Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/WMDkw8qf2zk_m_mAsK6iHbDyHXY.roa
File: WMDkw8qf2zk_m_mAsK6iHbDyHXY.roa (raw, json)
Hash identifier: /Rh0cb5VQ4nZ+YxTJ7N5PK1ovKaAeEWwMAIxcH9CVzM=
Subject key identifier: 58:C0:E4:C3:CA:9F:DB:39:3F:9B:F9:80:B0:AE:A2:1D:B0:F2:1D:76
Certificate issuer: /CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Certificate serial: 01856BD351D91CC652FDE925E55B7DF91A1B
Authority key identifier: DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/WMDkw8qf2zk_m_mAsK6iHbDyHXY.roa
Signing time: Sun 01 Jan 2023 05:34:49 +0000
ROA not before: Sun 01 Jan 2023 05:34:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197075
IP address blocks: 185.49.56.0/22 maxlen: 24
185.203.124.0/22 maxlen: 24
2a0a:e6c0::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:d3:51:d9:1c:c6:52:fd:e9:25:e5:5b:7d:f9:1a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8e60bb111087d0803fc3fcc4af327aa85c0b81
Validity
Not Before: Jan 1 05:34:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58c0e4c3ca9fdb393f9bf980b0aea21db0f21d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c3:00:bf:ef:c6:0b:73:5a:57:f7:e2:b5:ff:
78:63:2f:f4:85:91:54:fd:a4:51:a0:ef:27:61:42:
2b:d9:19:42:c5:05:f3:7e:ae:e6:34:06:8b:09:c4:
41:8b:62:c8:e7:b2:83:01:8c:78:0b:92:41:16:aa:
69:7f:f4:6d:62:ea:99:78:42:7a:db:96:e4:dc:fc:
af:80:cc:ee:0d:ed:4b:02:0f:a6:0c:ff:47:89:c6:
63:1d:2f:bb:83:f8:ff:c1:59:22:56:98:3c:b0:b2:
7c:42:ed:b5:b1:1c:dc:c4:d5:6f:6d:67:a8:b9:4c:
d6:b6:30:c4:80:a2:15:f6:57:79:28:b0:b4:6b:c5:
a1:9c:39:b8:d4:20:70:37:c7:ef:df:77:79:12:db:
01:85:43:c2:33:ed:1c:c8:89:be:f9:ab:7a:1b:ab:
c5:5c:d4:48:98:f0:16:08:82:ae:55:66:7e:8a:7a:
04:aa:56:76:8b:e6:ed:08:26:d3:0c:5e:b6:65:b6:
61:1b:7f:e9:b2:da:f8:d7:4b:95:b7:52:b9:a5:6e:
5e:72:a5:dc:08:80:65:cc:0e:8d:c9:d4:5b:c6:83:
db:f8:99:8a:06:27:68:44:4c:c7:81:6e:fc:e0:46:
e7:3d:4b:89:e1:91:57:0a:03:2b:27:b8:11:a4:bc:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C0:E4:C3:CA:9F:DB:39:3F:9B:F9:80:B0:AE:A2:1D:B0:F2:1D:76
X509v3 Authority Key Identifier:
keyid:DE:8E:60:BB:11:10:87:D0:80:3F:C3:FC:C4:AF:32:7A:A8:5C:0B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3o5guxEQh9CAP8P8xK8yeqhcC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/WMDkw8qf2zk_m_mAsK6iHbDyHXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c9883-f108-4fed-b416-a6f534c307f1/1/3o5guxEQh9CAP8P8xK8yeqhcC4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.56.0/22
185.203.124.0/22
IPv6:
