Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/wPxCXaBE_Eqga_T0FjBrFULgwKc.roa
File: wPxCXaBE_Eqga_T0FjBrFULgwKc.roa (raw, json)
Hash identifier: /h9zPwsDkGK+N1qX3H+YjBF7uwTKdDuchUjzMSw8ExQ=
Subject key identifier: C0:FC:42:5D:A0:44:FC:4A:A0:6B:F4:F4:16:30:6B:15:42:E0:C0:A7
Certificate issuer: /CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Certificate serial: 018BF26BEE30CEEF4860C441D29C80FCC379
Authority key identifier: 19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/wPxCXaBE_Eqga_T0FjBrFULgwKc.roa
Signing time: Tue 21 Nov 2023 15:07:21 +0000
ROA not before: Tue 21 Nov 2023 15:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 185.197.178.0/24 maxlen: 24
185.197.179.0/24 maxlen: 24
185.197.176.0/24 maxlen: 24
185.197.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:6b:ee:30:ce:ef:48:60:c4:41:d2:9c:80:fc:c3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=199ef1b4eb6a0f812511b6bb2704801a3311f709
Validity
Not Before: Nov 21 15:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0fc425da044fc4aa06bf4f416306b1542e0c0a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ca:b0:07:ee:29:24:46:a1:eb:2b:bb:b4:c8:
60:3c:35:03:62:1b:cd:6f:22:db:26:51:ef:94:f2:
be:70:e8:c2:d9:70:24:18:8a:fc:df:b6:39:83:bc:
44:34:54:b5:68:35:bd:5a:db:d3:0c:70:b6:8b:10:
89:a9:0a:66:74:6a:ae:dc:34:a0:9d:50:05:a1:d2:
ee:e2:75:e6:fb:b1:8d:6c:e4:71:b3:0d:cc:89:02:
dc:5a:e0:47:ea:26:a9:42:d2:1b:26:fd:54:f5:ae:
0b:b6:86:15:cf:c0:90:4f:a4:e9:bd:03:b4:61:15:
c0:ba:de:e1:dc:2e:6d:f9:00:c9:eb:b6:47:bd:c5:
bb:95:97:f9:e5:0b:9c:fa:7d:13:f3:bd:2e:1b:9d:
de:0e:fe:50:71:0c:c7:21:c3:8b:4d:a2:50:14:78:
83:25:ef:7f:58:a8:a2:e0:f6:80:56:9d:f6:dd:76:
4c:28:91:c9:3e:d0:17:14:d2:58:2e:da:d9:d8:64:
2f:8d:24:44:9d:fb:7e:59:52:8c:2d:a8:78:1c:22:
6d:9c:95:3f:4b:c3:f4:ef:7d:9c:7a:4a:20:c8:96:
a0:33:10:64:d9:e7:ae:78:26:4c:df:ef:50:71:fa:
d5:d1:bb:34:1d:61:37:e6:13:0b:6a:4b:e0:0b:31:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FC:42:5D:A0:44:FC:4A:A0:6B:F4:F4:16:30:6B:15:42:E0:C0:A7
X509v3 Authority Key Identifier:
keyid:19:9E:F1:B4:EB:6A:0F:81:25:11:B6:BB:27:04:80:1A:33:11:F7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GZ7xtOtqD4ElEba7JwSAGjMR9wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/wPxCXaBE_Eqga_T0FjBrFULgwKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eafe6e-cfe3-4245-9c36-07a28ad3cb64/1/GZ7xtOtqD4ElEba7JwSAGjMR9wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.176.0/22
