Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/WrrU6j8tC2VowYfipyrVfGC4GDk.roa
File: WrrU6j8tC2VowYfipyrVfGC4GDk.roa (raw, json)
Hash identifier: 7VWJQ1XFljBta4EyDkYfnkAghakqgZ1lG7ax2Xpqkbs=
Subject key identifier: 5A:BA:D4:EA:3F:2D:0B:65:68:C1:87:E2:A7:2A:D5:7C:60:B8:18:39
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018CC86FD54162E51BB65E353CCB6B46E4D9
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/WrrU6j8tC2VowYfipyrVfGC4GDk.roa
Signing time: Tue 02 Jan 2024 04:30:21 +0000
ROA not before: Tue 02 Jan 2024 04:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35661
IP address blocks: 185.10.16.0/22 maxlen: 24
45.157.116.0/22 maxlen: 24
194.147.97.0/24 maxlen: 24
185.154.152.0/22 maxlen: 24
188.214.24.0/24 maxlen: 24
2a03:5840::/32 maxlen: 32
2a0d:e680::/32 maxlen: 32
2a07:8dc0::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Apr 2024 23:17:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:d5:41:62:e5:1b:b6:5e:35:3c:cb:6b:46:e4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 2 04:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5abad4ea3f2d0b6568c187e2a72ad57c60b81839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:38:29:10:14:df:8b:87:af:08:80:1d:c8:
d0:73:d4:b8:a4:b4:79:03:76:24:00:e5:45:da:15:
19:dc:b5:2e:b6:0e:b2:62:92:58:94:f5:dd:42:79:
8f:45:36:e2:a0:2a:b7:ea:d8:5c:4a:cf:26:25:32:
dd:a9:ab:dc:d8:97:b4:0e:81:34:4b:44:65:bc:bc:
cd:44:a4:3b:14:8f:8b:b3:d9:11:8f:26:af:85:f7:
96:07:30:21:98:c3:17:fb:12:c6:73:9e:62:3a:b6:
85:73:4a:76:bb:24:a5:a6:14:a4:81:e9:c7:d8:d6:
ec:b7:e0:38:92:2c:f0:7b:5f:43:06:2f:1f:1a:72:
69:bc:15:a3:71:c5:89:cb:06:c1:80:3f:f5:54:1d:
c9:11:af:69:29:cf:c2:48:b9:c7:f5:96:64:27:d4:
9e:4e:49:2d:b1:ec:37:59:ed:f2:64:ad:b6:1f:b5:
8e:88:b4:90:e5:35:d4:d8:1b:0a:cc:28:05:94:69:
0b:9b:3d:6c:d5:8f:8a:c6:88:fc:95:90:00:b7:e5:
05:d7:01:1b:02:3e:3b:8a:81:e9:e9:ef:a3:3f:16:
70:6c:18:6b:5b:1e:09:9e:fb:4e:21:e9:16:1c:a9:
d9:2c:ed:cd:f8:1d:d3:18:b9:a5:cb:89:d8:be:50:
c6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BA:D4:EA:3F:2D:0B:65:68:C1:87:E2:A7:2A:D5:7C:60:B8:18:39
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/WrrU6j8tC2VowYfipyrVfGC4GDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.116.0/22
185.10.16.0/22
185.154.152.0/22
188.214.24.0/24
194.147.97.0/24
IPv6:
2a03:5840::/32
2a07:8dc0::/29
2a0d:e680::/32
Signature Algorithm: sha256WithRSAEncryption
