Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/W0P97DPIuvNmIRzv5aZcYxDj8-s.roa
File: W0P97DPIuvNmIRzv5aZcYxDj8-s.roa (raw, json)
Hash identifier: G6mQ6M7RMEe505eDxhMqowoOAJHCgPlp6ro6VovrKHY=
Subject key identifier: 5B:43:FD:EC:33:C8:BA:F3:66:21:1C:EF:E5:A6:5C:63:10:E3:F3:EB
Certificate issuer: /CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Certificate serial: 01856D4AA866EF8229DDD444BEBFB290A359
Authority key identifier: 46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/W0P97DPIuvNmIRzv5aZcYxDj8-s.roa
Signing time: Sun 01 Jan 2023 12:24:47 +0000
ROA not before: Sun 01 Jan 2023 12:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12735
IP address blocks: 193.160.144.0/24 maxlen: 24
2a0c:bec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:a8:66:ef:82:29:dd:d4:44:be:bf:b2:90:a3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46055e82002cc0bd7b9987e5d7365420eafd4970
Validity
Not Before: Jan 1 12:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b43fdec33c8baf366211cefe5a65c6310e3f3eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:e9:52:31:3c:61:ef:d8:e0:72:18:b8:29:
8c:60:58:c6:bf:32:c6:c0:0b:9c:d3:0e:d2:bb:f1:
2d:42:a7:a0:ae:49:e8:97:80:4f:e3:ed:02:f0:ca:
bc:2a:27:b9:02:11:6e:64:c8:4f:39:d3:6a:95:17:
8c:35:b2:65:66:e2:b2:b7:8c:71:c7:20:a0:37:b0:
e6:57:7b:bc:8f:62:6b:67:62:ba:ea:12:03:59:fb:
af:e0:74:af:38:95:ec:f9:e3:4c:65:4e:89:38:a3:
1f:66:40:85:93:ae:1d:a9:af:fd:5d:b5:2b:51:38:
d1:b4:b8:79:da:cb:ef:f2:b3:d2:7a:cd:3c:fe:82:
8f:8f:71:a5:c6:85:49:76:85:71:29:e6:c6:c1:97:
a7:81:11:89:10:fc:17:6b:a0:a2:ff:50:ea:72:1f:
fb:89:90:27:14:24:6c:58:97:2a:11:fa:f3:f1:40:
86:56:95:cb:bb:2e:8d:22:ca:ed:7d:0a:e2:a9:a0:
53:21:e9:3d:84:ef:0e:43:45:59:9f:15:d5:96:f7:
7f:6a:6f:c4:66:1f:16:d6:16:46:db:e2:f4:87:12:
1a:18:d0:be:89:35:06:6f:a3:4a:e0:4d:48:3f:72:
ed:88:4a:0f:24:49:e0:0b:c3:b0:3a:56:f0:50:b3:
b9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:43:FD:EC:33:C8:BA:F3:66:21:1C:EF:E5:A6:5C:63:10:E3:F3:EB
X509v3 Authority Key Identifier:
keyid:46:05:5E:82:00:2C:C0:BD:7B:99:87:E5:D7:36:54:20:EA:FD:49:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgVeggAswL17mYfl1zZUIOr9SXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/W0P97DPIuvNmIRzv5aZcYxDj8-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/49924d-7699-4af4-aff9-22aa4f3a7615/1/RgVeggAswL17mYfl1zZUIOr9SXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.144.0/24
IPv6:
2a0c:bec0::/29
