Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/W6GtxAlDia3UTJX40YZe-JFyANE.roa
File: W6GtxAlDia3UTJX40YZe-JFyANE.roa (raw, json)
Hash identifier: NgGuLu1hlY3JWPD9I2G+jfzqPUkaI72Whp5V3j5uaeU=
Subject key identifier: 5B:A1:AD:C4:09:43:89:AD:D4:4C:95:F8:D1:86:5E:F8:91:72:00:D1
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018CC9BC6DFE2673C6080D08AC8BEECA1A70
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/W6GtxAlDia3UTJX40YZe-JFyANE.roa
Signing time: Tue 02 Jan 2024 10:33:38 +0000
ROA not before: Tue 02 Jan 2024 10:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 195.88.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 08:38:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:6d:fe:26:73:c6:08:0d:08:ac:8b:ee:ca:1a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5ba1adc4094389add44c95f8d1865ef8917200d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:74:1e:84:58:4e:b7:78:91:e1:4b:f5:b0:50:
77:3c:3b:9f:c7:00:69:b8:c8:cf:cf:85:83:c0:a5:
0d:93:11:91:48:c4:3a:c9:e2:46:e8:6b:8c:df:f9:
da:9a:b4:b7:3a:c6:c9:e1:a1:3f:3f:da:71:65:bc:
d9:41:55:fa:3f:97:7c:9b:de:17:c6:7a:9d:eb:91:
70:be:43:b5:aa:f2:6d:b9:05:0b:1a:7b:0d:ce:77:
89:8c:f2:08:f9:59:fc:0f:62:db:af:28:6d:f5:19:
14:5d:4d:cc:70:bf:6e:f0:7c:19:6c:d7:a2:63:5d:
a9:5b:ac:c2:61:15:e3:4e:93:ba:18:f5:d8:e7:87:
84:3f:38:ed:2a:17:12:58:7e:21:48:26:4a:09:49:
3e:9a:ee:4b:12:32:17:c7:e2:c8:a0:fa:79:a3:56:
ca:16:b5:a5:7d:d6:54:a0:29:c5:98:2c:1d:64:f3:
43:dc:3c:7d:f9:24:d8:fb:66:a2:8c:c0:d3:64:fd:
5b:83:1a:6a:54:3b:2d:97:26:3b:e2:73:7c:42:c9:
65:b8:92:be:41:65:61:b6:d3:80:05:cc:92:1c:7b:
db:1a:2e:5c:63:76:fe:4c:d2:3d:9a:79:7d:19:52:
b6:62:2e:69:ad:ab:3a:23:46:a2:f9:ac:be:10:1a:
89:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A1:AD:C4:09:43:89:AD:D4:4C:95:F8:D1:86:5E:F8:91:72:00:D1
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/W6GtxAlDia3UTJX40YZe-JFyANE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bc:64:8f:d1:e5:0a:3b:6a:5d:ff:c9:e3:33:4b:0f:fa:54:
e3:23:79:06:64:c5:ac:af:3b:87:33:95:94:bd:63:fc:c9:1b:
fe:f0:61:37:1e:25:4e:29:e8:bb:ef:dd:7a:1f:60:57:3d:25:
d6:5a:f1:28:8b:5c:50:39:71:8f:c8:14:da:16:e6:a3:60:7a:
c8:4b:d9:0d:9e:bf:8a:cb:cb:81:18:73:7f:52:ea:7a:a0:43:
a4:1d:b5:50:d3:e2:0f:06:55:6d:63:19:05:8d:0e:1f:41:8a:
29:46:80:c5:d4:f2:bd:90:27:d0:ce:a6:dc:a2:ed:a8:09:98:
c8:f4:90:f2:a7:ea:a5:58:e6:d6:2c:7d:7f:1d:75:aa:ee:8c:
9f:5c:27:43:6c:d4:25:28:f1:9c:36:ba:64:43:69:40:98:27:
55:f6:8b:01:f3:d0:38:17:1f:2e:2a:91:d5:2d:b9:6f:1b:52:
20:82:88:4f:35:87:b9:fb:8e:60:50:2a:02:75:4f:29:da:1a:
2c:f6:35:8c:4a:f1:5f:06:04:66:47:ee:08:be:fa:5a:30:91:
d7:d5:53:4f:f2:ea:7a:eb:4a:42:b7:ce:49:7f:d5:92:6b:d6:
f1:08:b5:8e:3a:79:ce:e2:81:6d:33:e3:87:51:c5:7b:47:da:
3e:b4:eb:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvG3+JnPGCA0IrIvuyhpwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjQwMTAyMTAzMzM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YmExYWRjNDA5NDM4OWFkZDQ0Yzk1ZjhkMTg2NWVmODkxNzIwMGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinQehFhOt3iR4Uv1sFB3PDufxwBp
uMjPz4WDwKUNkxGRSMQ6yeJG6GuM3/namrS3OsbJ4aE/P9pxZbzZQVX6P5d8m94X
xnqd65FwvkO1qvJtuQULGnsNzneJjPII+Vn8D2Lbryht9RkUXU3McL9u8HwZbNei
Y12pW6zCYRXjTpO6GPXY54eEPzjtKhcSWH4hSCZKCUk+mu5LEjIXx+LIoPp5o1bK
FrWlfdZUoCnFmCwdZPND3Dx9+STY+2aijMDTZP1bgxpqVDstlyY74nN8QslluJK+
QWVhttOABcySHHvbGi5cY3b+TNI9mnl9GVK2Yi5pras6I0ai+ay+EBqJVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFuhrcQJQ4mt1EyV+NGGXviRcgDRMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvVzZHdHhBbERpYTNVVEpYNDBZWmUtSkZ5QU5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1jVMA0G
CSqGSIb3DQEBCwUAA4IBAQA9vGSP0eUKO2pd/8njM0sP+lTjI3kGZMWsrzuHM5WU
vWP8yRv+8GE3HiVOKei77916H2BXPSXWWvEoi1xQOXGPyBTaFuajYHrIS9kNnr+K
y8uBGHN/Uup6oEOkHbVQ0+IPBlVtYxkFjQ4fQYopRoDF1PK9kCfQzqbcou2oCZjI
9JDyp+qlWObWLH1/HXWq7oyfXCdDbNQlKPGcNrpkQ2lAmCdV9osB89A4Fx8uKpHV
LblvG1IggohPNYe5+45gUCoCdU8p2hos9jWMSvFfBgRmR+4IvvpaMJHX1VNP8up6
60pCt85Jf9WSa9bxCLWOOnnO4oFtM+OHUcV7R9o+tOvT
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org