2a0a:e6c0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:8b:b5:fd:a4:5a:a8:17:e4:db:c5:63:85:6b:9f:72:12:95:
6a:13:df:40:ba:96:02:62:a2:01:57:96:24:e4:23:77:fe:87:
14:a8:0c:fd:74:a1:b3:43:3b:3d:b8:ab:be:c7:1a:de:b0:fc:
c3:df:2c:0c:b6:51:59:89:16:b8:70:12:84:65:71:33:19:97:
04:9b:ff:c1:e7:95:54:a5:ef:ed:d9:60:7e:52:ef:71:2a:d2:
6d:90:ec:cd:a9:06:61:3c:b0:5c:40:fa:bc:21:8b:98:70:92:
3e:43:46:5f:6f:ad:8a:01:a0:9d:05:88:ee:ef:1a:40:2a:50:
e2:bd:04:12:e7:1a:59:e3:00:08:bc:7e:6a:a4:6a:16:44:5f:
a5:65:23:03:2b:88:ea:c7:74:be:ee:7a:d5:ff:36:95:e2:62:
09:17:78:b7:f0:aa:59:eb:19:b9:8f:20:43:e0:32:cb:bf:5a:
e3:58:73:97:53:78:53:14:01:c4:a8:cb:6e:8b:87:65:7e:6c:
74:e2:16:19:6d:d3:aa:ec:8b:d9:47:d0:6b:72:58:b6:34:99:
64:f9:22:a4:26:06:a1:6b:a4:fb:e2:e9:05:aa:1b:cc:c1:f1:
70:63:f1:b1:12:67:cd:2d:e9:37:3f:23:5a:5b:f7:19:e7:a8:
31:25:5b:71
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVr01HZHMZS/ekl5Vt9+RobMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOGU2MGJiMTExMDg3ZDA4MDNmYzNmY2M0YWYzMjdhYTg1
YzBiODEwHhcNMjMwMTAxMDUzNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGMwZTRjM2NhOWZkYjM5M2Y5YmY5ODBiMGFlYTIxZGIwZjIxZDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysMAv+/GC3NaV/fitf94Yy/0hZFU
/aRRoO8nYUIr2RlCxQXzfq7mNAaLCcRBi2LI57KDAYx4C5JBFqppf/RtYuqZeEJ6
25bk3PyvgMzuDe1LAg+mDP9HicZjHS+7g/j/wVkiVpg8sLJ8Qu21sRzcxNVvbWeo
uUzWtjDEgKIV9ld5KLC0a8WhnDm41CBwN8fv33d5EtsBhUPCM+0cyIm++at6G6vF
XNRImPAWCIKuVWZ+inoEqlZ2i+btCCbTDF62ZbZhG3/pstr410uVt1K5pW5ecqXc
CIBlzA6NydRbxoPb+JmKBidoREzHgW784EbnPUuJ4ZFXCgMrJ7gRpLx6SQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFjA5MPKn9s5P5v5gLCuoh2w8h12MB8GA1UdIwQY
MBaAFN6OYLsREIfQgD/D/MSvMnqoXAuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYt
YTZmNTM0YzMwN2YxLzEvV01Ea3c4cWYyemtfbV9tQXNLNmlIYkR5SFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8yYzk4ODMtZjEwOC00ZmVkLWI0MTYtYTZmNTM0YzMwN2Yx
LzEvM281Z3V4RVFoOUNBUDhQOHhLOHllcWhjQzRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuTE4AwQC
uct8MA0EAgACMAcDBQMqCubAMA0GCSqGSIb3DQEBCwUAA4IBAQCri7X9pFqoF+Tb
xWOFa59yEpVqE99AupYCYqIBV5Yk5CN3/ocUqAz9dKGzQzs9uKu+xxresPzD3ywM
tlFZiRa4cBKEZXEzGZcEm//B55VUpe/t2WB+Uu9xKtJtkOzNqQZhPLBcQPq8IYuY
cJI+Q0Zfb62KAaCdBYju7xpAKlDivQQS5xpZ4wAIvH5qpGoWRF+lZSMDK4jqx3S+
7nrV/zaV4mIJF3i38KpZ6xm5jyBD4DLLv1rjWHOXU3hTFAHEqMtui4dlfmx04hYZ
bdOq7IvZR9Brcli2NJlk+SKkJgaha6T74ukFqhvMwfFwY/GxEmfNLek3PyNaW/cZ
56gxJVtx
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:45 2024 by rpki-client on console-ams.rpki-client.org