Signature Algorithm: sha256WithRSAEncryption
1d:ec:40:4e:c6:c9:ab:c5:ee:d6:4d:8e:c7:63:c0:75:cc:f6:
57:6c:04:0a:9f:42:eb:dd:75:c6:5e:87:d3:b3:89:63:61:02:
8c:8c:2a:1f:b2:90:03:85:ea:38:ed:30:c0:5b:76:b7:34:29:
55:5b:7f:9e:2c:34:9f:0c:75:89:3c:a4:3c:f5:81:ce:e7:fd:
9e:52:a4:9a:0f:d9:ab:47:66:9f:03:7a:6d:7c:c6:1c:42:79:
fb:5c:f2:15:5a:c7:f6:2f:5a:a1:d3:b9:fe:03:bd:3a:16:3d:
42:ca:b2:8e:07:ec:a3:aa:01:04:9e:9c:83:d7:c5:08:59:e7:
52:12:b2:49:3c:4f:0d:46:f5:a0:72:42:c5:0b:27:e8:66:e1:
54:0e:e2:d1:d1:17:2b:db:1c:b6:f4:07:e8:e3:71:5e:f5:07:
9e:25:80:51:79:ec:c9:f0:83:ca:2f:ff:04:b6:bd:63:3a:46:
bc:4d:e7:0c:4b:9c:0d:35:7e:91:10:21:84:5a:f5:ae:af:83:
89:52:36:c9:b7:a9:02:b2:15:48:1a:2b:b4:5b:d0:40:af:8c:
ee:a6:de:6d:3d:6b:67:32:70:61:a7:31:4f:63:74:0a:76:0e:
35:aa:8d:e0:2f:b9:72:88:a0:ff:96:4d:e6:e1:09:32:1c:d2:
4e:ec:91:47
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtSqhm74Ip3dREvr+ykKNZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDU1ZTgyMDAyY2MwYmQ3Yjk5ODdlNWQ3MzY1NDIwZWFm
ZDQ5NzAwHhcNMjMwMTAxMTIyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjQzZmRlYzMzYzhiYWYzNjYyMTFjZWZlNWE2NWM2MzEwZTNmM2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8PpUjE8Ye/Y4HIYuCmMYFjGvzLG
wAuc0w7Su/EtQqegrknol4BP4+0C8Mq8Kie5AhFuZMhPOdNqlReMNbJlZuKyt4xx
xyCgN7DmV3u8j2JrZ2K66hIDWfuv4HSvOJXs+eNMZU6JOKMfZkCFk64dqa/9XbUr
UTjRtLh52svv8rPSes08/oKPj3GlxoVJdoVxKebGwZengRGJEPwXa6Ci/1Dqch/7
iZAnFCRsWJcqEfrz8UCGVpXLuy6NIsrtfQriqaBTIek9hO8OQ0VZnxXVlvd/am/E
Zh8W1hZG2+L0hxIaGNC+iTUGb6NK4E1IP3LtiEoPJEngC8OwOlbwULO5vQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFtD/ewzyLrzZiEc7+WmXGMQ4/PrMB8GA1UdIwQY
MBaAFEYFXoIALMC9e5mH5dc2VCDq/UlwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjkt
MjJhYTRmM2E3NjE1LzEvVzBQOTdEUEl1dk5tSVJ6djVhWmNZeERqOC1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy80OTkyNGQtNzY5OS00YWY0LWFmZjktMjJhYTRmM2E3NjE1
LzEvUmdWZWdnQXN3TDE3bVlmbDF6WlVJT3I5U1hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaCQMA0E
AgACMAcDBQMqDL7AMA0GCSqGSIb3DQEBCwUAA4IBAQAd7EBOxsmrxe7WTY7HY8B1
zPZXbAQKn0Lr3XXGXofTs4ljYQKMjCofspADheo47TDAW3a3NClVW3+eLDSfDHWJ
PKQ89YHO5/2eUqSaD9mrR2afA3ptfMYcQnn7XPIVWsf2L1qh07n+A706Fj1CyrKO
B+yjqgEEnpyD18UIWedSErJJPE8NRvWgckLFCyfoZuFUDuLR0Rcr2xy29Afo43Fe
9QeeJYBReezJ8IPKL/8Etr1jOka8TecMS5wNNX6RECGEWvWur4OJUjbJt6kCshVI
Giu0W9BAr4zupt5tPWtnMnBhpzFPY3QKdg41qo3gL7lyiKD/lk3m4QkyHNJO7JFH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:48 2024 by rpki-client on console-fra.rpki-client.org