00:45:01:f1:a9:e2:cf:4c:fc:91:e8:c3:2e:15:2b:ab:69:37:
2e:0b:b5:df:36:9d:9a:c9:5b:80:42:b0:7c:8e:bf:df:6c:63:
43:58:b0:bb:11:eb:fb:c2:d9:7b:4c:e8:84:c7:82:a2:1b:11:
c6:bd:b9:65:e5:54:ab:d7:f7:3e:d5:4f:37:85:2a:7d:2e:d8:
56:ce:df:3a:7d:e1:38:10:e2:8c:37:3f:f9:fe:67:bb:fe:13:
9a:0d:58:05:50:37:2f:0e:45:29:17:79:68:6b:40:30:89:b6:
86:c9:06:5a:cd:e9:23:16:48:65:c8:d6:71:86:5a:c2:f9:46:
af:71:5b:1e:48:7e:03:a1:fd:ca:b9:75:4f:6a:c7:f1:04:25:
da:73:61:fb:e2:a4:6d:35:d2:7f:48:69:88:78:dd:f8:0e:57:
32:7a:56:24:e2:47:92:b1:40:54:e9:2b:c6:d1:eb:2f:dc:a1:
6f:df:99:ec:87:46:8f:e6:98:cb:7b:86:43:19:be:b1:dd:a8:
8a:b9:1b:2c:e2:35:d6:36:c9:2d:2f:c2:26:2c:7f:ad:75:82:
48:2d:99:97:90:63:a3:dc:0f:02:fc:b0:3c:33:ad:c0:c5:60:
23:51:dc:d6:45:15:12:71:7c:fd:e7:b1:5b:70:66:6f:79:ae:
04:14:f8:ab
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAYzIb9VBYuUbtl41PMtrRuTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1
ODYzNWEwHhcNMjQwMTAyMDQzMDIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWJhZDRlYTNmMmQwYjY1NjhjMTg3ZTJhNzJhZDU3YzYwYjgxODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ao4KRAU34uHrwiAHcjQc9S4pLR5
A3YkAOVF2hUZ3LUutg6yYpJYlPXdQnmPRTbioCq36thcSs8mJTLdqavc2Je0DoE0
S0RlvLzNRKQ7FI+Ls9kRjyavhfeWBzAhmMMX+xLGc55iOraFc0p2uySlphSkgenH
2Nbst+A4kizwe19DBi8fGnJpvBWjccWJywbBgD/1VB3JEa9pKc/CSLnH9ZZkJ9Se
Tkktsew3We3yZK22H7WOiLSQ5TXU2BsKzCgFlGkLmz1s1Y+Kxoj8lZAAt+UF1wEb
Aj47ioHp6e+jPxZwbBhrWx4JnvtOIekWHKnZLO3N+B3TGLmly4nYvlDGZwIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFFq61Oo/LQtlaMGH4qcq1XxguBg5MB8GA1UdIwQY
MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt
NmNiODk3OTFkN2ZkLzEvV3JyVTZqOHRDMlZvd1lmaXB5clZmR0M0R0RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk
LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAkBAIAATAeAwQCLZ10AwQC
uQoQAwQCuZqYAwQAvNYYAwQAwpNhMBsEAgACMBUDBQAqA1hAAwUDKgeNwAMFACoN
5oAwDQYJKoZIhvcNAQELBQADggEBAABFAfGp4s9M/JHowy4VK6tpNy4Ltd82nZrJ
W4BCsHyOv99sY0NYsLsR6/vC2XtM6ITHgqIbEca9uWXlVKvX9z7VTzeFKn0u2FbO
3zp94TgQ4ow3P/n+Z7v+E5oNWAVQNy8ORSkXeWhrQDCJtobJBlrN6SMWSGXI1nGG
WsL5Rq9xWx5IfgOh/cq5dU9qx/EEJdpzYfvipG010n9IaYh43fgOVzJ6ViTiR5Kx
QFTpK8bR6y/coW/fmeyHRo/mmMt7hkMZvrHdqIq5GyziNdY2yS0vwiYsf611gkgt
mZeQY6PcDwL8sDwzrcDFYCNR3NZFFRJxfP3nsVtwZm95rgQU+Ks=
-----END CERTIFICATE-----
Generated at Thu Apr 25 02:26:59 2024 by rpki-client on console-ams.rpki-client.org