Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/WL6v5grdhNaeYsz4v0rGeZXMS1Y.roa
File: WL6v5grdhNaeYsz4v0rGeZXMS1Y.roa (raw, json)
Hash identifier: 0GlBPvPpRSnQ+KOLbp5qBLnG7vJOST9Z82hnDcq4hHY=
Subject key identifier: 58:BE:AF:E6:0A:DD:84:D6:9E:62:CC:F8:BF:4A:C6:79:95:CC:4B:56
Certificate issuer: /CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Certificate serial: 018CC6B816B9AB7C15D17827A0BE97CC0A79
Authority key identifier: D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/WL6v5grdhNaeYsz4v0rGeZXMS1Y.roa
Signing time: Mon 01 Jan 2024 20:30:02 +0000
ROA not before: Mon 01 Jan 2024 20:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21260
IP address blocks: 80.87.128.0/20 maxlen: 24
185.27.20.0/22 maxlen: 24
2a04:1300::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:16:b9:ab:7c:15:d1:78:27:a0:be:97:cc:0a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6086ddd97ba381389357e0e56ca11e5cfe8f453
Validity
Not Before: Jan 1 20:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=58beafe60add84d69e62ccf8bf4ac67995cc4b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4a:73:cc:37:af:b8:80:77:e6:48:61:37:f8:
7f:4f:31:e8:3b:6d:11:78:a8:51:07:1c:cb:79:7d:
96:a0:ff:dc:42:e6:54:7c:c7:c4:d4:6e:38:e9:9c:
b2:13:84:e8:17:e8:00:a3:e7:50:71:69:fd:e4:af:
32:0a:34:86:54:07:67:6c:41:ea:4c:b3:20:bb:c0:
09:44:5d:0c:2a:9b:53:e3:4c:bd:1a:96:cb:28:1e:
9d:30:12:dc:a1:7a:86:f0:74:af:d3:63:65:ce:5c:
02:5b:92:87:5c:9d:53:b1:a3:26:1e:ce:bc:d5:02:
64:cd:1f:51:54:3a:e3:20:e0:1a:02:2a:48:4b:eb:
2e:51:ff:76:16:75:27:a1:dd:1c:8a:80:42:cc:3f:
27:1b:28:7f:f2:2c:c4:b6:85:d5:47:29:8f:f2:b5:
60:0c:8d:6c:9b:5d:7d:27:0b:f4:29:56:df:ec:12:
ff:ac:0d:fc:38:43:8b:1c:f2:9d:25:b4:9d:cc:e3:
e1:91:32:e9:77:14:a3:d1:a5:f5:89:3b:09:f1:53:
36:17:3b:fc:a1:69:96:43:26:06:38:73:0f:41:e5:
14:92:60:16:53:ce:c7:2d:29:ef:e3:34:f8:80:3c:
f1:44:9f:31:07:a7:83:10:1f:29:bc:ed:2f:dc:8f:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:BE:AF:E6:0A:DD:84:D6:9E:62:CC:F8:BF:4A:C6:79:95:CC:4B:56
X509v3 Authority Key Identifier:
keyid:D6:08:6D:DD:97:BA:38:13:89:35:7E:0E:56:CA:11:E5:CF:E8:F4:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ght3Ze6OBOJNX4OVsoR5c_o9FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/WL6v5grdhNaeYsz4v0rGeZXMS1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3382cf-2cb1-475e-92c0-815f990bd431/1/1ght3Ze6OBOJNX4OVsoR5c_o9FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.87.128.0/20
185.27.20.0/22
IPv6:
