:2E:05:5C:2B:66:26:AA:B9:26:D6:BA:9D:D5:10:FE
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 0185703074141768D5DCCC7F139E789A57AC
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/wdlWYAguBVwrZiaquSbWup3VEP4.roa
Signing time: Mon 02 Jan 2023 01:55:01 +0000
ROA not before: Mon 02 Jan 2023 01:55:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12625
IP address blocks: 193.29.64.0/19 maxlen: 24
2a00:7440::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:74:14:17:68:d5:dc:cc:7f:13:9e:78:9a:57:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Jan 2 01:55:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1d95660082e055c2b6626aab926d6ba9dd510fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cb:e8:0a:44:e8:95:fe:df:e1:47:2f:66:b2:
79:a3:67:85:0f:34:87:52:99:5f:ae:5b:9e:20:12:
ae:7d:85:bb:fd:fa:d3:a0:cb:49:28:50:56:5c:bc:
7a:81:2d:c3:e7:5b:29:b8:c5:0f:36:60:db:b5:51:
dc:41:48:89:db:9a:b4:ae:0a:6f:71:82:5f:0b:11:
9d:9d:d9:09:5e:9d:57:6f:6f:ac:dc:5c:ef:fd:1d:
33:98:ff:e6:0d:65:84:1b:c1:cd:02:15:3f:ec:c0:
84:bd:4f:48:86:b7:75:99:fd:cb:6f:82:2c:6d:39:
42:f7:f9:44:26:04:02:07:57:c2:df:3a:c1:50:c2:
7a:28:6b:04:9d:7a:d2:77:0b:80:b1:74:c9:f6:de:
6d:22:c8:6f:d3:92:53:c5:bd:5b:ff:70:b6:53:50:
8d:94:c9:65:e9:2d:8a:37:af:ea:ae:a4:19:14:07:
24:08:74:bb:a6:ae:38:40:73:b5:62:ee:83:80:0f:
14:3f:64:1d:e8:5a:81:7a:06:c7:e5:5e:25:a2:0c:
ce:e2:f5:57:60:1f:8f:b2:39:a8:2c:ca:72:99:2d:
69:80:3e:21:21:03:e6:ec:7b:33:e0:4f:91:28:35:
c2:5c:be:81:db:d5:24:7c:1b:6f:12:7f:86:b2:b3:
18:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D9:56:60:08:2E:05:5C:2B:66:26:AA:B9:26:D6:BA:9D:D5:10:FE
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/wdlWYAguBVwrZiaquSbWup3VEP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.64.0/19
IPv6:
2a00:7440::/32
Signature Algorithm: sha256WithRSAEncryption
14:0c:58:b8:42:3c:1e:a3:88:c5:d4:92:22:16:fc:6b:ff:13:
e0:53:33:59:b2:c9:db:16:2d:85:6d:fe:4b:5f:09:74:66:00:
8c:3b:d5:51:fe:c2:38:1a:5a:33:5a:ab:12:e8:c0:dd:d0:dd:
4a:a7:eb:97:e5:d9:32:c1:d3:62:14:0f:ff:7f:1a:50:5e:18:
53:dd:fc:ac:aa:52:2b:b5:17:76:ee:ec:f3:5a:e8:a4:fa:38:
fc:28:a5:d4:2a:d7:5f:f9:19:14:2a:ad:72:e0:b0:07:41:bc:
5a:a3:79:b5:6c:63:fe:25:9e:39:50:9d:73:50:7e:42:c3:3a:
11:01:c1:d8:bb:4b:46:38:d6:d5:e4:82:ea:e8:42:ba:7f:c8:
ae:59:2e:51:88:b8:38:b1:d2:16:70:9c:47:6d:35:ef:e5:4b:
80:b9:1d:d0:e0:3e:ef:43:8b:c5:80:35:15:63:c7:2b:88:e3:
49:90:c1:82:a0:93:20:64:81:e7:0a:34:43:97:1d:22:d1:46:
b1:da:2d:9c:36:03:c3:02:91:25:d7:7c:27:bb:74:5d:9d:2c:
b5:ba:88:e5:82:cc:ac:b3:ea:7b:21:cc:d0:64:91:ba:26:c2:
44:5d:11:f4:bc:39:2a:e6:1b:f8:28:76:66:65:02:3a:e1:5e:
1e:80:e4:6d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwMHQUF2jV3Mx/E554mlesMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWNlMTVlNDVlZmI1YTAwNjBjMDY1ZTI3NGVhOGUzYWZi
MDI1ZWIwHhcNMjMwMTAyMDE1NTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWQ5NTY2MDA4MmUwNTVjMmI2NjI2YWFiOTI2ZDZiYTlkZDUxMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcvoCkTolf7f4UcvZrJ5o2eFDzSH
UplfrlueIBKufYW7/frToMtJKFBWXLx6gS3D51spuMUPNmDbtVHcQUiJ25q0rgpv
cYJfCxGdndkJXp1Xb2+s3Fzv/R0zmP/mDWWEG8HNAhU/7MCEvU9Ihrd1mf3Lb4Is
bTlC9/lEJgQCB1fC3zrBUMJ6KGsEnXrSdwuAsXTJ9t5tIshv05JTxb1b/3C2U1CN
lMll6S2KN6/qrqQZFAckCHS7pq44QHO1Yu6DgA8UP2Qd6FqBegbH5V4logzO4vVX
YB+PsjmoLMpymS1pgD4hIQPm7Hsz4E+RKDXCXL6B29UkfBtvEn+GsrMYiwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMHZVmAILgVcK2Ymqrkm1rqd1RD+MB8GA1UdIwQY
MBaAFFSs4V5F77WgBgwGXidOqOOvsCXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEt
YWQyYjYxMzgwYmUxLzEvd2RsV1lBZ3VCVndyWmlhcXVTYld1cDNWRVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEtYWQyYjYxMzgwYmUx
LzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFwR1AMA0E
AgACMAcDBQAqAHRAMA0GCSqGSIb3DQEBCwUAA4IBAQAUDFi4Qjweo4jF1JIiFvxr
/xPgUzNZssnbFi2Fbf5LXwl0ZgCMO9VR/sI4GlozWqsS6MDd0N1Kp+uX5dkywdNi
FA//fxpQXhhT3fysqlIrtRd27uzzWuik+jj8KKXUKtdf+RkUKq1y4LAHQbxao3m1
bGP+JZ45UJ1zUH5CwzoRAcHYu0tGONbV5ILq6EK6f8iuWS5RiLg4sdIWcJxHbTXv
5UuAuR3Q4D7vQ4vFgDUVY8criONJkMGCoJMgZIHnCjRDlx0i0Uax2i2cNgPDApEl
13wnu3RdnSy1uojlgsyss+p7IczQZJG6JsJEXRH0vDkq5hv4KHZmZQI64V4egORt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:36 2024 by rpki-client on console-ams.rpki-client.org