Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/Wma0XCjbnVC7CDnvrAF0AM1jBHo.roa
File: Wma0XCjbnVC7CDnvrAF0AM1jBHo.roa (raw, json)
Hash identifier: fOJW6GbV3AqZAidlo8gQBpJXMuOIu0FXzXo/JLczcU8=
Subject key identifier: 5A:66:B4:5C:28:DB:9D:50:BB:08:39:EF:AC:01:74:00:CD:63:04:7A
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 018BFE8C7C5D2A288A227348D7B4163C8098
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/Wma0XCjbnVC7CDnvrAF0AM1jBHo.roa
Signing time: Thu 23 Nov 2023 23:38:21 +0000
ROA not before: Thu 23 Nov 2023 23:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 91.132.114.0/23 maxlen: 32
103.53.82.0/23 maxlen: 32
193.28.237.0/24 maxlen: 32
45.114.12.0/22 maxlen: 32
193.28.182.0/24 maxlen: 32
193.28.191.0/24 maxlen: 32
193.28.202.0/24 maxlen: 32
103.240.180.0/22 maxlen: 32
103.53.216.0/22 maxlen: 32
146.19.206.0/24 maxlen: 24
193.19.204.0/24 maxlen: 32
193.19.205.0/24 maxlen: 32
193.19.206.0/24 maxlen: 32
193.19.207.0/24 maxlen: 32
45.145.104.0/22 maxlen: 32
146.19.37.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fe:8c:7c:5d:2a:28:8a:22:73:48:d7:b4:16:3c:80:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Nov 23 23:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a66b45c28db9d50bb0839efac017400cd63047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9a:b8:5e:15:1f:27:27:78:04:43:58:a3:f4:
a3:6f:4f:75:4c:27:5e:1e:39:e1:08:bd:98:63:4f:
c7:52:a4:e4:4b:9f:06:26:46:20:e5:a9:fc:49:20:
31:b0:fa:da:a0:e5:0e:2d:2b:6c:f5:7c:e6:49:2e:
87:37:fc:e9:3f:9c:cb:16:0e:c9:ae:a9:33:17:7d:
5c:07:c8:d7:39:30:e1:30:7c:a9:50:74:5c:83:93:
44:65:fa:3d:de:62:fc:6d:43:ca:6c:d0:9d:20:af:
cc:69:11:7d:bc:d3:01:71:87:cc:60:35:7c:d9:72:
a3:03:e3:a4:78:6b:dc:b9:85:f3:ba:3f:e9:f3:6f:
33:61:e8:42:98:37:53:40:97:98:77:1d:47:73:69:
65:4e:48:0c:b6:bc:b6:30:3b:66:9b:e1:09:9d:2d:
26:2f:4c:4a:1a:48:e2:cd:ce:59:67:15:e1:bd:17:
68:ab:0b:98:f8:a6:b3:73:dd:91:02:a4:92:58:07:
c6:b6:bf:e3:63:10:b6:b2:e9:76:24:cb:34:f3:4c:
ca:03:2c:92:22:30:45:bc:5a:42:f8:71:2d:d0:9a:
19:3f:f3:04:8b:8b:00:92:fb:14:34:64:ff:04:01:
7b:12:fa:82:24:2b:2d:44:b7:23:1d:72:48:1d:40:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:66:B4:5C:28:DB:9D:50:BB:08:39:EF:AC:01:74:00:CD:63:04:7A
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/Wma0XCjbnVC7CDnvrAF0AM1jBHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.114.12.0/22
45.145.104.0/22
91.132.114.0/23
103.53.82.0/23
103.53.216.0/22
103.240.180.0/22
146.19.37.0/24
146.19.206.0/24
