Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/WUiXj3GjUmJGJY1w1lU8vl74uiA.roa
File: WUiXj3GjUmJGJY1w1lU8vl74uiA.roa (raw, json)
Hash identifier: i5IT94Om3IUa+kfLYPnU/J7mNiFFo15dzoQLlAFeK1w=
Subject key identifier: 59:48:97:8F:71:A3:52:62:46:25:8D:70:D6:55:3C:BE:5E:F8:BA:20
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 018CC9BCD33A9BD1DB54DAB41675F1C6CC68
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/WUiXj3GjUmJGJY1w1lU8vl74uiA.roa
Signing time: Tue 02 Jan 2024 10:34:04 +0000
ROA not before: Tue 02 Jan 2024 10:34:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15576
IP address blocks: 91.199.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d3:3a:9b:d1:db:54:da:b4:16:75:f1:c6:cc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jan 2 10:34:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5948978f71a3526246258d70d6553cbe5ef8ba20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:53:6b:98:90:64:22:6a:f5:88:cb:f9:9a:5e:
72:1d:4f:0b:b7:76:65:5f:9b:fb:56:4a:56:8f:69:
f0:72:3e:0a:96:57:80:07:42:c1:4d:9d:fa:ba:39:
cc:51:17:06:70:b3:bf:0e:32:ab:e3:2d:92:55:b7:
41:b5:f5:e3:3b:e3:d9:7b:77:ea:0d:bf:72:2e:b0:
14:86:e7:8d:56:55:a5:4a:82:1d:0d:37:8a:12:bc:
82:d9:d5:53:6f:68:e4:b7:14:a5:7c:a0:91:24:52:
ce:c7:84:23:bd:ac:d7:b0:98:9c:1c:df:af:54:46:
0e:e6:f0:d3:8b:eb:04:45:e3:e7:57:55:b6:cc:a6:
f4:cd:89:f4:fa:de:09:e1:39:16:95:f3:7d:1c:77:
37:83:27:3d:fb:2c:84:d5:16:db:c8:f1:c7:0e:d9:
a0:b1:41:28:cf:e1:98:05:c2:33:2c:f5:fa:cb:38:
57:d4:ba:7f:32:0a:b9:d6:b8:ec:59:1e:a0:b3:15:
ff:b0:1c:02:56:76:fc:ed:6f:8a:41:f3:2e:2c:22:
74:66:a9:77:e1:02:b5:0a:9f:9e:45:fc:74:2c:ff:
72:3a:20:3d:0c:0c:3d:62:0c:77:ed:ca:21:b0:07:
6e:b2:e9:1c:ee:78:47:81:b4:09:59:8e:ec:a5:21:
c7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:48:97:8F:71:A3:52:62:46:25:8D:70:D6:55:3C:BE:5E:F8:BA:20
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/WUiXj3GjUmJGJY1w1lU8vl74uiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.198.0/24
Signature Algorithm: sha256WithRSAEncryption
71:1d:62:ad:06:b4:db:c2:0d:fd:57:2d:9d:01:a3:89:76:c2:
cc:e0:49:39:1e:8c:fe:63:35:67:7b:36:87:0d:98:2e:39:47:
52:99:ad:bb:fd:12:80:40:ea:6c:d0:e9:2a:c8:d8:1a:c1:b9:
3f:fb:8c:a8:f1:ec:1d:d3:57:88:96:b3:75:3e:cb:ca:56:bf:
2d:4c:ae:9e:5a:ee:98:f2:71:92:a0:68:af:82:75:ca:ff:57:
bf:8e:aa:74:d7:ec:cb:f9:61:46:ee:0b:3f:ab:ce:55:c9:00:
54:25:41:c4:c1:0d:be:58:b3:60:d4:86:ba:e5:4c:ef:47:2b:
01:1d:04:3b:19:77:ac:29:e3:c0:79:45:70:66:6a:f2:2c:43:
95:0b:da:a6:13:52:fd:4d:7d:f6:dd:85:02:ae:44:46:0f:2b:
e3:a0:12:bf:6b:48:0c:be:82:79:6d:41:44:d9:fe:88:af:9f:
7b:20:68:03:31:70:31:02:cf:17:c0:15:12:30:39:74:0b:27:
2c:5e:9f:1d:1d:73:a2:2c:d5:70:08:bd:30:21:f9:c6:ba:1f:
f7:64:9a:41:51:c5:37:5b:94:6e:a3:9d:71:07:af:a2:f0:01:
a2:81:82:c5:08:32:47:61:cc:82:7a:6a:be:e8:0d:b3:39:53:
f9:4f:dd:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvNM6m9HbVNq0FnXxxsxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkMzI1YmVmZDhiN2U4NWUzNDcxMDQyMDZkOGMwYWI4YTZl
MGZiNGUwHhcNMjQwMTAyMTAzNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTQ4OTc4ZjcxYTM1MjYyNDYyNThkNzBkNjU1M2NiZTVlZjhiYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilNrmJBkImr1iMv5ml5yHU8Lt3Zl
X5v7VkpWj2nwcj4KlleAB0LBTZ36ujnMURcGcLO/DjKr4y2SVbdBtfXjO+PZe3fq
Db9yLrAUhueNVlWlSoIdDTeKEryC2dVTb2jktxSlfKCRJFLOx4QjvazXsJicHN+v
VEYO5vDTi+sERePnV1W2zKb0zYn0+t4J4TkWlfN9HHc3gyc9+yyE1RbbyPHHDtmg
sUEoz+GYBcIzLPX6yzhX1Lp/Mgq51rjsWR6gsxX/sBwCVnb87W+KQfMuLCJ0Zql3
4QK1Cp+eRfx0LP9yOiA9DAw9Ygx37cohsAdusukc7nhHgbQJWY7spSHHGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlIl49xo1JiRiWNcNZVPL5e+LogMB8GA1UdIwQY
MBaAFF0yW+/Yt+heNHEEIG2MCrim4PtOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2Ut
Zjk5OTViNzhhODVmLzEvV1VpWGozR2pVbUpHSlkxdzFsVTh2bDc0dWlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC81MTQ2ZDAtM2U3NC00N2ExLWFhM2UtZjk5OTViNzhhODVm
LzEvWFRKYjc5aTM2RjQwY1FRZ2JZd0t1S2JnLTA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8fGMA0G
CSqGSIb3DQEBCwUAA4IBAQBxHWKtBrTbwg39Vy2dAaOJdsLM4Ek5Hoz+YzVnezaH
DZguOUdSma27/RKAQOps0OkqyNgawbk/+4yo8ewd01eIlrN1PsvKVr8tTK6eWu6Y
8nGSoGivgnXK/1e/jqp01+zL+WFG7gs/q85VyQBUJUHEwQ2+WLNg1Ia65UzvRysB
HQQ7GXesKePAeUVwZmryLEOVC9qmE1L9TX323YUCrkRGDyvjoBK/a0gMvoJ5bUFE
2f6Ir597IGgDMXAxAs8XwBUSMDl0CycsXp8dHXOiLNVwCL0wIfnGuh/3ZJpBUcU3
W5Ruo51xB6+i8AGigYLFCDJHYcyCemq+6A2zOVP5T929
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:35 2025 by rpki-client