2a04:1300::/29
Signature Algorithm: sha256WithRSAEncryption
36:c3:7c:aa:f4:89:27:fb:0c:f8:d6:95:2c:4e:e5:09:5d:27:
82:ef:f5:35:21:b6:83:e3:c6:88:83:fb:3d:8d:bd:e1:00:f8:
ad:17:94:bb:f1:8a:bf:7b:cc:f9:aa:70:c1:b0:b0:fb:52:31:
c3:eb:2d:bf:45:52:fb:55:ea:05:b4:aa:c0:27:3c:88:78:9d:
4e:6a:82:56:e0:26:42:1f:5a:ad:6c:11:58:36:ba:b9:5f:84:
e6:17:5c:58:a0:98:c4:43:2e:ba:84:da:ec:e2:b0:7b:bf:a2:
b6:9f:13:9f:7b:0e:a3:ba:c6:3b:4d:dd:15:38:6c:6f:44:94:
e1:42:cb:33:cd:61:9b:e7:40:7a:44:e3:ec:91:b2:57:7c:3d:
f5:29:c9:6c:32:8a:48:ff:96:88:b4:a6:89:eb:57:f4:96:8f:
27:0d:75:21:98:9d:bb:be:cb:41:f3:27:c1:53:a2:14:93:99:
e2:fd:33:ce:d6:b0:f4:6a:d3:14:96:ff:4c:5d:71:fb:40:3b:
b1:95:ba:7a:50:63:8b:b0:44:ce:a6:dc:fa:5b:58:3e:d0:db:
55:9d:f6:d3:33:53:ed:c9:10:78:85:75:58:ac:3d:a6:34:d1:
0f:89:61:f2:27:3f:41:cc:04:2e:8c:26:71:59:de:b9:0d:7b:
36:24:3a:2b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzGuBa5q3wV0XgnoL6XzAp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDg2ZGRkOTdiYTM4MTM4OTM1N2UwZTU2Y2ExMWU1Y2Zl
OGY0NTMwHhcNMjQwMTAxMjAzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGJlYWZlNjBhZGQ4NGQ2OWU2MmNjZjhiZjRhYzY3OTk1Y2M0YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EpzzDevuIB35khhN/h/TzHoO20R
eKhRBxzLeX2WoP/cQuZUfMfE1G446ZyyE4ToF+gAo+dQcWn95K8yCjSGVAdnbEHq
TLMgu8AJRF0MKptT40y9GpbLKB6dMBLcoXqG8HSv02NlzlwCW5KHXJ1TsaMmHs68
1QJkzR9RVDrjIOAaAipIS+suUf92FnUnod0cioBCzD8nGyh/8izEtoXVRymP8rVg
DI1sm119Jwv0KVbf7BL/rA38OEOLHPKdJbSdzOPhkTLpdxSj0aX1iTsJ8VM2Fzv8
oWmWQyYGOHMPQeUUkmAWU87HLSnv4zT4gDzxRJ8xB6eDEB8pvO0v3I/I9wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFi+r+YK3YTWnmLM+L9KxnmVzEtWMB8GA1UdIwQY
MBaAFNYIbd2XujgTiTV+DlbKEeXP6PRTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAt
ODE1Zjk5MGJkNDMxLzEvV0w2djVncmRoTmFlWXN6NHYwckdlWlhNUzFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zMzgyY2YtMmNiMS00NzVlLTkyYzAtODE1Zjk5MGJkNDMx
LzEvMWdodDNaZTZPQk9KTlg0T1Zzb1I1Y19vOUZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEUFeAAwQC
uRsUMA0EAgACMAcDBQMqBBMAMA0GCSqGSIb3DQEBCwUAA4IBAQA2w3yq9Ikn+wz4
1pUsTuUJXSeC7/U1IbaD48aIg/s9jb3hAPitF5S78Yq/e8z5qnDBsLD7UjHD6y2/
RVL7VeoFtKrAJzyIeJ1OaoJW4CZCH1qtbBFYNrq5X4TmF1xYoJjEQy66hNrs4rB7
v6K2nxOfew6jusY7Td0VOGxvRJThQsszzWGb50B6ROPskbJXfD31KclsMopI/5aI
tKaJ61f0lo8nDXUhmJ27vstB8yfBU6IUk5ni/TPO1rD0atMUlv9MXXH7QDuxlbp6
UGOLsETOptz6W1g+0NtVnfbTM1PtyRB4hXVYrD2mNNEPiWHyJz9BzAQujCZxWd65
DXs2JDor
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:30 2025 by rpki-client