Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/WOrmMzNJurqSANYOD79fNka8tw0.roa
File: WOrmMzNJurqSANYOD79fNka8tw0.roa (raw, json)
Hash identifier: lnbCldNcmE+Kod6ad0yjwkFEwdFdCBqqIQXQhdf0Nsw=
Subject key identifier: 58:EA:E6:33:33:49:BA:BA:92:00:D6:0E:0F:BF:5F:36:46:BC:B7:0D
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 01856F2FD2B2DF8D16FFB84A994A974266B3
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/WOrmMzNJurqSANYOD79fNka8tw0.roa
Signing time: Sun 01 Jan 2023 21:14:43 +0000
ROA not before: Sun 01 Jan 2023 21:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201939
IP address blocks: 185.57.52.0/22 maxlen: 24
2a02:5820::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:2f:d2:b2:df:8d:16:ff:b8:4a:99:4a:97:42:66:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Jan 1 21:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58eae6333349baba9200d60e0fbf5f3646bcb70d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:45:e8:3d:ba:98:fd:b0:db:3d:28:94:57:df:
03:69:25:e5:7c:c5:55:b7:8e:d1:6b:35:2d:c4:77:
e3:84:67:3c:90:e8:44:84:0f:3f:5e:ad:b3:81:b2:
1e:0b:d9:52:77:3a:b3:7d:5b:18:d8:10:8f:d8:80:
08:0f:47:36:04:f7:fb:a5:35:de:d8:1a:d8:c3:3b:
a5:6f:67:8c:23:6d:df:63:76:65:2c:ef:07:9b:74:
f4:87:a9:e9:c8:da:a2:03:93:0e:d7:b9:e9:0b:0b:
b4:07:d0:f6:61:dd:2c:75:2a:aa:7c:28:33:f2:e4:
4f:a6:e5:24:73:f6:c7:33:4f:cd:6f:c2:0e:92:c1:
83:41:74:b2:ce:3c:96:87:7f:d1:2a:78:27:25:d3:
8f:0e:06:b6:c5:c0:62:67:14:9f:7e:a4:02:18:ac:
bb:68:d4:67:39:d8:0e:13:32:fd:f6:fe:9a:c0:cc:
aa:17:b4:74:68:09:f7:ec:b0:37:33:9e:0e:01:5f:
74:96:85:06:a0:86:c2:53:ad:80:5e:21:fa:5f:7c:
0d:60:ab:d6:7b:f5:c5:19:30:96:a3:75:f8:72:a2:
67:a7:d9:7a:0f:08:6f:50:2d:7a:b0:e6:48:05:26:
8b:45:e9:b8:40:f7:d9:20:45:92:2b:a6:91:6b:cb:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EA:E6:33:33:49:BA:BA:92:00:D6:0E:0F:BF:5F:36:46:BC:B7:0D
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/WOrmMzNJurqSANYOD79fNka8tw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.57.52.0/22
IPv6:
2a02:5820::/32
Signature Algorithm: sha256WithRSAEncryption
4c:9c:e1:fc:cc:fa:9b:11:08:8c:0a:59:76:8b:2e:36:08:d4:
94:84:16:d4:86:a5:38:00:4e:63:9f:be:0a:fb:bc:c8:f5:41:
cc:ed:4b:c1:2b:67:9d:0a:3a:f0:20:b3:f6:73:0c:b6:09:6a:
3d:a8:5a:71:03:8e:1e:62:82:f4:0f:eb:e2:26:51:39:ee:dc:
06:ed:27:d2:81:b0:ed:da:f1:7e:92:a1:02:d1:39:c5:46:31:
53:25:72:4b:a4:73:ab:da:44:12:16:89:bc:0a:4a:c9:15:5d:
09:3e:61:0c:91:60:71:dd:4f:40:af:6d:21:26:55:bf:cd:9c:
41:dc:0d:9c:bd:f8:c8:7a:f7:bd:33:4d:34:54:b9:91:42:60:
06:8b:db:f9:c4:18:8c:61:12:b1:a3:be:1e:db:74:12:62:6a:
15:ef:ed:c8:ac:89:d8:7c:c5:dd:f2:bb:f4:82:94:5d:05:dc:
62:0b:c0:56:fb:19:78:bb:2f:1a:4c:5f:ff:e0:a8:ae:4c:3a:
44:38:0a:02:96:21:58:6b:a2:d5:3f:9c:a1:63:9a:40:ca:d6:
0c:13:e2:16:0a:7a:b3:6b:70:4a:2e:55:8b:70:55:08:09:ee:
2e:1e:f3:8f:3a:13:4c:15:ef:01:87:9f:c1:95:05:04:24:8e:
d5:e4:47:72
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVvL9Ky340W/7hKmUqXQmazMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3OGRlN2FiM2YxZTdmYzFiY2EzNTIwZWFjZmUwZTFhN2U2
YTU1ZmUwHhcNMjMwMTAxMjExNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGVhZTYzMzMzNDliYWJhOTIwMGQ2MGUwZmJmNWYzNjQ2YmNiNzBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0XoPbqY/bDbPSiUV98DaSXlfMVV
t47RazUtxHfjhGc8kOhEhA8/Xq2zgbIeC9lSdzqzfVsY2BCP2IAID0c2BPf7pTXe
2BrYwzulb2eMI23fY3ZlLO8Hm3T0h6npyNqiA5MO17npCwu0B9D2Yd0sdSqqfCgz
8uRPpuUkc/bHM0/Nb8IOksGDQXSyzjyWh3/RKngnJdOPDga2xcBiZxSffqQCGKy7
aNRnOdgOEzL99v6awMyqF7R0aAn37LA3M54OAV90loUGoIbCU62AXiH6X3wNYKvW
e/XFGTCWo3X4cqJnp9l6DwhvUC16sOZIBSaLRem4QPfZIEWSK6aRa8sskQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFjq5jMzSbq6kgDWDg+/XzZGvLcNMB8GA1UdIwQY
MBaAFMeN56s/Hn/BvKNSDqz+Dhp+alX+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNTMzMzgtOWVmYi00MGJkLTk4YTkt
YTdiZjllNTBhZjBiLzEvV09ybU16Tkp1cnFTQU5ZT0Q3OWZOa2E4dHcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNTMzMzgtOWVmYi00MGJkLTk4YTktYTdiZjllNTBhZjBi
LzEveDQzbnF6OGVmOEc4bzFJT3JQNE9HbjVxVmY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTk0MA0E
AgACMAcDBQAqAlggMA0GCSqGSIb3DQEBCwUAA4IBAQBMnOH8zPqbEQiMCll2iy42
CNSUhBbUhqU4AE5jn74K+7zI9UHM7UvBK2edCjrwILP2cwy2CWo9qFpxA44eYoL0
D+viJlE57twG7SfSgbDt2vF+kqEC0TnFRjFTJXJLpHOr2kQSFom8CkrJFV0JPmEM
kWBx3U9Ar20hJlW/zZxB3A2cvfjIeve9M000VLmRQmAGi9v5xBiMYRKxo74e23QS
YmoV7+3IrInYfMXd8rv0gpRdBdxiC8BW+xl4uy8aTF//4KiuTDpEOAoCliFYa6LV
P5yhY5pAytYME+IWCnqza3BKLlWLcFUICe4uHvOPOhNMFe8Bh5/BlQUEJI7V5Edy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:55 2024 by rpki-client on console-ams.rpki-client.org