Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WSS7Su4Wf_CNSx7xuODH5ZHques.roa
File: WSS7Su4Wf_CNSx7xuODH5ZHques.roa (raw, json)
Hash identifier: 4OjzAFySgWHi2wQql6wkJGmltNferPzvgRbNLZlWbVQ=
Subject key identifier: 59:24:BB:4A:EE:16:7F:F0:8D:4B:1E:F1:B8:E0:C7:E5:91:EA:B9:EB
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFA8920058A3288671D78D1669A302
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WSS7Su4Wf_CNSx7xuODH5ZHques.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204154
IP address blocks: 185.172.129.0/24 maxlen: 24
185.200.191.0/24 maxlen: 24
46.17.107.0/24 maxlen: 24
2a04:5201:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 01 Feb 2024 12:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:a8:92:00:58:a3:28:86:71:d7:8d:16:69:a3:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5924bb4aee167ff08d4b1ef1b8e0c7e591eab9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b7:13:7d:93:fe:71:9c:cc:6b:1a:c0:19:88:
87:f2:1d:53:44:4c:fa:4d:c1:cb:89:51:a7:0e:ce:
d5:cf:94:8b:0a:30:f1:4e:f6:a1:61:ea:a1:da:e1:
31:e0:4e:f1:47:2c:77:81:35:f5:31:e9:62:c4:1c:
0b:22:aa:7d:75:0b:17:e5:76:08:f3:34:dd:8d:05:
bb:9c:da:6e:d0:c2:5e:e7:9f:5b:51:81:bd:4e:fd:
db:dc:f2:31:8a:ce:4e:c4:f4:c6:49:fe:18:ef:06:
4c:40:97:14:8a:6b:1f:5b:9b:34:14:64:c1:04:1d:
f3:ac:25:59:b1:07:c9:27:b6:9b:2a:15:b1:e1:fd:
72:16:ef:94:aa:18:62:e9:17:86:02:5f:af:30:4c:
91:2b:73:e1:e9:91:dd:da:87:71:e9:58:ef:a3:9d:
19:77:84:5e:bf:4e:b9:ec:ba:db:88:4f:a7:2d:6e:
c7:af:08:d5:2f:45:81:d9:ce:a5:2c:2d:5c:62:98:
a1:14:0e:3b:24:d1:41:2a:e8:28:e8:6c:f2:05:de:
9a:26:d9:d4:a8:d0:3f:15:e5:bd:16:9c:df:52:9b:
1a:96:8b:d0:71:a1:83:05:5d:2d:6b:79:31:1c:c0:
6c:08:a3:64:36:8f:16:01:e7:c4:89:35:bf:4b:24:
4c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:24:BB:4A:EE:16:7F:F0:8D:4B:1E:F1:B8:E0:C7:E5:91:EA:B9:EB
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WSS7Su4Wf_CNSx7xuODH5ZHques.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.107.0/24
185.172.129.0/24
185.200.191.0/24
IPv6:
2a04:5201:1::/48
Signature Algorithm: sha256WithRSAEncryption
4c:e3:f3:ac:4f:20:2a:93:39:07:b8:f4:8c:b5:0c:28:83:96:
fd:1f:fa:05:d7:f5:09:10:3b:10:a0:3f:97:b5:16:f8:fc:ea:
27:88:22:7b:2b:9b:18:e4:92:bf:77:16:27:5a:1a:ab:76:34:
4a:d4:13:f3:ad:56:d8:fd:04:60:aa:ea:e0:d9:13:5c:46:c9:
dd:ab:a2:8a:7c:91:85:e4:1f:36:11:ff:b0:dd:86:3c:61:4c:
11:80:b1:6a:e7:b8:18:0b:14:1f:58:d7:5f:bc:d2:de:e8:46:
76:24:63:dc:2a:cc:68:e4:61:19:ef:f7:0e:f4:97:fd:c4:bf:
ab:46:09:27:a3:ab:b2:e1:77:83:33:87:44:21:37:1f:53:b0:
67:cf:c5:d7:c4:39:74:a5:51:14:dd:21:e1:c4:85:e0:28:5f:
d8:82:70:4b:dc:33:94:7a:60:b8:3e:07:1a:95:a6:bb:96:de:
c6:87:79:e1:7c:23:33:6e:7b:be:9d:e2:21:9e:ab:a5:cb:03:
02:ee:16:c0:09:c5:da:a2:b7:8a:40:9f:d2:21:aa:a6:a0:51:
91:4c:44:dd:2a:1d:b4:01:45:c1:30:76:4b:fd:88:82:3b:db:
6a:6e:d8:6f:68:7f:f7:b3:23:2e:4a:fe:f5:8f:30:32:09:c9:
77:16:04:00
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzI36iSAFijKIZx140WaaMCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTI0YmI0YWVlMTY3ZmYwOGQ0YjFlZjFiOGUwYzdlNTkxZWFiOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLcTfZP+cZzMaxrAGYiH8h1TREz6
TcHLiVGnDs7Vz5SLCjDxTvahYeqh2uEx4E7xRyx3gTX1MelixBwLIqp9dQsX5XYI
8zTdjQW7nNpu0MJe559bUYG9Tv3b3PIxis5OxPTGSf4Y7wZMQJcUimsfW5s0FGTB
BB3zrCVZsQfJJ7abKhWx4f1yFu+Uqhhi6ReGAl+vMEyRK3Ph6ZHd2odx6Vjvo50Z
d4Rev0657LrbiE+nLW7HrwjVL0WB2c6lLC1cYpihFA47JNFBKugo6GzyBd6aJtnU
qNA/FeW9FpzfUpsalovQcaGDBV0ta3kxHMBsCKNkNo8WAefEiTW/SyRMxwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFkku0ruFn/wjUse8bjgx+WR6rnrMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvV1NTN1N1NFdmX0NOU3g3eHVPREg1WkhxdWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQALhFrAwQA
uayBAwQAuci/MA8EAgACMAkDBwAqBFIBAAEwDQYJKoZIhvcNAQELBQADggEBAEzj
86xPICqTOQe49Iy1DCiDlv0f+gXX9QkQOxCgP5e1Fvj86ieIInsrmxjkkr93Fida
Gqt2NErUE/OtVtj9BGCq6uDZE1xGyd2roop8kYXkHzYR/7DdhjxhTBGAsWrnuBgL
FB9Y11+80t7oRnYkY9wqzGjkYRnv9w70l/3Ev6tGCSejq7Lhd4Mzh0QhNx9TsGfP
xdfEOXSlURTdIeHEheAoX9iCcEvcM5R6YLg+BxqVpruW3saHeeF8IzNue76d4iGe
q6XLAwLuFsAJxdqit4pAn9IhqqagUZFMRN0qHbQBRcEwdkv9iII722pu2G9of/ez
Iy5K/vWPMDIJyXcWBAA=
-----END CERTIFICATE-----
Generated at Thu Feb 1 16:26:13 2024 by rpki-client on console-ams.rpki-client.org