Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/WqCWlla463hvXmtAGO8OVLxt8XY.roa
File: WqCWlla463hvXmtAGO8OVLxt8XY.roa (raw, json)
Hash identifier: vrYS9NzXKAEtNuez9LqUYpalgtO5E4ktrftSdSnquU4=
Subject key identifier: 5A:A0:96:96:56:B8:EB:78:6F:5E:6B:40:18:EF:0E:54:BC:6D:F1:76
Certificate issuer: /CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Certificate serial: 01856CA5DCE485F8D0255FA7818D89C1CB8F
Authority key identifier: 2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/WqCWlla463hvXmtAGO8OVLxt8XY.roa
Signing time: Sun 01 Jan 2023 09:24:47 +0000
ROA not before: Sun 01 Jan 2023 09:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61155
IP address blocks: 94.142.160.0/21 maxlen: 21
94.142.160.0/22 maxlen: 22
94.142.164.0/22 maxlen: 22
185.57.176.0/22 maxlen: 22
2a04:d3c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:a5:dc:e4:85:f8:d0:25:5f:a7:81:8d:89:c1:cb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b95f682bc6d577dfc3c10ecee2718381fee3b23
Validity
Not Before: Jan 1 09:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5aa0969656b8eb786f5e6b4018ef0e54bc6df176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:bc:58:26:a8:58:5c:7f:8b:7d:2b:cd:2c:
f8:f7:0e:43:31:99:95:2f:99:08:57:54:57:a6:14:
68:0b:08:f9:1c:1e:4b:b2:d0:f7:a6:21:c1:2e:47:
46:60:f6:a6:b5:cf:72:f7:58:db:6f:f6:98:e4:e6:
70:e6:4f:05:4f:3d:35:40:aa:fe:c4:7c:e0:25:ad:
24:8d:bf:c4:1e:99:21:71:25:60:ed:42:b1:61:98:
31:08:90:a6:1a:5e:c4:82:1c:73:93:ec:06:d9:47:
c7:3d:65:b2:26:48:1d:ba:20:87:98:b5:1d:ae:df:
c1:c4:cb:7d:e9:3b:11:74:fa:82:5d:4c:73:63:b4:
c5:5a:5e:ff:d5:75:9e:1f:00:82:c9:87:8c:1f:0f:
08:8b:1f:73:a2:b2:64:be:90:23:83:9a:20:b4:b1:
d0:e0:d7:02:c9:2d:5c:48:12:09:e3:5e:1b:e9:86:
98:49:88:0a:3e:4f:a3:7d:1a:b9:62:98:fa:cd:60:
df:13:11:ce:52:48:82:43:69:54:71:2b:e0:14:d7:
cb:01:38:4b:88:b4:3b:c3:1a:c5:dc:8e:bc:d7:35:
8c:e3:8a:d2:d0:25:cc:25:d6:ae:10:0c:9a:79:b8:
df:d5:2c:5a:02:a3:0f:35:54:2f:7d:3e:d3:2a:43:
41:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A0:96:96:56:B8:EB:78:6F:5E:6B:40:18:EF:0E:54:BC:6D:F1:76
X509v3 Authority Key Identifier:
keyid:2B:95:F6:82:BC:6D:57:7D:FC:3C:10:EC:EE:27:18:38:1F:EE:3B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5X2grxtV338PBDs7icYOB_uOyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/WqCWlla463hvXmtAGO8OVLxt8XY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/780e0b-4f02-4cd2-a4e3-e01a56f58d37/1/K5X2grxtV338PBDs7icYOB_uOyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.160.0/21
