Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/Wwh5vi9vXpo-_R2vE_mHmM5uGxg.roa
File: Wwh5vi9vXpo-_R2vE_mHmM5uGxg.roa (raw, json)
Hash identifier: sujQStmfqS8efnHQ5kQwNwJBUAp3UlmOcakYMWrdzi8=
Subject key identifier: 5B:08:79:BE:2F:6F:5E:9A:3E:FD:1D:AF:13:F9:87:98:CE:6E:1B:18
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 018BFCCE9F22BE73B06773AF04C43BF86F8C
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/Wwh5vi9vXpo-_R2vE_mHmM5uGxg.roa
Signing time: Thu 23 Nov 2023 15:31:21 +0000
ROA not before: Thu 23 Nov 2023 15:31:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51975
IP address blocks: 46.151.208.0/22 maxlen: 22
46.151.212.0/22 maxlen: 22
185.79.248.0/23 maxlen: 23
185.79.250.0/23 maxlen: 23
2a05:78c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fc:ce:9f:22:be:73:b0:67:73:af:04:c4:3b:f8:6f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Nov 23 15:31:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b0879be2f6f5e9a3efd1daf13f98798ce6e1b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:bd:80:7b:7f:15:5b:e4:26:dd:91:e1:0b:
fc:57:c8:42:42:ee:72:b8:1b:0d:58:5a:e4:a6:61:
4d:ba:5e:8a:6d:be:91:41:92:29:ad:d0:d1:0f:4d:
9c:1c:e8:9a:9c:a1:ae:99:c8:c2:c6:7d:d8:3d:c3:
28:f9:4b:ad:1c:eb:2d:69:a7:83:8e:44:39:34:89:
81:31:c3:66:a4:95:4a:28:d6:8c:94:45:4b:b8:27:
f4:6a:5d:44:dc:5d:b9:3f:15:98:07:76:99:4b:c5:
a3:14:14:de:6c:4e:41:79:1e:fa:7d:7a:53:31:8c:
80:2c:42:a3:ae:67:ea:11:17:8f:b6:ab:28:fd:97:
8e:a4:19:d6:1a:6f:98:25:6a:74:a9:a1:77:72:c6:
70:17:6d:b5:f0:fe:54:b6:d4:da:01:ba:5d:ae:a7:
8d:b9:a3:fb:18:e3:5d:08:a7:94:8f:d2:6d:5d:e8:
07:50:de:9d:00:ca:7a:32:8b:91:98:ba:02:a1:7b:
68:79:ed:f9:20:ef:9e:6d:ec:f0:f7:ec:dd:9f:44:
08:2b:a1:b2:b1:11:71:05:0f:1e:cd:94:b8:e4:bf:
fe:0d:bd:48:92:a6:20:4d:16:64:af:61:f5:f6:c6:
e9:cb:d0:64:9f:78:ad:37:d9:9b:96:c7:ae:a5:f7:
fe:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:08:79:BE:2F:6F:5E:9A:3E:FD:1D:AF:13:F9:87:98:CE:6E:1B:18
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/Wwh5vi9vXpo-_R2vE_mHmM5uGxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.208.0/21
185.79.248.0/22
IPv6:
2a05:78c0::/32
Signature Algorithm: sha256WithRSAEncryption
05:f4:fe:c3:12:9b:dc:88:fd:ba:5e:25:d3:32:ac:d0:92:18:
10:78:c9:0f:5c:b4:a6:16:fd:4b:95:ff:74:44:58:07:e6:dc:
2a:6b:ce:15:93:5d:42:c8:08:a4:25:47:67:a6:3c:b9:1e:1f:
20:5f:e5:02:c1:ea:cb:70:97:5d:d5:89:c5:d3:da:52:89:50:
