Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WgDIRfUNaT9CrzcIjYiV_RizllA.roa
File: WgDIRfUNaT9CrzcIjYiV_RizllA.roa (raw, json)
Hash identifier: ZMaFd4qelE45nAD5NSZHR5mpvSShvHi9tAPT3gdjhGY=
Subject key identifier: 5A:00:C8:45:F5:0D:69:3F:42:AF:37:08:8D:88:95:FD:18:B3:96:50
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 018BD84EC2D690210C523A06EF86235B86DA
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WgDIRfUNaT9CrzcIjYiV_RizllA.roa
Signing time: Thu 16 Nov 2023 13:25:22 +0000
ROA not before: Thu 16 Nov 2023 13:25:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 185.244.29.0/24 maxlen: 24
185.244.31.0/24 maxlen: 24
185.244.26.0/24 maxlen: 24
194.5.97.0/24 maxlen: 24
194.5.99.0/24 maxlen: 24
87.237.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Dec 2023 12:19:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:4e:c2:d6:90:21:0c:52:3a:06:ef:86:23:5b:86:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Nov 16 13:25:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a00c845f50d693f42af37088d8895fd18b39650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8a:f0:97:f1:6c:6f:02:c1:da:6a:28:1d:cc:
54:cb:fc:0c:f3:2c:8e:6e:7c:85:b7:7b:91:85:b4:
c5:7b:2f:5b:77:5d:42:5d:e5:e4:07:d7:06:f4:2b:
8c:c5:85:0d:17:65:99:c6:fd:5c:6f:fd:84:bc:77:
5d:0f:b3:22:13:de:c8:6c:6b:b5:e0:14:c3:32:d4:
db:d6:8f:56:5a:ad:f7:f0:be:e2:35:ca:46:fa:16:
db:92:6b:11:ee:d5:99:b9:75:ac:40:65:05:a0:17:
7b:81:85:81:72:76:30:ad:2f:96:31:58:cf:27:e1:
d8:c1:d2:e8:7f:70:a6:95:88:1a:f5:5b:1f:57:9f:
d0:b4:c4:99:e8:36:3b:43:5b:1f:c6:cd:fe:25:37:
a1:93:f5:5f:89:3f:71:e1:6c:78:48:7f:ee:b7:03:
15:50:38:41:13:97:2a:d6:68:df:b8:08:d8:4b:14:
dd:fc:b6:f1:88:aa:4b:4e:36:3d:1b:cd:8f:e9:2b:
73:86:63:a9:fa:8f:14:c3:a0:5b:4f:12:db:3f:75:
5a:89:2f:06:f9:6d:08:02:7c:7b:eb:6d:04:42:42:
5a:23:6d:02:33:0e:9f:00:3a:22:20:ee:72:00:3f:
55:e4:b1:9c:c1:30:e4:96:aa:10:04:9d:bd:88:cc:
9b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:00:C8:45:F5:0D:69:3F:42:AF:37:08:8D:88:95:FD:18:B3:96:50
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/WgDIRfUNaT9CrzcIjYiV_RizllA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.165.0/24
185.244.26.0/24
185.244.29.0/24
185.244.31.0/24
194.5.97.0/24
194.5.99.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:50:4d:34:b2:a9:da:58:f5:66:7e:cc:27:eb:7a:d8:89:48:
d3:01:36:49:fb:af:8d:3a:83:dc:95:f4:e5:70:15:9a:a2:bd:
19:19:41:52:26:4d:27:d1:81:4d:fe:b7:0d:ad:f3:47:af:bb:
ab:ca:de:88:26:02:a7:57:ac:fb:53:16:aa:8c:06:d3:c6:7e:
76:ff:e6:fe:59:6e:17:0e:0d:f3:c5:11:06:fd:16:de:a0:2e:
87:b8:7d:cd:41:b7:27:06:b0:0d:a0:c8:cd:a0:44:5b:10:b4:
5d:7c:f3:e3:1c:3a:1f:31:b5:b6:80:e3:7d:76:ae:c6:94:92:
db:8d:ad:79:2e:eb:82:e8:ca:74:a8:4a:9e:c0:8a:6e:06:38:
fb:06:60:7d:24:98:95:4f:23:0e:33:40:8e:75:65:30:0e:6e:
24:b1:75:eb:3f:b0:f8:84:2d:77:43:6b:7d:6c:8e:f3:ef:31:
b9:62:50:ac:6c:2c:50:19:38:8d:a5:6e:eb:eb:47:f2:47:6e:
92:f6:48:69:3d:36:09:53:1b:10:8f:08:a8:d4:60:7c:cb:de:
28:aa:d8:b9:7d:89:27:9d:06:53:89:26:1d:20:36:75:a0:e3:
85:24:96:2b:7d:71:25:9b:d6:2c:36:43:fe:18:8e:f7:bb:dc:
26:ea:3e:df
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYvYTsLWkCEMUjoG74YjW4baMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjMxMTE2MTMyNTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTAwYzg0NWY1MGQ2OTNmNDJhZjM3MDg4ZDg4OTVmZDE4YjM5NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIrwl/FsbwLB2mooHcxUy/wM8yyO
bnyFt3uRhbTFey9bd11CXeXkB9cG9CuMxYUNF2WZxv1cb/2EvHddD7MiE97IbGu1
4BTDMtTb1o9WWq338L7iNcpG+hbbkmsR7tWZuXWsQGUFoBd7gYWBcnYwrS+WMVjP
J+HYwdLof3CmlYga9VsfV5/QtMSZ6DY7Q1sfxs3+JTehk/VfiT9x4Wx4SH/utwMV
UDhBE5cq1mjfuAjYSxTd/LbxiKpLTjY9G82P6StzhmOp+o8Uw6BbTxLbP3VaiS8G
+W0IAnx7620EQkJaI20CMw6fADoiIO5yAD9V5LGcwTDklqoQBJ29iMybEQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFoAyEX1DWk/Qq83CI2Ilf0Ys5ZQMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvV2dESVJmVU5hVDlDcnpjSWpZaVZfUml6bGxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAV+2lAwQA
ufQaAwQAufQdAwQAufQfAwQAwgVhAwQAwgVjMA0GCSqGSIb3DQEBCwUAA4IBAQDF
UE00sqnaWPVmfswn63rYiUjTATZJ+6+NOoPclfTlcBWaor0ZGUFSJk0n0YFN/rcN
rfNHr7uryt6IJgKnV6z7UxaqjAbTxn52/+b+WW4XDg3zxREG/RbeoC6HuH3NQbcn
BrANoMjNoERbELRdfPPjHDofMbW2gON9dq7GlJLbja15LuuC6Mp0qEqewIpuBjj7
BmB9JJiVTyMOM0COdWUwDm4ksXXrP7D4hC13Q2t9bI7z7zG5YlCsbCxQGTiNpW7r
60fyR26S9khpPTYJUxsQjwio1GB8y94oqti5fYknnQZTiSYdIDZ1oOOFJJYrfXEl
m9YsNkP+GI73u9wm6j7f
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:48 2024 by rpki-client on console-ams.rpki-client.org