185.57.176.0/22
IPv6:
2a04:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
15:98:c1:00:9d:22:d2:84:73:f1:18:fa:b7:be:e6:be:f4:bd:
c9:b9:54:fe:1f:8b:ae:78:bd:26:06:ee:80:ce:ec:77:9f:e6:
da:bd:a6:53:a8:13:1b:71:8f:83:29:aa:22:12:01:a7:4b:45:
82:b6:06:e1:bb:cd:53:77:0a:0b:cd:2b:44:ae:a1:1b:22:f5:
38:a3:2c:0a:d6:7b:c6:40:54:e1:9d:7f:b6:c6:d0:c2:6f:32:
4e:4b:7e:23:99:67:fe:76:16:f5:0d:c7:7a:1a:06:5b:82:0d:
12:b9:a8:e0:f8:a0:f3:33:5d:f1:57:43:e9:7f:1c:2b:4a:87:
35:ce:72:6b:5b:1b:d1:b2:9d:80:03:bb:fb:cb:10:75:d2:1c:
8e:49:85:c0:63:ea:d3:00:01:38:55:d7:69:35:9e:3c:df:5d:
c8:32:74:09:dc:5a:c9:2d:dc:3e:ac:3e:42:19:f8:f6:bd:01:
94:4b:fe:7e:91:d2:ca:17:67:17:f2:c5:ed:4a:a6:33:04:aa:
38:2e:0c:8d:f0:c0:ea:61:e4:af:e7:15:d4:f6:1e:c0:21:81:
0c:b8:ff:76:73:8e:e2:4f:51:00:80:eb:97:5b:64:81:b8:a5:
fe:b9:18:7c:b7:50:61:a6:37:04:5b:12:39:6f:9e:f2:30:ed:
eb:cc:0d:15
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVspdzkhfjQJV+ngY2JwcuPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiOTVmNjgyYmM2ZDU3N2RmYzNjMTBlY2VlMjcxODM4MWZl
ZTNiMjMwHhcNMjMwMTAxMDkyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWEwOTY5NjU2YjhlYjc4NmY1ZTZiNDAxOGVmMGU1NGJjNmRmMTc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwC8WCaoWFx/i30rzSz49w5DMZmV
L5kIV1RXphRoCwj5HB5LstD3piHBLkdGYPamtc9y91jbb/aY5OZw5k8FTz01QKr+
xHzgJa0kjb/EHpkhcSVg7UKxYZgxCJCmGl7Eghxzk+wG2UfHPWWyJkgduiCHmLUd
rt/BxMt96TsRdPqCXUxzY7TFWl7/1XWeHwCCyYeMHw8Iix9zorJkvpAjg5ogtLHQ
4NcCyS1cSBIJ414b6YaYSYgKPk+jfRq5Ypj6zWDfExHOUkiCQ2lUcSvgFNfLAThL
iLQ7wxrF3I681zWM44rS0CXMJdauEAyaebjf1SxaAqMPNVQvfT7TKkNB8wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFqglpZWuOt4b15rQBjvDlS8bfF2MB8GA1UdIwQY
MBaAFCuV9oK8bVd9/DwQ7O4nGDgf7jsjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMt
ZTAxYTU2ZjU4ZDM3LzEvV3FDV2xsYTQ2M2h2WG10QUdPOE9WTHh0OFhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS83ODBlMGItNGYwMi00Y2QyLWE0ZTMtZTAxYTU2ZjU4ZDM3
LzEvSzVYMmdyeHRWMzM4UEJEczdpY1lPQl91T3lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXo6gAwQC
uTmwMA0EAgACMAcDBQMqBNPAMA0GCSqGSIb3DQEBCwUAA4IBAQAVmMEAnSLShHPx
GPq3vua+9L3JuVT+H4uueL0mBu6Azux3n+bavaZTqBMbcY+DKaoiEgGnS0WCtgbh
u81TdwoLzStErqEbIvU4oywK1nvGQFThnX+2xtDCbzJOS34jmWf+dhb1Dcd6GgZb
gg0Suajg+KDzM13xV0PpfxwrSoc1znJrWxvRsp2AA7v7yxB10hyOSYXAY+rTAAE4
VddpNZ48313IMnQJ3FrJLdw+rD5CGfj2vQGUS/5+kdLKF2cX8sXtSqYzBKo4LgyN
8MDqYeSv5xXU9h7AIYEMuP92c47iT1EAgOuXW2SBuKX+uRh8t1BhpjcEWxI5b57y
MO3rzA0V
Generated at Mon Aug 28 11:59:49 2023 by rpki-client on console-fra.rpki-client.org