Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WoWyv8HXsbNA-R0DQubb2mrJ0WU.roa
File: WoWyv8HXsbNA-R0DQubb2mrJ0WU.roa (raw, json)
Hash identifier: FwImSpnQAnBZzuUdzbSZfBRGs7UXb5bk8ORV0WlROv8=
Subject key identifier: 5A:85:B2:BF:C1:D7:B1:B3:40:F9:1D:03:42:E6:DB:DA:6A:C9:D1:65
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018CC801237645CAD0F7CF58A1111FD242C3
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WoWyv8HXsbNA-R0DQubb2mrJ0WU.roa
Signing time: Tue 02 Jan 2024 02:29:26 +0000
ROA not before: Tue 02 Jan 2024 02:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208485
IP address blocks: 85.11.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 21 Feb 2024 12:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:23:76:45:ca:d0:f7:cf:58:a1:11:1f:d2:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Jan 2 02:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a85b2bfc1d7b1b340f91d0342e6dbda6ac9d165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:af:91:f7:3c:97:d3:80:42:7a:bc:89:8a:44:
56:32:19:ef:c9:87:32:72:45:0f:5c:11:0f:6f:64:
f7:26:81:d8:79:dc:10:ec:86:4f:93:ab:68:a0:3f:
27:79:ae:a2:c9:b9:cd:76:dc:86:e1:9b:bc:13:98:
1a:6f:d4:86:22:0b:6b:2a:a0:69:06:76:8b:e3:3c:
1f:32:42:d1:b2:e4:25:49:59:63:3b:75:89:b2:90:
1f:97:63:d9:4a:07:f4:d9:67:a7:3e:81:c6:bf:0e:
8e:c6:e8:91:8e:35:dd:e0:ca:29:48:79:76:4a:6f:
85:af:0c:f8:5b:7a:b1:7d:36:12:df:fb:90:2a:86:
2e:f5:34:df:d6:e6:fc:c7:0b:13:e9:32:11:c1:9e:
89:d2:5c:39:a8:e4:64:3b:f3:8c:36:e4:9b:69:fe:
2c:21:09:4c:95:41:cc:b6:37:7b:fa:31:ad:c9:d2:
d2:0e:9b:36:43:e5:1d:65:ae:f4:f5:3b:95:35:aa:
a8:87:00:0e:d8:07:71:fa:cb:86:5a:08:27:90:59:
a8:c6:33:b9:d7:7f:7a:cc:e9:ab:62:c6:7d:ad:d6:
25:11:6f:b7:9e:3f:ae:fe:34:48:96:38:70:1e:f5:
f6:6e:5b:e8:3d:96:43:7b:20:49:18:f8:8f:f5:b4:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:85:B2:BF:C1:D7:B1:B3:40:F9:1D:03:42:E6:DB:DA:6A:C9:D1:65
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WoWyv8HXsbNA-R0DQubb2mrJ0WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:1e:43:47:72:fc:99:0e:fc:dd:5f:c6:08:47:e8:a8:03:1c:
3e:3b:13:4a:f2:8a:c2:c6:56:f5:d0:a0:bf:41:c3:8c:0f:1a:
35:b5:09:c8:21:b1:a7:8f:a5:f5:40:17:94:aa:54:84:25:13:
28:01:4b:86:5f:26:d0:e5:a9:1c:df:a8:9c:f6:71:4e:7d:ed:
bb:d9:8d:d3:f6:ca:bc:cb:30:08:7b:b6:aa:b2:21:6e:7c:e2:
12:38:d0:d4:23:95:ff:0c:49:78:6e:b4:03:56:b4:5c:58:38:
e3:cf:1a:41:6a:bb:eb:d7:ea:4f:91:d5:6c:86:8d:35:ec:94:
e3:65:9a:26:e0:f2:78:05:38:07:52:31:43:49:e7:32:a7:50:
b8:fa:3d:4d:85:e8:98:44:74:27:b1:99:26:1c:9d:58:92:23:
55:b4:bb:53:86:e8:65:e8:7a:8d:27:05:e5:05:d8:5a:68:46:
e3:1a:00:7a:3e:a2:c0:a3:bd:85:81:5f:21:5d:2c:88:91:95:
3d:18:5a:08:48:83:af:04:88:5a:4e:8d:b4:86:8c:ae:60:63:
8a:0c:a8:91:27:90:69:2e:99:cc:ac:c1:25:ff:79:06:83:bc:
dd:07:55:6d:02:7d:fa:9e:6f:85:ee:bb:aa:56:bc:6d:d7:e8:
1b:a5:26:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASN2RcrQ989YoREf0kLDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NzVkNTE5ZGUyMzljZjE2NGNiOTRhNjY2MGMyNTMwY2Vh
ZWYyNTQwHhcNMjQwMTAyMDIyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTg1YjJiZmMxZDdiMWIzNDBmOTFkMDM0MmU2ZGJkYTZhYzlkMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK+R9zyX04BCeryJikRWMhnvyYcy
ckUPXBEPb2T3JoHYedwQ7IZPk6tooD8nea6iybnNdtyG4Zu8E5gab9SGIgtrKqBp
BnaL4zwfMkLRsuQlSVljO3WJspAfl2PZSgf02WenPoHGvw6OxuiRjjXd4MopSHl2
Sm+Frwz4W3qxfTYS3/uQKoYu9TTf1ub8xwsT6TIRwZ6J0lw5qORkO/OMNuSbaf4s
IQlMlUHMtjd7+jGtydLSDps2Q+UdZa709TuVNaqohwAO2Adx+suGWggnkFmoxjO5
1396zOmrYsZ9rdYlEW+3nj+u/jRIljhwHvX2blvoPZZDeyBJGPiP9bQr6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqFsr/B17GzQPkdA0Lm29pqydFlMB8GA1UdIwQY
MBaAFFl11RneI5zxZMuUpmYMJTDOrvJUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUt
MmNjNjc1NzI2OTc1LzEvV29XeXY4SFhzYk5BLVIwRFF1YmIybXJKMFdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8wYzBjMzctYjQwMS00MDFiLWFhNjUtMmNjNjc1NzI2OTc1
LzEvV1hYVkdkNGpuUEZreTVTbVpnd2xNTTZ1OGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVQu+MA0G
CSqGSIb3DQEBCwUAA4IBAQAvHkNHcvyZDvzdX8YIR+ioAxw+OxNK8orCxlb10KC/
QcOMDxo1tQnIIbGnj6X1QBeUqlSEJRMoAUuGXybQ5akc36ic9nFOfe272Y3T9sq8
yzAIe7aqsiFufOISONDUI5X/DEl4brQDVrRcWDjjzxpBarvr1+pPkdVsho017JTj
ZZom4PJ4BTgHUjFDSecyp1C4+j1NheiYRHQnsZkmHJ1YkiNVtLtThuhl6HqNJwXl
BdhaaEbjGgB6PqLAo72FgV8hXSyIkZU9GFoISIOvBIhaTo20hoyuYGOKDKiRJ5Bp
LpnMrMEl/3kGg7zdB1VtAn36nm+F7ruqVrxt1+gbpSYX
-----END CERTIFICATE-----
Generated at Wed Feb 21 16:51:06 2024 by rpki-client on console-fra.rpki-client.org