Signature Algorithm: sha256WithRSAEncryption
48:05:f8:3d:b6:46:6f:34:cf:83:c3:1c:ca:a9:33:44:3c:59:
ae:f4:0e:73:3e:de:25:78:df:0a:1a:a9:68:28:c7:c6:67:9c:
03:96:5d:e9:93:24:8e:ad:48:56:15:5d:94:1c:39:61:d8:ed:
5c:2f:38:65:f1:2c:b6:a0:32:53:f1:6e:9b:1a:c4:fb:8a:d2:
bc:f3:67:63:bc:ca:9c:75:42:38:ec:34:60:af:56:48:9b:0d:
4f:82:ac:11:ff:b5:26:69:eb:3b:eb:b6:ac:16:4e:ef:ee:66:
11:1f:bc:79:9f:47:0f:b6:c2:b4:e5:b4:d7:d1:b4:9f:52:52:
7b:e6:61:5d:ca:39:0b:ac:98:09:0f:42:e9:0f:a4:6c:f2:35:
3a:26:e8:c1:38:ef:4a:c8:ad:81:d0:07:b7:d7:a5:9c:9a:38:
71:ea:84:22:ff:d0:bd:7c:65:10:8b:b3:ad:cd:84:a9:dc:d2:
ce:5e:25:1e:c7:58:51:b0:ac:83:a1:4b:17:4f:60:6d:89:7e:
ea:a6:51:55:b3:c0:3f:74:98:32:42:0c:5c:4a:13:13:3e:a7:
9d:6b:05:79:7c:3a:a6:f8:a4:8a:f5:2c:95:4f:eb:01:b7:37:
a9:d2:4a:9e:68:d7:b3:8e:96:56:35:38:5f:cd:84:4c:80:97:
b1:0b:e2:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvya+4wzu9IYMRB0pyA/MN5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5OWVmMWI0ZWI2YTBmODEyNTExYjZiYjI3MDQ4MDFhMzMx
MWY3MDkwHhcNMjMxMTIxMTUwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGZjNDI1ZGEwNDRmYzRhYTA2YmY0ZjQxNjMwNmIxNTQyZTBjMGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMqwB+4pJEah6yu7tMhgPDUDYhvN
byLbJlHvlPK+cOjC2XAkGIr837Y5g7xENFS1aDW9WtvTDHC2ixCJqQpmdGqu3DSg
nVAFodLu4nXm+7GNbORxsw3MiQLcWuBH6iapQtIbJv1U9a4LtoYVz8CQT6TpvQO0
YRXAut7h3C5t+QDJ67ZHvcW7lZf55Quc+n0T870uG53eDv5QcQzHIcOLTaJQFHiD
Je9/WKii4PaAVp323XZMKJHJPtAXFNJYLtrZ2GQvjSREnft+WVKMLah4HCJtnJU/
S8P0732cekogyJagMxBk2eeueCZM3+9QcfrV0bs0HWE35hMLakvgCzFy9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMD8Ql2gRPxKoGv09BYwaxVC4MCnMB8GA1UdIwQY
MBaAFBme8bTrag+BJRG2uycEgBozEfcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYt
MDdhMjhhZDNjYjY0LzEvd1B4Q1hhQkVfRXFnYV9UMEZqQnJGVUxnd0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9lYWZlNmUtY2ZlMy00MjQ1LTljMzYtMDdhMjhhZDNjYjY0
LzEvR1o3eHRPdHFENEVsRWJhN0p3U0FHak1SOXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucWwMA0G
CSqGSIb3DQEBCwUAA4IBAQBIBfg9tkZvNM+DwxzKqTNEPFmu9A5zPt4leN8KGqlo
KMfGZ5wDll3pkySOrUhWFV2UHDlh2O1cLzhl8Sy2oDJT8W6bGsT7itK882djvMqc
dUI47DRgr1ZImw1PgqwR/7Umaes767asFk7v7mYRH7x5n0cPtsK05bTX0bSfUlJ7
5mFdyjkLrJgJD0LpD6Rs8jU6JujBOO9KyK2B0Ae316Wcmjhx6oQi/9C9fGUQi7Ot
zYSp3NLOXiUex1hRsKyDoUsXT2BtiX7qplFVs8A/dJgyQgxcShMTPqedawV5fDqm
+KSK9SyVT+sBtzep0kqeaNezjpZWNThfzYRMgJexC+JZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:57 2024 by rpki-client on console-fra.rpki-client.org