Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/WHakciDST1QB9kWgweK-RXP-X00.roa
File: WHakciDST1QB9kWgweK-RXP-X00.roa (raw, json)
Hash identifier: vwBHulHGLp+AWsLdpKFDlPPHfClUG0V4sdSFtudgwkM=
Subject key identifier: 58:76:A4:72:20:D2:4F:54:01:F6:45:A0:C1:E2:BE:45:73:FE:5F:4D
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 01906EC2CCA133890F0DA64648BA17BC3AC8
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/WHakciDST1QB9kWgweK-RXP-X00.roa
Signing time: Mon 01 Jul 2024 14:46:18 +0000
ROA not before: Mon 01 Jul 2024 14:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.167.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jul 2024 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6e:c2:cc:a1:33:89:0f:0d:a6:46:48:ba:17:bc:3a:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jul 1 14:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5876a47220d24f5401f645a0c1e2be4573fe5f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:61:56:0a:eb:56:d7:2a:7d:16:82:14:8e:
c0:6f:c8:ca:b1:00:cc:8a:b8:a1:0d:68:62:bc:fe:
8e:7f:e1:b6:ec:fa:e9:10:d8:81:d1:e3:5b:69:60:
0e:4b:6c:dc:ff:d8:f9:54:ec:0b:09:8e:52:87:51:
38:80:b5:52:1b:2e:5c:4b:a2:05:04:93:e3:10:5b:
2f:7c:11:1c:cc:ba:0c:d2:3d:49:7e:8b:6c:c5:93:
8d:16:02:38:89:00:c5:d4:c8:13:9f:67:f3:33:fe:
1c:1e:1b:6a:3a:83:f3:dd:55:00:d8:4c:47:98:b4:
7a:f8:ac:04:75:09:07:c0:ef:eb:e7:db:52:59:09:
62:6e:94:65:1f:55:c4:8b:ca:b7:20:b4:e6:3b:09:
eb:39:3d:5e:8a:63:0d:5d:81:7f:4a:9a:92:81:8b:
1a:38:ca:3c:d4:8c:7b:85:fa:06:13:24:73:c0:9a:
dc:91:aa:5b:34:ff:b8:d6:cd:aa:34:31:cc:f2:bf:
38:97:60:2d:63:a2:1a:17:e4:b2:49:9b:ea:ab:f3:
e7:47:01:c4:01:8f:41:b3:25:34:a1:59:eb:bf:03:
05:61:1a:f5:f4:dd:ed:4e:cb:6e:5f:8a:9a:80:76:
1f:f2:90:2f:6e:a3:b4:df:42:82:a0:31:6d:93:81:
63:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:A4:72:20:D2:4F:54:01:F6:45:A0:C1:E2:BE:45:73:FE:5F:4D
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/WHakciDST1QB9kWgweK-RXP-X00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.232.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:12:19:2a:20:08:9f:47:0f:fb:7c:94:71:2d:c0:d4:dc:ff:
3b:80:54:00:44:cf:1c:7f:6c:36:00:e2:e1:19:d6:5e:b2:ec:
01:e8:98:24:0a:f4:28:8d:f9:aa:7f:81:a7:ac:04:c2:18:3d:
f8:67:bd:a6:ac:20:8e:12:f2:d5:9b:3f:9f:29:06:c6:0b:93:
2d:af:a6:25:89:66:5d:e0:37:28:fc:d5:b2:3f:85:f6:a9:1b:
15:ff:fb:93:45:d9:33:e1:b7:b9:88:ea:76:55:ed:8f:62:06:
04:51:39:35:2f:c3:43:a4:4d:7e:5e:81:48:44:7e:2b:e8:e8:
30:36:1d:6a:8a:0c:7e:ff:c6:f9:a0:7e:d2:14:5f:73:57:22:
07:09:01:2c:b0:ff:d1:8f:ac:78:1e:b2:36:15:79:ed:34:85:
34:8a:16:5c:23:89:1b:ab:b6:8e:d0:0b:c2:04:4f:8f:c4:d8:
78:47:e8:41:37:d1:b0:65:6a:b2:39:2a:4f:73:15:78:12:32:
50:39:a4:37:47:87:ea:db:eb:ae:c7:6e:96:82:a4:42:7e:4c:
94:55:6a:80:dd:e9:ad:53:45:82:82:e4:f2:e9:4d:ce:f5:d8:
a4:77:25:be:b2:36:16:95:13:cd:15:a2:75:74:ac:03:0f:d3:
7e:13:55:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBuwsyhM4kPDaZGSLoXvDrIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx
MmJiNjAwHhcNMjQwNzAxMTQ0NjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODc2YTQ3MjIwZDI0ZjU0MDFmNjQ1YTBjMWUyYmU0NTczZmU1ZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5thVgrrVtcqfRaCFI7Ab8jKsQDM
irihDWhivP6Of+G27PrpENiB0eNbaWAOS2zc/9j5VOwLCY5Sh1E4gLVSGy5cS6IF
BJPjEFsvfBEczLoM0j1JfotsxZONFgI4iQDF1MgTn2fzM/4cHhtqOoPz3VUA2ExH
mLR6+KwEdQkHwO/r59tSWQlibpRlH1XEi8q3ILTmOwnrOT1eimMNXYF/SpqSgYsa
OMo81Ix7hfoGEyRzwJrckapbNP+41s2qNDHM8r84l2AtY6IaF+SySZvqq/PnRwHE
AY9BsyU0oVnrvwMFYRr19N3tTstuX4qagHYf8pAvbqO030KCoDFtk4FjrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFh2pHIg0k9UAfZFoMHivkVz/l9NMB8GA1UdIwQY
MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt
OWNmODQzZjA1NjcwLzEvV0hha2NpRFNUMVFCOWtXZ3dlSy1SWFAtWDAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw
LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuafoMA0G
CSqGSIb3DQEBCwUAA4IBAQA+EhkqIAifRw/7fJRxLcDU3P87gFQARM8cf2w2AOLh
GdZesuwB6JgkCvQojfmqf4GnrATCGD34Z72mrCCOEvLVmz+fKQbGC5Mtr6YliWZd
4Dco/NWyP4X2qRsV//uTRdkz4be5iOp2Ve2PYgYEUTk1L8NDpE1+XoFIRH4r6Ogw
Nh1qigx+/8b5oH7SFF9zVyIHCQEssP/Rj6x4HrI2FXntNIU0ihZcI4kbq7aO0AvC
BE+PxNh4R+hBN9GwZWqyOSpPcxV4EjJQOaQ3R4fq2+uux26WgqRCfkyUVWqA3emt
U0WCguTy6U3O9dikdyW+sjYWlRPNFaJ1dKwDD9N+E1U2
-----END CERTIFICATE-----
Generated at Thu Jul 11 16:31:05 2024 by rpki-client on console-ams.rpki-client.org