Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/W334kZ4M0ZDNBdPtCKx5LYTDDuo.roa
File: W334kZ4M0ZDNBdPtCKx5LYTDDuo.roa (raw, json)
Hash identifier: rUbrWE6Fo1UILBoPTrAuda2tp2tsyyOFvLDdP/5brbc=
Subject key identifier: 5B:7D:F8:91:9E:0C:D1:90:CD:05:D3:ED:08:AC:79:2D:84:C3:0E:EA
Certificate issuer: /CN=016454ca099eb52e55560f5d09e87e73161ae738
Certificate serial: 018C8682C51035679F59520E58AEC418A27D
Authority key identifier: 01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/W334kZ4M0ZDNBdPtCKx5LYTDDuo.roa
Signing time: Wed 20 Dec 2023 09:16:06 +0000
ROA not before: Wed 20 Dec 2023 09:16:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200996
IP address blocks: 143.51.0.0/17 maxlen: 26
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:86:82:c5:10:35:67:9f:59:52:0e:58:ae:c4:18:a2:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=016454ca099eb52e55560f5d09e87e73161ae738
Validity
Not Before: Dec 20 09:16:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b7df8919e0cd190cd05d3ed08ac792d84c30eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ac:10:91:3d:90:fc:a6:00:4e:19:52:31:20:
46:54:29:81:b5:60:c6:b8:00:5e:9a:60:d8:de:d7:
0f:85:6e:eb:aa:a6:84:ad:8c:94:e3:4a:82:03:8e:
ce:80:cf:4e:b2:e6:3e:0e:aa:a9:88:a2:d7:b8:33:
9d:57:19:4b:5b:2c:14:e7:4c:0c:28:79:0f:e2:ec:
7b:c1:46:e2:c9:52:8f:66:e7:6a:9b:fb:fe:e1:64:
1a:23:f1:a9:ab:32:fb:21:99:44:e5:4e:dc:35:b7:
db:54:31:69:81:82:72:a6:19:c0:79:07:66:9b:3b:
ad:59:8d:a6:d0:0a:db:ab:21:d2:f9:7d:ef:bf:55:
f0:87:32:67:05:6a:5b:14:73:45:4e:1e:df:35:5e:
6e:e8:dc:f5:d6:6b:49:cf:9f:43:da:6e:53:8f:3c:
4a:27:a2:d9:0d:7a:52:87:3e:1f:47:a8:67:f8:d5:
c7:7e:9c:cf:c8:07:db:a7:24:63:07:f7:05:18:51:
8d:f1:ae:ac:4d:ae:10:90:bc:33:71:f8:ab:8d:4a:
a8:c8:17:4c:6b:b4:b1:13:24:9b:68:aa:e7:62:d0:
4e:9c:2e:4c:52:d6:ff:4b:42:f9:ab:da:51:12:4f:
d3:33:55:70:9a:60:4b:cc:0d:47:85:a5:b4:91:ef:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7D:F8:91:9E:0C:D1:90:CD:05:D3:ED:08:AC:79:2D:84:C3:0E:EA
X509v3 Authority Key Identifier:
keyid:01:64:54:CA:09:9E:B5:2E:55:56:0F:5D:09:E8:7E:73:16:1A:E7:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWRUygmetS5VVg9dCeh-cxYa5zg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/W334kZ4M0ZDNBdPtCKx5LYTDDuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f2553c-9bd6-49ae-9bed-1576c6f589c9/1/AWRUygmetS5VVg9dCeh-cxYa5zg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.51.0.0/17
