Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/WxxzrKBs7NK4u2Sq9TG2_AUlAtg.roa
File: WxxzrKBs7NK4u2Sq9TG2_AUlAtg.roa (raw, json)
Hash identifier: 3X9Vv/UpVjPGTrQRf/QeBwS+H3yGSH7bC1E+yjoqXks=
Subject key identifier: 5B:1C:73:AC:A0:6C:EC:D2:B8:BB:64:AA:F5:31:B6:FC:05:25:02:D8
Certificate issuer: /CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Certificate serial: 01856C65CDDE93CDE1CF05B82977E0FE4A9D
Authority key identifier: C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/WxxzrKBs7NK4u2Sq9TG2_AUlAtg.roa
Signing time: Sun 01 Jan 2023 08:14:49 +0000
ROA not before: Sun 01 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35179
IP address blocks: 213.109.47.0/24 maxlen: 24
213.109.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:cd:de:93:cd:e1:cf:05:b8:29:77:e0:fe:4a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41c7221ede3af5ee92e3206af2f18bd010d5dd9
Validity
Not Before: Jan 1 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b1c73aca06cecd2b8bb64aaf531b6fc052502d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f3:ac:ee:d3:b6:6c:fb:e7:5c:1e:b9:3c:5a:
0b:86:5d:f8:7b:9f:49:f0:9f:f2:d3:1b:06:b7:07:
33:c1:97:1b:88:1e:ea:7b:e8:65:fa:e9:aa:11:43:
cc:36:95:9e:61:6f:87:b2:5b:e3:00:91:11:e0:f0:
93:5c:d0:d4:e3:81:b9:46:0f:5d:9e:44:87:cf:f1:
06:84:b5:0e:d6:ac:92:f6:fd:0a:85:3b:7f:0c:f6:
05:39:67:91:3c:de:00:ea:0d:99:18:85:69:c6:3e:
88:27:ca:72:0f:99:72:da:ce:bc:d3:a2:5f:4f:ab:
d3:f0:a9:4a:b4:de:1d:a1:48:53:57:ef:dd:64:f5:
9c:cc:57:fb:ba:5e:69:fd:87:8f:88:8c:c3:8f:2f:
6a:8b:b7:26:2c:7e:3a:a0:59:b5:f6:4e:0d:c5:db:
3c:85:54:74:9f:06:db:fb:5a:0a:b9:ff:22:32:b5:
d4:62:1b:5b:b0:a8:90:d8:03:1a:62:00:87:e7:84:
a6:c3:22:22:f7:3c:9d:11:56:8d:3c:97:a3:bb:f6:
6e:fb:47:18:ec:d5:d2:e9:d2:9b:8d:75:e7:d5:5d:
01:44:4f:c6:e0:8d:db:2f:a2:3b:3c:12:2c:6e:cf:
86:6d:5a:78:a8:2e:60:60:1d:23:8b:59:4c:a1:c9:
73:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1C:73:AC:A0:6C:EC:D2:B8:BB:64:AA:F5:31:B6:FC:05:25:02:D8
X509v3 Authority Key Identifier:
keyid:C4:1C:72:21:ED:E3:AF:5E:E9:2E:32:06:AF:2F:18:BD:01:0D:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBxyIe3jr17pLjIGry8YvQENXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/WxxzrKBs7NK4u2Sq9TG2_AUlAtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/e99b35-8cf6-4934-a591-9930f2194a0e/1/xBxyIe3jr17pLjIGry8YvQENXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.109.46.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:5d:32:36:2d:a4:65:30:a8:7f:d8:9b:70:ed:0d:89:a3:3b:
