Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wgmr8XzV5Ur17fSJqsBwDTs-aCQ.roa
File: Wgmr8XzV5Ur17fSJqsBwDTs-aCQ.roa (raw, json)
Hash identifier: kuZmySBxE5QDS1E3Pc335Ox7ls96F4K0KCk1dHb2vh0=
Subject key identifier: 5A:09:AB:F1:7C:D5:E5:4A:F5:ED:F4:89:AA:C0:70:0D:3B:3E:68:24
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0187F71695F7E41E2419290E666F4EF582AF
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wgmr8XzV5Ur17fSJqsBwDTs-aCQ.roa
Signing time: Sun 07 May 2023 16:41:05 +0000
ROA not before: Sun 07 May 2023 16:41:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 16:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f7:16:95:f7:e4:1e:24:19:29:0e:66:6f:4e:f5:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 7 16:41:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a09abf17cd5e54af5edf489aac0700d3b3e6824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:35:b3:99:44:db:88:0e:4c:8b:27:bb:04:28:
9a:5b:86:c1:a3:f4:95:c7:43:34:bb:92:4d:4d:2a:
f9:0a:72:52:cd:03:14:da:33:81:92:4e:ab:40:ce:
a7:90:e8:1f:ab:34:14:8e:a6:a4:3b:18:67:fb:b1:
f4:b1:b3:ef:ce:7a:db:93:1d:e3:f0:6a:e8:a0:19:
ee:f4:4e:10:66:95:41:8e:27:c5:d5:66:c2:af:cb:
07:c8:7b:d1:48:15:e7:e9:71:63:6e:33:d0:8b:ea:
27:46:44:57:a5:0f:07:ba:0f:48:05:bc:bb:cd:48:
69:71:16:3d:87:da:b6:43:0b:5a:3c:cb:12:a9:86:
9b:26:90:2b:25:4d:48:9a:cc:85:64:da:42:d0:02:
e5:4a:0c:f5:ca:d8:a7:54:a8:c4:fe:e3:41:10:fe:
7e:68:b5:af:f0:dd:9d:b4:63:0e:0d:54:56:8a:d0:
39:5d:ad:f4:d1:6a:b2:f1:db:2f:8d:90:af:35:eb:
27:17:32:35:69:77:b0:b5:ee:04:bc:f5:0b:94:02:
c4:be:0d:0a:91:22:92:3a:0b:b0:9a:a7:a5:d5:96:
45:40:51:25:12:6a:03:9e:f1:51:d4:09:ca:8f:a0:
37:64:e2:5e:8c:64:5b:9a:c6:7f:1d:bf:98:5a:bc:
8c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:09:AB:F1:7C:D5:E5:4A:F5:ED:F4:89:AA:C0:70:0D:3B:3E:68:24
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wgmr8XzV5Ur17fSJqsBwDTs-aCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.54.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f1:8c:3a:c2:d3:4a:61:3f:c8:b6:3d:aa:aa:12:14:23:d0:
ca:c3:3b:f3:a1:06:e1:be:df:ba:63:4e:43:ee:cd:fb:12:99:
da:10:3e:85:ce:0d:8f:0a:92:7d:42:ee:88:dd:61:38:d3:4f:
54:07:05:e4:e0:ea:da:37:fd:4f:46:47:36:34:59:13:8f:2e:
56:70:b5:a1:e3:ac:11:b7:49:7c:dc:6a:04:33:bd:7b:ae:85:
37:0e:5d:1c:79:23:27:46:a7:84:d3:b7:2c:3e:ca:6c:ce:8f:
d5:16:3e:56:68:71:5a:32:96:fe:10:5f:bd:49:91:8d:b2:84:
97:de:b6:fb:1a:6f:cc:00:39:10:d0:5c:34:6c:50:06:0f:0c:
54:5f:bd:96:ed:4a:a7:0f:fb:a3:92:0a:4c:8b:89:0d:2f:50:
d6:93:b7:5a:80:15:95:63:7f:04:af:47:97:d7:59:cd:b2:93:
8d:2f:19:49:ad:3e:94:ea:69:e5:17:8a:0c:c4:1d:ac:1d:51:
4c:c7:e5:ba:41:94:d2:49:02:c9:04:c8:ca:05:ff:95:3b:f7:
09:fe:a7:a6:1b:47:06:5e:86:17:ff:c1:96:08:05:aa:6a:7e:
08:3e:9f:5c:62:76:8c:8f:a0:ec:03:60:ac:d6:3b:55:28:8a:
f9:c1:76:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYf3FpX35B4kGSkOZm9O9YKvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjMwNTA3MTY0MTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTA5YWJmMTdjZDVlNTRhZjVlZGY0ODlhYWMwNzAwZDNiM2U2ODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDWzmUTbiA5Miye7BCiaW4bBo/SV
x0M0u5JNTSr5CnJSzQMU2jOBkk6rQM6nkOgfqzQUjqakOxhn+7H0sbPvznrbkx3j
8GrooBnu9E4QZpVBjifF1WbCr8sHyHvRSBXn6XFjbjPQi+onRkRXpQ8Hug9IBby7
zUhpcRY9h9q2QwtaPMsSqYabJpArJU1ImsyFZNpC0ALlSgz1ytinVKjE/uNBEP5+
aLWv8N2dtGMODVRWitA5Xa300Wqy8dsvjZCvNesnFzI1aXewte4EvPULlALEvg0K
kSKSOguwmqel1ZZFQFElEmoDnvFR1AnKj6A3ZOJejGRbmsZ/Hb+YWryMxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFoJq/F81eVK9e30iarAcA07PmgkMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvV2dtcjhYelY1VXIxN2ZTSnFzQndEVHMtYUNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZY2MA0G
CSqGSIb3DQEBCwUAA4IBAQBA8Yw6wtNKYT/Itj2qqhIUI9DKwzvzoQbhvt+6Y05D
7s37EpnaED6Fzg2PCpJ9Qu6I3WE4009UBwXk4OraN/1PRkc2NFkTjy5WcLWh46wR
t0l83GoEM717roU3Dl0ceSMnRqeE07csPspszo/VFj5WaHFaMpb+EF+9SZGNsoSX
3rb7Gm/MADkQ0Fw0bFAGDwxUX72W7UqnD/ujkgpMi4kNL1DWk7dagBWVY38Er0eX
11nNspONLxlJrT6U6mnlF4oMxB2sHVFMx+W6QZTSSQLJBMjKBf+VO/cJ/qemG0cG
XoYX/8GWCAWqan4IPp9cYnaMj6DsA2Cs1jtVKIr5wXZX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org