Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/whNjFSk_vYNpBYTz8W08Jsb6Vos.roa
File: whNjFSk_vYNpBYTz8W08Jsb6Vos.roa (raw, json)
Hash identifier: 2dReKNJq/VmBH25h4yfzuFJVVCt2ZBt8LPg00ib5WEw=
Subject key identifier: C2:13:63:15:29:3F:BD:83:69:05:84:F3:F1:6D:3C:26:C6:FA:56:8B
Certificate issuer: /CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Certificate serial: 01856D81C88B3F3BB5DBF40B656A825D0B92
Authority key identifier: 19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/whNjFSk_vYNpBYTz8W08Jsb6Vos.roa
Signing time: Sun 01 Jan 2023 13:25:00 +0000
ROA not before: Sun 01 Jan 2023 13:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58243
IP address blocks: 46.253.133.0/24 maxlen: 24
2a11:36c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:c8:8b:3f:3b:b5:db:f4:0b:65:6a:82:5d:0b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19b2e1fc400bbf9dcb2066ade3dbfe5c9eab2e7d
Validity
Not Before: Jan 1 13:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2136315293fbd83690584f3f16d3c26c6fa568b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:28:30:48:bc:7c:29:0a:1e:fa:3d:eb:0d:
d5:bd:2d:0c:0c:df:7f:3d:bd:1b:56:12:b4:43:02:
23:b5:cd:7a:7c:71:a2:21:db:2a:97:38:c2:ed:16:
16:73:dc:62:c3:93:23:b9:e9:d4:6c:04:4a:ca:77:
16:f7:29:e0:07:dd:80:f6:04:37:fd:2f:0c:ab:ff:
e8:ce:31:4a:43:9c:c3:83:76:27:47:cf:44:e6:80:
ff:98:cf:79:ca:e4:44:a0:70:af:4d:02:8d:da:c4:
1c:ed:f2:5e:41:be:50:29:77:12:39:6f:49:4d:85:
e3:2d:6b:25:f9:75:3a:d3:98:8b:66:a3:f4:ec:fc:
3f:63:ba:11:74:fb:6c:06:94:ef:1f:8e:26:0c:62:
85:c5:fb:4c:1c:0d:59:52:46:5f:64:09:94:3d:57:
be:e2:37:5b:05:86:46:ec:e2:b0:06:b9:2e:77:43:
4b:a9:fa:55:c3:18:14:14:06:cd:23:56:52:95:8a:
da:a7:fe:07:37:f6:d1:a8:b1:ff:a1:44:00:05:b8:
44:53:0b:da:b7:86:ef:4c:39:d9:40:fc:ef:7a:fe:
49:05:ac:a3:c7:cb:b9:69:a1:19:17:9b:5c:38:27:
d1:81:cb:82:a2:32:e0:66:d6:52:f3:3d:c2:4c:f0:
82:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:63:15:29:3F:BD:83:69:05:84:F3:F1:6D:3C:26:C6:FA:56:8B
X509v3 Authority Key Identifier:
keyid:19:B2:E1:FC:40:0B:BF:9D:CB:20:66:AD:E3:DB:FE:5C:9E:AB:2E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbLh_EALv53LIGat49v-XJ6rLn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/whNjFSk_vYNpBYTz8W08Jsb6Vos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b2e585-f58d-4220-8bef-0da9ae8458db/1/GbLh_EALv53LIGat49v-XJ6rLn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.253.133.0/24
IPv6:
2a11:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:52:66:29:75:af:0b:09:5d:6a:95:5e:4c:27:d0:4d:24:f4:
1b:e7:22:14:df:2e:c7:84:8d:4a:f2:7a:1c:6a:2a:be:09:fb:
e7:22:53:bd:a1:7e:fd:92:20:c5:c7:ef:22:ce:66:7c:8c:79:
47:d3:d7:c7:ed:50:f4:e8:83:69:fd:10:29:17:05:a2:eb:6d:
7b:4f:cc:ae:df:be:e1:53:0c:32:14:db:9b:cd:07:de:a5:5b:
de:aa:11:b5:f4:df:5f:89:26:d1:be:bf:50:2f:ed:af:36:e2:
9a:ed:f0:f0:8e:af:2a:bb:40:60:b3:41:48:80:39:73:7d:dd:
e6:a2:16:08:18:08:9c:36:b9:d5:22:8d:ff:fc:5f:12:1a:53:
53:14:e9:57:e8:7f:5a:f2:2f:14:19:4b:50:ff:c1:41:42:33:
c5:7b:e0:7a:97:3f:9b:b9:da:8b:5a:ae:5e:02:b7:55:df:0c:
b2:c8:9c:c4:6d:9b:18:d1:29:64:56:f5:c4:ba:2f:db:83:bb:
57:d5:de:68:f2:f0:83:f7:56:58:33:ac:00:74:a2:54:35:39:
12:65:9c:71:5e:37:70:27:a4:53:ba:54:9b:32:a6:6e:01:a5:
20:71:c1:0f:dd:62:79:a1:75:5a:3b:7a:f8:34:67:b1:95:f0:
91:82:15:4f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtgciLPzu12/QLZWqCXQuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5YjJlMWZjNDAwYmJmOWRjYjIwNjZhZGUzZGJmZTVjOWVh
YjJlN2QwHhcNMjMwMTAxMTMyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjEzNjMxNTI5M2ZiZDgzNjkwNTg0ZjNmMTZkM2MyNmM2ZmE1NjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQcoMEi8fCkKHvo96w3VvS0MDN9/
Pb0bVhK0QwIjtc16fHGiIdsqlzjC7RYWc9xiw5MjuenUbARKyncW9yngB92A9gQ3
/S8Mq//ozjFKQ5zDg3YnR89E5oD/mM95yuREoHCvTQKN2sQc7fJeQb5QKXcSOW9J
TYXjLWsl+XU605iLZqP07Pw/Y7oRdPtsBpTvH44mDGKFxftMHA1ZUkZfZAmUPVe+
4jdbBYZG7OKwBrkud0NLqfpVwxgUFAbNI1ZSlYrap/4HN/bRqLH/oUQABbhEUwva
t4bvTDnZQPzvev5JBayjx8u5aaEZF5tcOCfRgcuCojLgZtZS8z3CTPCCcwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMITYxUpP72DaQWE8/FtPCbG+laLMB8GA1UdIwQY
MBaAFBmy4fxAC7+dyyBmrePb/lyeqy59MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYt
MGRhOWFlODQ1OGRiLzEvd2hOakZTa192WU5wQllUejhXMDhKc2I2Vm9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9iMmU1ODUtZjU4ZC00MjIwLThiZWYtMGRhOWFlODQ1OGRi
LzEvR2JMaF9FQUx2NTNMSUdhdDQ5di1YSjZyTG4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALv2FMA0E
AgACMAcDBQMqETbAMA0GCSqGSIb3DQEBCwUAA4IBAQCKUmYpda8LCV1qlV5MJ9BN
JPQb5yIU3y7HhI1K8nocaiq+CfvnIlO9oX79kiDFx+8izmZ8jHlH09fH7VD06INp
/RApFwWi6217T8yu377hUwwyFNubzQfepVveqhG19N9fiSbRvr9QL+2vNuKa7fDw
jq8qu0Bgs0FIgDlzfd3mohYIGAicNrnVIo3//F8SGlNTFOlX6H9a8i8UGUtQ/8FB
QjPFe+B6lz+budqLWq5eArdV3wyyyJzEbZsY0SlkVvXEui/bg7tX1d5o8vCD91ZY
M6wAdKJUNTkSZZxxXjdwJ6RTulSbMqZuAaUgccEP3WJ5oXVaO3r4NGexlfCRghVP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org