Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wEE2UdqYJ7MSSItRs2I7_xUgoK0.roa
File: wEE2UdqYJ7MSSItRs2I7_xUgoK0.roa (raw, json)
Hash identifier: Lpz7g9yOdD0U2hO2OBorvnxwvI+O2jkLwv2bKH9ZMtQ=
Subject key identifier: C0:41:36:51:DA:98:27:B3:12:48:8B:51:B3:62:3B:FF:15:20:A0:AD
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0185D07AA8188900AE1BE3D2020E5A942C7B
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wEE2UdqYJ7MSSItRs2I7_xUgoK0.roa
Signing time: Fri 20 Jan 2023 18:39:37 +0000
ROA not before: Fri 20 Jan 2023 18:39:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52035
IP address blocks: 158.41.24.0/21 maxlen: 24
185.179.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 08:08:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d0:7a:a8:18:89:00:ae:1b:e3:d2:02:0e:5a:94:2c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 20 18:39:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0413651da9827b312488b51b3623bff1520a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:da:57:32:94:67:a8:a6:20:91:cf:93:57:
03:97:ad:7f:44:96:f3:90:66:07:02:7c:bb:a9:d5:
44:f2:19:d9:92:6a:ba:33:4b:4f:ff:a7:f2:bb:60:
1f:46:dc:3f:44:ad:17:d6:5b:48:86:e3:86:3e:a1:
07:23:58:ee:e1:d8:19:64:db:bf:91:bc:eb:41:97:
53:e6:d7:71:eb:11:25:24:e5:b7:3b:4e:c9:ae:45:
54:af:48:6d:1b:d7:e3:9d:17:7e:3b:a3:3f:a0:26:
19:78:7c:50:d0:9f:f7:1d:aa:1f:f4:9f:24:c6:2f:
fe:94:e0:53:5b:44:a1:99:66:b8:9f:62:af:61:39:
83:12:7a:3b:4c:f2:d0:41:be:39:1c:d0:3c:73:6e:
85:dc:e5:38:95:39:4b:d5:59:12:8a:8a:21:4d:7a:
ab:08:0b:75:0c:96:5d:b2:51:1b:82:dc:d9:a8:0b:
ae:9f:5e:61:8d:92:10:c5:51:f8:ec:2e:cb:61:9b:
6a:98:bb:44:3d:27:f0:a5:b4:f6:29:8b:5a:8d:94:
5c:0f:cc:6a:cf:9a:22:62:09:fc:7a:23:c4:1f:8b:
f7:b0:63:08:3f:5c:a9:4d:71:3b:36:f0:5f:c9:a7:
3d:23:91:b2:a0:ad:1e:01:06:e3:d3:0d:05:ac:ba:
26:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:41:36:51:DA:98:27:B3:12:48:8B:51:B3:62:3B:FF:15:20:A0:AD
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/wEE2UdqYJ7MSSItRs2I7_xUgoK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.41.24.0/21
185.179.216.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b7:0c:3d:4f:b1:68:5d:f4:55:aa:97:75:9f:45:d5:ec:20:
cd:a9:02:dd:c2:43:e8:dd:ec:85:c6:e6:e9:8e:56:6a:d0:ee:
c7:ef:6f:db:3f:d7:37:42:13:ca:cb:95:2c:c2:b4:5d:f5:4b:
a5:e2:4f:13:9f:18:64:41:c3:77:4e:c6:27:5c:56:cd:47:09:
3c:be:68:28:f3:17:12:a2:99:70:6b:74:30:80:e1:14:39:95:
6a:4a:da:ce:2f:cb:a1:a1:e4:45:37:64:ff:3e:d5:64:ba:5b:
5a:28:cc:80:47:24:62:5a:cd:e9:50:ab:f2:6b:f7:8c:0e:11:
13:5b:c8:21:44:2d:fd:57:54:19:7a:43:f2:31:85:f3:b3:69:
50:dd:dc:8e:03:4c:a7:b0:1d:5c:0c:f1:83:4d:83:41:74:c1:
10:d0:cd:03:76:ef:f8:81:74:b3:bc:d1:1b:04:9f:fb:66:82:
00:68:5a:0c:0f:8e:d0:c4:bf:e9:f4:d6:89:bb:5e:6f:1f:29:
21:12:e2:88:98:fc:69:72:7d:6b:4d:f4:6e:a4:7c:64:47:e6:
43:11:fe:22:4f:30:8a:85:4a:46:13:ea:05:6f:c5:1d:56:4c:
ca:29:47:45:76:0d:68:5a:cb:fb:41:f8:9b:50:9e:59:99:77:
ae:08:c1:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXQeqgYiQCuG+PSAg5alCx7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwMTIwMTgzOTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDQxMzY1MWRhOTgyN2IzMTI0ODhiNTFiMzYyM2JmZjE1MjBhMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtraVzKUZ6imIJHPk1cDl61/RJbz
kGYHAny7qdVE8hnZkmq6M0tP/6fyu2AfRtw/RK0X1ltIhuOGPqEHI1ju4dgZZNu/
kbzrQZdT5tdx6xElJOW3O07JrkVUr0htG9fjnRd+O6M/oCYZeHxQ0J/3Haof9J8k
xi/+lOBTW0ShmWa4n2KvYTmDEno7TPLQQb45HNA8c26F3OU4lTlL1VkSioohTXqr
CAt1DJZdslEbgtzZqAuun15hjZIQxVH47C7LYZtqmLtEPSfwpbT2KYtajZRcD8xq
z5oiYgn8eiPEH4v3sGMIP1ypTXE7NvBfyac9I5GyoK0eAQbj0w0FrLomfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMBBNlHamCezEkiLUbNiO/8VIKCtMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvd0VFMlVkcVlKN01TU0l0UnMySTdfeFVnb0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDnikYAwQA
ubPYMA0GCSqGSIb3DQEBCwUAA4IBAQBotww9T7FoXfRVqpd1n0XV7CDNqQLdwkPo
3eyFxubpjlZq0O7H72/bP9c3QhPKy5UswrRd9Uul4k8TnxhkQcN3TsYnXFbNRwk8
vmgo8xcSoplwa3QwgOEUOZVqStrOL8uhoeRFN2T/PtVkultaKMyARyRiWs3pUKvy
a/eMDhETW8ghRC39V1QZekPyMYXzs2lQ3dyOA0ynsB1cDPGDTYNBdMEQ0M0Ddu/4
gXSzvNEbBJ/7ZoIAaFoMD47QxL/p9NaJu15vHykhEuKImPxpcn1rTfRupHxkR+ZD
Ef4iTzCKhUpGE+oFb8UdVkzKKUdFdg1oWsv7QfibUJ5ZmXeuCMFn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org