Signature Algorithm: sha256WithRSAEncryption
dc:95:e8:3f:85:c0:cf:c1:1e:e5:fb:87:a1:42:7e:da:48:7a:
06:b7:96:d7:86:4e:02:8c:96:97:b6:27:54:40:b9:36:a2:91:
e7:85:de:d0:97:09:0a:a5:83:74:06:6f:39:89:1e:12:b8:a8:
07:d0:5e:ff:0f:19:66:72:85:47:12:91:f8:6e:d8:56:ce:fa:
45:81:30:4b:ea:4a:a5:aa:57:b6:50:21:8b:8e:8d:63:e2:f9:
32:48:47:e0:bf:ca:6a:db:99:55:81:33:b1:a0:4c:f0:cb:bd:
f0:cb:d3:a2:71:2f:12:fb:50:f5:1e:d5:3a:f3:81:19:7b:26:
f8:96:d0:b3:db:dd:e7:ce:de:e1:04:48:e0:76:17:1f:7b:53:
aa:eb:53:08:16:d2:18:69:a4:92:2b:53:4e:08:93:42:20:5e:
1a:bf:44:c6:d1:34:06:f1:5c:33:e6:83:0e:fa:ef:f3:fe:ad:
23:94:3a:93:be:9a:50:63:d6:9a:a3:62:66:f9:d2:de:36:98:
b3:dd:c3:e7:fa:a0:6c:53:7d:5a:30:83:ee:0a:a3:d9:42:98:
a3:e8:d5:af:c7:cf:95:c5:b9:d2:d9:e3:f5:b3:3e:24:19:ad:
22:bc:93:84:eb:a7:16:90:d7:07:15:c8:6d:5c:4c:05:a2:c9:
68:32:d0:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyGgsUQNWefWVIOWK7EGKJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNjQ1NGNhMDk5ZWI1MmU1NTU2MGY1ZDA5ZTg3ZTczMTYx
YWU3MzgwHhcNMjMxMjIwMDkxNjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjdkZjg5MTllMGNkMTkwY2QwNWQzZWQwOGFjNzkyZDg0YzMwZWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiawQkT2Q/KYAThlSMSBGVCmBtWDG
uABemmDY3tcPhW7rqqaErYyU40qCA47OgM9OsuY+DqqpiKLXuDOdVxlLWywU50wM
KHkP4ux7wUbiyVKPZudqm/v+4WQaI/GpqzL7IZlE5U7cNbfbVDFpgYJyphnAeQdm
mzutWY2m0ArbqyHS+X3vv1XwhzJnBWpbFHNFTh7fNV5u6Nz11mtJz59D2m5TjzxK
J6LZDXpShz4fR6hn+NXHfpzPyAfbpyRjB/cFGFGN8a6sTa4QkLwzcfirjUqoyBdM
a7SxEySbaKrnYtBOnC5MUtb/S0L5q9pREk/TM1VwmmBLzA1HhaW0ke+VVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFt9+JGeDNGQzQXT7QiseS2Eww7qMB8GA1UdIwQY
MBaAFAFkVMoJnrUuVVYPXQnofnMWGuc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQt
MTU3NmM2ZjU4OWM5LzEvVzMzNGtaNE0wWkROQmRQdENLeDVMWVRERHVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9mMjU1M2MtOWJkNi00OWFlLTliZWQtMTU3NmM2ZjU4OWM5
LzEvQVdSVXlnbWV0UzVWVmc5ZENlaC1jeFlhNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHjzMAMA0G
CSqGSIb3DQEBCwUAA4IBAQDcleg/hcDPwR7l+4ehQn7aSHoGt5bXhk4CjJaXtidU
QLk2opHnhd7QlwkKpYN0Bm85iR4SuKgH0F7/DxlmcoVHEpH4bthWzvpFgTBL6kql
qle2UCGLjo1j4vkySEfgv8pq25lVgTOxoEzwy73wy9OicS8S+1D1HtU684EZeyb4
ltCz293nzt7hBEjgdhcfe1Oq61MIFtIYaaSSK1NOCJNCIF4av0TG0TQG8Vwz5oMO
+u/z/q0jlDqTvppQY9aao2Jm+dLeNpiz3cPn+qBsU31aMIPuCqPZQpij6NWvx8+V
xbnS2eP1sz4kGa0ivJOE66cWkNcHFchtXEwFosloMtCC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:02 2024 by rpki-client on console-fra.rpki-client.org