Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wnwbhfigwBAMnDsJp45eA5_N_Dg.roa
File: wnwbhfigwBAMnDsJp45eA5_N_Dg.roa (raw, json)
Hash identifier: 5Jp7rnLlRNlD6LvwfAEuavXTpi9xXXSYqUadWZbMbks=
Subject key identifier: C2:7C:1B:85:F8:A0:C0:10:0C:9C:3B:09:A7:8E:5E:03:9F:CD:FC:38
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 0191DAE382C1DA85FD3656E4D0FA89B1BA19
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wnwbhfigwBAMnDsJp45eA5_N_Dg.roa
Signing time: Tue 10 Sep 2024 07:43:48 +0000
ROA not before: Tue 10 Sep 2024 07:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214526
IP address blocks: 178.239.144.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 12:03:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:e3:82:c1:da:85:fd:36:56:e4:d0:fa:89:b1:ba:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 10 07:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c27c1b85f8a0c0100c9c3b09a78e5e039fcdfc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ab:1c:2f:92:84:f5:5f:69:27:d6:12:3f:b9:
88:37:cc:c7:88:d3:cd:71:48:94:68:57:92:48:93:
6f:b9:4a:37:7c:5c:ad:21:cd:57:f2:36:5e:3a:e8:
2c:5d:85:22:b7:a8:d9:a3:f4:a5:88:b9:c1:ec:63:
04:bc:78:73:95:c9:2e:3c:77:fd:17:e2:64:f2:31:
0b:ec:e0:bf:db:fc:ac:f0:06:f8:ee:50:6f:cf:a0:
a5:c2:cf:a9:80:46:37:0b:68:05:0e:3a:6c:06:f6:
e6:7f:5b:3e:d5:ba:ed:3b:48:68:bf:1e:91:20:84:
59:e8:df:80:d1:e1:e4:a0:e0:bf:08:f1:66:68:53:
8a:4b:5e:07:e8:0b:25:d4:d2:70:21:31:a1:71:17:
d1:d9:13:09:6b:dd:3a:33:bb:61:e7:b5:e0:5d:81:
e6:f0:e5:60:0e:bc:4b:10:b1:c9:d9:65:89:21:83:
2c:6c:9a:64:ab:ee:78:00:65:6b:b4:56:83:54:aa:
8e:fb:fe:91:40:dc:ac:ea:b9:c7:63:19:0c:83:03:
a0:63:18:17:b0:7d:82:18:c7:70:c0:06:60:7b:81:
a4:6f:c2:96:c7:28:b9:f9:d3:1b:d8:7d:d8:e0:75:
60:85:59:a2:22:37:d8:8a:53:1e:a3:9e:e5:1b:cf:
fe:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:1B:85:F8:A0:C0:10:0C:9C:3B:09:A7:8E:5E:03:9F:CD:FC:38
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/wnwbhfigwBAMnDsJp45eA5_N_Dg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.239.144.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5a:79:54:4a:63:29:9d:10:b6:55:51:5e:74:e5:9d:24:13:
0b:12:af:d5:0a:22:a9:e9:7f:e9:6a:7c:6f:c9:e3:5a:d8:08:
a6:c5:d3:69:aa:63:68:a1:27:eb:0d:33:9b:c7:46:df:a6:b3:
8b:88:85:17:02:e2:4f:16:83:7c:da:71:13:b2:f4:3a:8d:cb:
14:e4:ce:02:7e:6b:b8:2c:e9:01:88:d9:b7:02:9d:74:83:b1:
09:cd:d7:46:5d:a6:9a:01:94:12:8c:51:a8:c4:fe:4b:97:7c:
cf:54:b4:b8:c5:11:14:3e:79:e1:8d:81:dd:dc:a4:7e:11:08:
c5:a8:80:8a:b9:30:e1:9b:35:67:93:d9:f1:c9:ce:3e:e0:84:
69:9d:49:6e:33:5e:1f:a0:2d:2e:62:ae:34:eb:3e:b0:dd:9e:
cd:df:71:76:1c:80:01:82:0b:e3:f5:eb:1a:dd:03:e9:fd:18:
71:fd:ef:4e:80:f0:7b:d0:1c:0b:77:83:ac:f4:45:fa:5e:6f:
e6:ad:e6:a3:4b:a7:14:6f:2f:4d:62:ae:01:12:1d:cc:43:16:
43:c7:e6:41:6a:4d:d6:44:4c:80:45:cf:db:b7:65:f3:59:7d:
37:21:ba:e1:84:59:30:8c:18:04:17:a8:7e:39:72:5d:72:59:
cd:02:96:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHa44LB2oX9Nlbk0PqJsboZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjQwOTEwMDc0MzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjdjMWI4NWY4YTBjMDEwMGM5YzNiMDlhNzhlNWUwMzlmY2RmYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqscL5KE9V9pJ9YSP7mIN8zHiNPN
cUiUaFeSSJNvuUo3fFytIc1X8jZeOugsXYUit6jZo/SliLnB7GMEvHhzlckuPHf9
F+Jk8jEL7OC/2/ys8Ab47lBvz6Clws+pgEY3C2gFDjpsBvbmf1s+1brtO0hovx6R
IIRZ6N+A0eHkoOC/CPFmaFOKS14H6Asl1NJwITGhcRfR2RMJa906M7th57XgXYHm
8OVgDrxLELHJ2WWJIYMsbJpkq+54AGVrtFaDVKqO+/6RQNys6rnHYxkMgwOgYxgX
sH2CGMdwwAZge4Gkb8KWxyi5+dMb2H3Y4HVghVmiIjfYilMeo57lG8/++wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJ8G4X4oMAQDJw7CaeOXgOfzfw4MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvd253YmhmaWd3QkFNbkRzSnA0NWVBNV9OX0RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu+QMA0G
CSqGSIb3DQEBCwUAA4IBAQCJWnlUSmMpnRC2VVFedOWdJBMLEq/VCiKp6X/panxv
yeNa2AimxdNpqmNooSfrDTObx0bfprOLiIUXAuJPFoN82nETsvQ6jcsU5M4Cfmu4
LOkBiNm3Ap10g7EJzddGXaaaAZQSjFGoxP5Ll3zPVLS4xREUPnnhjYHd3KR+EQjF
qICKuTDhmzVnk9nxyc4+4IRpnUluM14foC0uYq406z6w3Z7N33F2HIABggvj9esa
3QPp/Rhx/e9OgPB70BwLd4Os9EX6Xm/mreajS6cUby9NYq4BEh3MQxZDx+ZBak3W
REyARc/bt2XzWX03IbrhhFkwjBgEF6h+OXJdclnNApaz
-----END CERTIFICATE-----
Generated at Wed Oct 16 13:44:39 2024 by rpki-client on console-fra.rpki-client.org