Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/W0adz-wXfswTrUEQV5PqvXbdIWQ.roa
File: W0adz-wXfswTrUEQV5PqvXbdIWQ.roa (raw, json)
Hash identifier: +cVPVtmiwPgO3JmwHDLBTEG5s2UsRnVm6+vhpymCB/Y=
Subject key identifier: 5B:46:9D:CF:EC:17:7E:CC:13:AD:41:10:57:93:EA:BD:76:DD:21:64
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018CC26D22B4D9BD5B2B5A68603DA8A27BCE
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/W0adz-wXfswTrUEQV5PqvXbdIWQ.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39569
IP address blocks: 86.106.81.0/24 maxlen: 24
89.47.117.0/24 maxlen: 24
89.40.82.0/23 maxlen: 23
89.42.142.0/23 maxlen: 23
188.241.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 08:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:22:b4:d9:bd:5b:2b:5a:68:60:3d:a8:a2:7b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b469dcfec177ecc13ad41105793eabd76dd2164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:09:c4:c4:77:bb:60:04:8a:f7:03:b5:2e:63:
55:d7:13:2c:9e:4d:eb:71:97:78:3e:a4:4e:d8:39:
7a:2c:62:88:3f:ce:32:2a:11:b5:35:f0:f3:e5:15:
88:2b:71:5a:23:df:7d:05:6c:83:1e:86:79:96:2e:
90:28:4c:de:1f:29:7f:65:37:28:8d:ef:9e:d4:a7:
95:1e:51:95:9f:01:7e:95:7e:aa:43:36:87:b4:68:
ff:4f:66:4e:e6:9a:b8:a7:29:0b:9a:91:31:cb:3b:
93:9f:d6:00:9d:71:ce:20:95:c3:a8:b3:fc:2f:72:
bc:24:a3:47:6e:5f:fc:11:67:c7:c0:3d:da:7c:5f:
38:bd:88:01:36:ac:75:c9:24:4c:3e:ec:7e:ed:bc:
cc:f8:51:ae:12:d1:f3:b4:4e:78:3a:f3:85:47:14:
80:9d:b6:c4:60:b2:9f:00:51:ba:49:1d:76:dc:ff:
5b:ae:f8:ee:d0:ae:42:37:5c:fd:2a:cd:a1:36:32:
3a:13:8c:fa:40:b9:91:07:63:03:92:59:af:ed:36:
87:44:91:69:db:ac:13:ba:e2:93:f0:e1:a2:3e:f1:
d7:4f:70:36:68:6a:d6:98:42:25:41:c3:ec:9c:7c:
7f:3b:b4:31:74:fe:8c:39:70:38:2f:62:06:46:4c:
be:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:9D:CF:EC:17:7E:CC:13:AD:41:10:57:93:EA:BD:76:DD:21:64
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/W0adz-wXfswTrUEQV5PqvXbdIWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.81.0/24
89.40.82.0/23
89.42.142.0/23
89.47.117.0/24
188.241.3.0/24
Signature Algorithm: sha256WithRSAEncryption
11:2f:fd:01:a3:fe:d0:ff:1d:98:d7:d2:aa:7e:b8:ab:43:93:
36:8b:47:e6:67:8e:33:d9:0f:6e:5e:8e:7d:a0:24:19:a3:ce:
ad:f2:70:8c:32:12:ec:01:1e:ed:3b:0b:73:0f:c4:67:00:9c:
1f:18:23:06:0a:16:bf:7b:de:fb:d9:d2:5d:53:ee:90:88:af:
ef:b5:f9:0f:21:56:f4:96:6f:82:c6:23:3b:76:df:6f:8d:3b:
8e:90:cf:ba:d7:43:5e:e2:5a:84:87:c5:84:4b:88:a7:10:4d:
12:11:aa:c9:de:12:07:d4:c8:27:52:db:9d:53:5e:80:d3:2b:
55:45:e3:0a:34:b9:10:fc:a5:36:ca:3f:a9:83:74:43:f8:08:
0d:cc:2c:60:08:f9:ce:94:6c:25:c9:87:06:92:17:34:66:f2:
58:a8:16:d0:33:a2:f0:5b:57:d3:31:e6:b2:8c:97:7e:37:56:
27:0a:78:e5:29:84:a8:45:ca:27:25:8a:a4:4a:2f:1a:8e:7e:
2e:ed:fe:36:e2:b2:a8:be:08:55:16:e6:26:34:b5:ec:30:ce:
2e:c9:32:0a:25:dc:4b:bd:a4:68:5c:3a:7a:bb:e7:16:ba:1b:
00:0c:97:c4:4b:df:2c:09:03:86:b2:dc:55:2d:02:7f:63:65:
71:f2:98:da
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzCbSK02b1bK1poYD2oonvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjQwMTAxMDAyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjQ2OWRjZmVjMTc3ZWNjMTNhZDQxMTA1NzkzZWFiZDc2ZGQyMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAnExHe7YASK9wO1LmNV1xMsnk3r
cZd4PqRO2Dl6LGKIP84yKhG1NfDz5RWIK3FaI999BWyDHoZ5li6QKEzeHyl/ZTco
je+e1KeVHlGVnwF+lX6qQzaHtGj/T2ZO5pq4pykLmpExyzuTn9YAnXHOIJXDqLP8
L3K8JKNHbl/8EWfHwD3afF84vYgBNqx1ySRMPux+7bzM+FGuEtHztE54OvOFRxSA
nbbEYLKfAFG6SR123P9brvju0K5CN1z9Ks2hNjI6E4z6QLmRB2MDklmv7TaHRJFp
26wTuuKT8OGiPvHXT3A2aGrWmEIlQcPsnHx/O7QxdP6MOXA4L2IGRky+TwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFtGnc/sF37ME61BEFeT6r123SFkMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvVzBhZHotd1hmc3dUclVFUVY1UHF2WGJkSVdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVmpRAwQB
WShSAwQBWSqOAwQAWS91AwQAvPEDMA0GCSqGSIb3DQEBCwUAA4IBAQARL/0Bo/7Q
/x2Y19KqfrirQ5M2i0fmZ44z2Q9uXo59oCQZo86t8nCMMhLsAR7tOwtzD8RnAJwf
GCMGCha/e9772dJdU+6QiK/vtfkPIVb0lm+CxiM7dt9vjTuOkM+610Ne4lqEh8WE
S4inEE0SEarJ3hIH1MgnUtudU16A0ytVReMKNLkQ/KU2yj+pg3RD+AgNzCxgCPnO
lGwlyYcGkhc0ZvJYqBbQM6LwW1fTMeayjJd+N1YnCnjlKYSoRconJYqkSi8ajn4u
7f424rKovghVFuYmNLXsMM4uyTIKJdxLvaRoXDp6u+cWuhsADJfES98sCQOGstxV
LQJ/Y2Vx8pja
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:50 2024 by rpki-client on console-ams.rpki-client.org