Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/WTeitjVmu0aJNuKTts8ScU3JnAk.roa
File: WTeitjVmu0aJNuKTts8ScU3JnAk.roa (raw, json)
Hash identifier: aH/klGgPT0R301xdT/h6SRwGUjOivr/lS8Q2JKDDLn0=
Subject key identifier: 59:37:A2:B6:35:66:BB:46:89:36:E2:93:B6:CF:12:71:4D:C9:9C:09
Certificate issuer: /CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Certificate serial: 01856F3001AB361B2A84308259868C5DDED3
Authority key identifier: BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/WTeitjVmu0aJNuKTts8ScU3JnAk.roa
Signing time: Sun 01 Jan 2023 21:14:55 +0000
ROA not before: Sun 01 Jan 2023 21:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62354
IP address blocks: 195.200.80.0/24 maxlen: 24
185.37.16.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:01:ab:36:1b:2a:84:30:82:59:86:8c:5d:de:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f133d1095cd31205c7a3462248cc9941203ac
Validity
Not Before: Jan 1 21:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5937a2b63566bb468936e293b6cf12714dc99c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:82:a4:c3:02:98:8b:d3:4a:92:a7:89:37:
42:e9:2f:ca:e7:9d:56:26:0c:48:6b:e8:e4:7a:60:
90:e2:81:ef:55:25:37:ce:36:76:50:7d:a9:83:f9:
9b:03:8f:43:1e:3e:20:54:a6:a1:5e:97:dd:8c:4d:
8f:e0:bd:c1:56:84:4f:48:85:c7:4b:17:89:81:ed:
3d:8c:b8:86:86:a0:45:49:b1:18:ec:b3:ce:94:f3:
c9:f4:7f:02:60:3f:83:0e:05:86:5e:fa:80:aa:8d:
a5:72:19:cc:c6:db:1c:2a:c8:37:d3:79:82:40:f8:
e0:12:1e:e2:a7:7c:49:7e:d3:99:5e:ae:dd:db:ad:
f6:17:da:a3:80:e5:3e:46:90:9c:93:a3:27:2f:e5:
b5:87:1d:11:7b:cc:89:ff:3c:61:a2:e9:28:30:13:
1a:15:86:44:16:9a:ea:2f:01:0a:74:2b:59:9a:ec:
bb:06:43:e6:01:d1:dc:1c:ce:be:b9:ce:2f:ea:86:
d6:8e:c2:c4:72:4e:66:ef:f1:75:a3:76:e6:69:c5:
7f:85:e3:8c:5e:8e:5e:a3:de:b5:fb:e6:99:d8:99:
8f:9e:ea:b5:f1:5c:13:49:05:3b:22:f5:2a:84:e8:
2d:25:0b:be:d5:99:49:aa:bb:7c:3d:30:1f:dd:3a:
b2:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:37:A2:B6:35:66:BB:46:89:36:E2:93:B6:CF:12:71:4D:C9:9C:09
X509v3 Authority Key Identifier:
keyid:BD:8F:13:3D:10:95:CD:31:20:5C:7A:34:62:24:8C:C9:94:12:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY8TPRCVzTEgXHo0YiSMyZQSA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/WTeitjVmu0aJNuKTts8ScU3JnAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/3b7c43-4241-44d4-8534-409d0f9c8a04/1/vY8TPRCVzTEgXHo0YiSMyZQSA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.16.0/22
195.200.80.0/24
Signature Algorithm: sha256WithRSAEncryption