193.19.204.0/22
193.28.182.0/24
193.28.191.0/24
193.28.202.0/24
193.28.237.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:71:0a:cc:1f:9c:e3:bd:a1:c6:3b:1b:fc:59:94:d6:1f:bd:
b8:f2:9b:17:e6:71:85:0a:3d:c0:87:09:0e:4a:f6:20:d3:22:
a6:35:db:2a:84:92:3d:cd:f4:0c:52:69:1b:25:21:e9:7d:51:
f6:be:b2:76:fe:00:7e:e1:94:9f:c8:1d:eb:13:13:13:62:24:
c4:eb:cd:8b:9f:d0:ad:58:46:31:e9:c1:c1:0b:76:f9:a2:fc:
e6:10:d8:2e:73:35:da:9c:9a:da:f0:8b:45:89:3d:8f:e0:a4:
ef:2b:e3:95:11:2f:f6:b3:1d:d5:c7:6f:88:41:2b:77:ac:70:
a5:79:b4:28:c8:1e:24:bc:30:10:d6:4b:8d:f8:69:c4:c8:7c:
d4:7a:ce:6f:aa:7a:12:3d:e6:84:e2:40:a6:41:43:ca:67:1f:
91:e5:04:6d:6f:f6:2a:7a:42:ee:4e:fb:e8:2e:87:e6:c3:66:
4d:0f:db:d9:f8:f6:f5:9a:21:fe:87:b6:4b:2a:4a:be:3e:84:
a9:34:93:5e:30:fe:25:26:3f:21:2e:93:76:77:a1:1b:f6:ac:
d0:62:8c:5d:d4:f1:1e:14:ba:b1:a2:e2:c4:02:1c:cb:96:38:
ae:4e:b7:14:d6:69:e3:82:a1:52:b9:d1:4c:99:88:cc:7f:48:
e3:b5:6c:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAYv+jHxdKiiKInNI17QWPICYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx
MGU4M2MwHhcNMjMxMTIzMjMzODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTY2YjQ1YzI4ZGI5ZDUwYmIwODM5ZWZhYzAxNzQwMGNkNjMwNDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpq4XhUfJyd4BENYo/Sjb091TCde
HjnhCL2YY0/HUqTkS58GJkYg5an8SSAxsPraoOUOLSts9XzmSS6HN/zpP5zLFg7J
rqkzF31cB8jXOTDhMHypUHRcg5NEZfo93mL8bUPKbNCdIK/MaRF9vNMBcYfMYDV8
2XKjA+OkeGvcuYXzuj/p828zYehCmDdTQJeYdx1Hc2llTkgMtry2MDtmm+EJnS0m
L0xKGkjizc5ZZxXhvRdoqwuY+Kazc92RAqSSWAfGtr/jYxC2sul2JMs080zKAyyS
IjBFvFpC+HEt0JoZP/MEi4sAkvsUNGT/BAF7EvqCJCstRLcjHXJIHUCouwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFFpmtFwo251Quwg576wBdADNYwR6MB8GA1UdIwQY
MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt
ZmMzN2ZiMGNkNDNiLzEvV21hMFhDamJuVkM3Q0RudnJBRjBBTTFqQkhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi
LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQCLXIMAwQC
LZFoAwQBW4RyAwQBZzVSAwQCZzXYAwQCZ/C0AwQAkhMlAwQAkhPOAwQCwRPMAwQA
wRy2AwQAwRy/AwQAwRzKAwQAwRztMA0GCSqGSIb3DQEBCwUAA4IBAQDDcQrMH5zj
vaHGOxv8WZTWH7248psX5nGFCj3AhwkOSvYg0yKmNdsqhJI9zfQMUmkbJSHpfVH2
vrJ2/gB+4ZSfyB3rExMTYiTE682Ln9CtWEYx6cHBC3b5ovzmENguczXanJra8ItF
iT2P4KTvK+OVES/2sx3Vx2+IQSt3rHClebQoyB4kvDAQ1kuN+GnEyHzUes5vqnoS
PeaE4kCmQUPKZx+R5QRtb/YqekLuTvvoLofmw2ZND9vZ+Pb1miH+h7ZLKkq+PoSp
NJNeMP4lJj8hLpN2d6Eb9qzQYoxd1PEeFLqxouLEAhzLljiuTrcU1mnjgqFSudFM
mYjMf0jjtWxN
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:59 2024 by rpki-client on console-fra.rpki-client.org