1a:a3:7d:19:22:e9:3c:de:c9:07:21:9b:21:98:91:bd:57:fa:
53:67:44:ea:3f:06:0e:0b:f4:8d:65:10:30:d9:2c:cf:fa:88:
11:0c:4c:25:f6:25:43:5e:1a:e3:de:9d:3a:8e:a6:b3:47:a1:
c9:77:6e:0c:e6:36:98:6f:77:42:c6:9a:cb:70:16:0d:82:07:
6a:e0:5f:33:24:94:c4:6a:f1:c9:67:bf:f4:33:9b:61:09:44:
5e:11:53:64:47:1e:49:85:72:89:10:0a:1b:3c:c3:6a:0b:51:
b3:14:ad:f3:e6:57:ea:0b:b5:f6:a0:a6:fb:ce:8c:98:ab:cd:
4b:ac:20:03:f5:bb:80:52:ba:3c:cf:c9:93:de:7f:6b:e2:e3:
c0:44:e2:17:ac:3a:93:3c:56:54:49:ed:d0:35:64:1c:10:dd:
54:f9:7d:b8:8c:59:5d:cc:5b:25:d5:1c:e4:6b:2a:f8:2f:43:
b5:51:cb:61:d5:61:ad:0f:ea:a3:ce:92:a7:b6:60:75:e2:6e:
f0:87:2e:d2:ae:c0:3e:f9:f6:5d:31:d0:10:b6:8d:86:73:9b:
66:9a:5f:75:e9:44:bd:53:a1:40:7b:a5:57:90:f1:4d:45:71:
ed:b9:4d:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsZc3ek83hzwW4KXfg/kqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0MWM3MjIxZWRlM2FmNWVlOTJlMzIwNmFmMmYxOGJkMDEw
ZDVkZDkwHhcNMjMwMTAxMDgxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjFjNzNhY2EwNmNlY2QyYjhiYjY0YWFmNTMxYjZmYzA1MjUwMmQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfOs7tO2bPvnXB65PFoLhl34e59J
8J/y0xsGtwczwZcbiB7qe+hl+umqEUPMNpWeYW+HslvjAJER4PCTXNDU44G5Rg9d
nkSHz/EGhLUO1qyS9v0KhTt/DPYFOWeRPN4A6g2ZGIVpxj6IJ8pyD5ly2s6806Jf
T6vT8KlKtN4doUhTV+/dZPWczFf7ul5p/YePiIzDjy9qi7cmLH46oFm19k4Nxds8
hVR0nwbb+1oKuf8iMrXUYhtbsKiQ2AMaYgCH54SmwyIi9zydEVaNPJeju/Zu+0cY
7NXS6dKbjXXn1V0BRE/G4I3bL6I7PBIsbs+GbVp4qC5gYB0ji1lMoclzdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFscc6ygbOzSuLtkqvUxtvwFJQLYMB8GA1UdIwQY
MBaAFMQcciHt469e6S4yBq8vGL0BDV3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEt
OTkzMGYyMTk0YTBlLzEvV3h4enJLQnM3Tks0dTJTcTlURzJfQVVsQXRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9lOTliMzUtOGNmNi00OTM0LWE1OTEtOTkzMGYyMTk0YTBl
LzEveEJ4eUllM2pyMTdwTGpJR3J5OFl2UUVOWGRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1W0uMA0G
CSqGSIb3DQEBCwUAA4IBAQBqXTI2LaRlMKh/2Jtw7Q2Jozsao30ZIuk83skHIZsh
mJG9V/pTZ0TqPwYOC/SNZRAw2SzP+ogRDEwl9iVDXhrj3p06jqazR6HJd24M5jaY
b3dCxprLcBYNggdq4F8zJJTEavHJZ7/0M5thCUReEVNkRx5JhXKJEAobPMNqC1Gz
FK3z5lfqC7X2oKb7zoyYq81LrCAD9buAUro8z8mT3n9r4uPAROIXrDqTPFZUSe3Q
NWQcEN1U+X24jFldzFsl1Rzkayr4L0O1Ucth1WGtD+qjzpKntmB14m7why7SrsA+
+fZdMdAQto2Gc5tmml916US9U6FAe6VXkPFNRXHtuU0p
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:26 2024 by rpki-client on console-ams.rpki-client.org