60:ef:29:18:65:46:41:04:ff:f5:1e:fb:9a:0f:86:d7:81:1d:
fc:32:da:85:5f:86:ab:0e:e4:e3:9f:50:c8:87:91:02:ec:b3:
37:3c:1a:2d:4c:e0:a7:56:93:4f:77:b0:6f:03:ba:1a:0c:7d:
5a:fd:a5:57:c1:27:9f:9c:37:87:86:cc:fc:35:22:b8:80:57:
bb:c9:cf:65:30:0c:a0:4b:29:35:4e:4a:96:b7:3a:8c:56:3b:
9f:9c:0f:33:b0:fa:3a:cc:f1:c0:04:77:9b:2b:2c:8b:9b:db:
5f:10:30:b8:9e:cc:6b:9d:2b:52:c3:8b:48:d8:a0:d5:1b:f7:
15:d4:41:c9:b0:62:c6:a1:1e:2b:ac:54:b7:74:c0:6a:63:71:
88:e0:a5:fe:24:98:61:56:31:14:0d:d7:26:66:0f:81:e0:bb:
c6:78:f2:8d:91:15:22:68:7a:dd:91:de:97:56:38:b6:de:68:
65:db:3f:ed:ec:ad:e7:52:f0:d3:3c:8e:4b:2a:dc:c3:f2:6f:
5c:7c:d9:97:5a:ab:1e:7d:c7:5a:02:3f:2e:8f:4b:6b:9f:72:
96:33:2b:f7:45:72:d7:9c:5b:95:9e:b9:b8:89:ba:2e:5c:72:
55:e3:ec:04:36:27:a6:2c:6e:a5:6d:34:e9:b0:68:a0:d4:1c:
8c:25:e3:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvMAGrNhsqhDCCWYaMXd7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOGYxMzNkMTA5NWNkMzEyMDVjN2EzNDYyMjQ4Y2M5OTQx
MjAzYWMwHhcNMjMwMTAxMjExNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTM3YTJiNjM1NjZiYjQ2ODkzNmUyOTNiNmNmMTI3MTRkYzk5YzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLmCpMMCmIvTSpKniTdC6S/K551W
JgxIa+jkemCQ4oHvVSU3zjZ2UH2pg/mbA49DHj4gVKahXpfdjE2P4L3BVoRPSIXH
SxeJge09jLiGhqBFSbEY7LPOlPPJ9H8CYD+DDgWGXvqAqo2lchnMxtscKsg303mC
QPjgEh7ip3xJftOZXq7d2632F9qjgOU+RpCck6MnL+W1hx0Re8yJ/zxhoukoMBMa
FYZEFprqLwEKdCtZmuy7BkPmAdHcHM6+uc4v6obWjsLEck5m7/F1o3bmacV/heOM
Xo5eo961++aZ2JmPnuq18VwTSQU7IvUqhOgtJQu+1ZlJqrt8PTAf3TqyywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFk3orY1ZrtGiTbik7bPEnFNyZwJMB8GA1UdIwQY
MBaAFL2PEz0Qlc0xIFx6NGIkjMmUEgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8zYjdjNDMtNDI0MS00NGQ0LTg1MzQt
NDA5ZDBmOWM4YTA0LzEvV1RlaXRqVm11MGFKTnVLVHRzOFNjVTNKbkFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8zYjdjNDMtNDI0MS00NGQ0LTg1MzQtNDA5ZDBmOWM4YTA0
LzEvdlk4VFBSQ1Z6VEVnWEhvMFlpU015WlFTQTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSUQAwQA
w8hQMA0GCSqGSIb3DQEBCwUAA4IBAQBg7ykYZUZBBP/1HvuaD4bXgR38MtqFX4ar
DuTjn1DIh5EC7LM3PBotTOCnVpNPd7BvA7oaDH1a/aVXwSefnDeHhsz8NSK4gFe7
yc9lMAygSyk1TkqWtzqMVjufnA8zsPo6zPHABHebKyyLm9tfEDC4nsxrnStSw4tI
2KDVG/cV1EHJsGLGoR4rrFS3dMBqY3GI4KX+JJhhVjEUDdcmZg+B4LvGePKNkRUi
aHrdkd6XVji23mhl2z/t7K3nUvDTPI5LKtzD8m9cfNmXWqsefcdaAj8uj0trn3KW
Myv3RXLXnFuVnrm4ibouXHJV4+wENiemLG6lbTTpsGig1ByMJeOH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:53 2024 by rpki-client on console-ams.rpki-client.org