fc:89:33:00:1e:5e:f6:75:a7:2d:6a:46:2e:05:ac:3f:e1:03:
e4:14:99:a6:05:db:65:b1:29:4b:17:34:e4:4d:37:42:9c:c0:
b0:f5:92:9e:f1:33:fc:44:fb:48:47:cf:08:05:db:4e:6c:4c:
4e:fb:42:2b:76:b6:3d:10:c7:74:11:7a:fb:e7:da:a3:11:13:
06:e6:ae:1a:4d:ab:b5:4e:33:55:ca:cc:b2:95:fd:2c:00:00:
33:ba:88:49:ad:4e:e3:ec:d2:ca:45:a9:ca:4f:84:b7:89:c0:
43:b3:d5:b2:e8:34:2a:4e:fc:47:f3:b1:99:e4:ba:ef:ba:55:
1b:1f:cf:5b:ac:90:0b:e0:d5:0b:06:e4:05:b2:a6:09:96:50:
05:a7:d0:bd:bf:0a:bb:61:fa:7a:e7:91:ab:87:8d:c8:d6:36:
16:0b:0c:58:de:73:25:86:6b:b1:29:6f:e0:6f:09:ba:52:7a:
d1:87:c1:9a
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYv8zp8ivnOwZ3OvBMQ7+G+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhY2Q5MDFhYmEwZDM2YjY1NmNmOThlMGMwMjkxN2UzYWFh
Mjg5YjQwHhcNMjMxMTIzMTUzMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjA4NzliZTJmNmY1ZTlhM2VmZDFkYWYxM2Y5ODc5OGNlNmUxYjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2K9gHt/FVvkJt2R4Qv8V8hCQu5y
uBsNWFrkpmFNul6Kbb6RQZIprdDRD02cHOianKGumcjCxn3YPcMo+UutHOstaaeD
jkQ5NImBMcNmpJVKKNaMlEVLuCf0al1E3F25PxWYB3aZS8WjFBTebE5BeR76fXpT
MYyALEKjrmfqERePtqso/ZeOpBnWGm+YJWp0qaF3csZwF2218P5UttTaAbpdrqeN
uaP7GONdCKeUj9JtXegHUN6dAMp6MouRmLoCoXtoee35IO+ebezw9+zdn0QIK6Gy
sRFxBQ8ezZS45L/+Db1IkqYgTRZkr2H19sbpy9Bkn3itN9mblseupff+FwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFFsIeb4vb16aPv0drxP5h5jObhsYMB8GA1UdIwQY
MBaAFPrNkBq6DTa2Vs+Y4MApF+Oqoom0MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1zMlFHcm9OTnJaV3o1amd3Q2tYNDZxaWliUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1
LTAwZmUwNWMyYmZjNi8xL1d3aDV2aTl2WHBvLV9SMnZFX21IbU01dUd4Zy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjEvYTUyNmNhLTM3OWUtNDk1ZC04ZjE1LTAwZmUwNWMyYmZj
Ni8xLzEtczJRR3JvTk5yWld6NWpnd0NrWDQ2cWlpYlEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwNAYIKwYBBQUHAQcBAf8EJTAjMBIEAgABMAwDBAMul9AD
BAK5T/gwDQQCAAIwBwMFACoFeMAwDQYJKoZIhvcNAQELBQADggEBAAX0/sMSm9yI
/bpeJdMyrNCSGBB4yQ9ctKYW/UuV/3REWAfm3CprzhWTXULICKQlR2emPLkeHyBf
5QLB6stwl13VicXT2lKJUPyJMwAeXvZ1py1qRi4FrD/hA+QUmaYF22WxKUsXNORN
N0KcwLD1kp7xM/xE+0hHzwgF205sTE77Qit2tj0Qx3QRevvn2qMREwbmrhpNq7VO
M1XKzLKV/SwAADO6iEmtTuPs0spFqcpPhLeJwEOz1bLoNCpO/EfzsZnkuu+6VRsf
z1uskAvg1QsG5AWypgmWUAWn0L2/Crth+nrnkauHjcjWNhYLDFjecyWGa7Epb+Bv
CbpSetGHwZo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:17 2024 by rpki-client on console-fra.rpki-client.org