Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/wLUD_f0l4KykypSTFvT69b4Mg4A.roa
File: wLUD_f0l4KykypSTFvT69b4Mg4A.roa (raw, json)
Hash identifier: +C7HcOHId0nsBTw27j02hb9+OD1QnddoZNufIgepQKE=
Subject key identifier: C0:B5:03:FD:FD:25:E0:AC:A4:CA:94:93:16:F4:FA:F5:BE:0C:83:80
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01881F3D22906B2BB4694ABCE4C65C4B612D
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/wLUD_f0l4KykypSTFvT69b4Mg4A.roa
Signing time: Mon 15 May 2023 11:48:00 +0000
ROA not before: Mon 15 May 2023 11:48:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208722
IP address blocks: 5.45.192.0/18 maxlen: 24
92.255.127.0/24 maxlen: 24
178.154.128.0/19 maxlen: 24
84.252.160.0/19 maxlen: 24
37.9.64.0/18 maxlen: 24
141.8.128.0/18 maxlen: 24
93.158.128.0/18 maxlen: 24
37.140.128.0/18 maxlen: 24
95.108.128.0/17 maxlen: 24
185.32.187.0/24 maxlen: 24
87.250.224.0/19 maxlen: 24
77.88.0.0/18 maxlen: 24
213.180.192.0/19 maxlen: 24
178.154.160.0/19 maxlen: 24
5.255.192.0/18 maxlen: 24
2a02:6b8::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:3d:22:90:6b:2b:b4:69:4a:bc:e4:c6:5c:4b:61:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: May 15 11:48:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0b503fdfd25e0aca4ca949316f4faf5be0c8380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:01:fe:a2:42:51:83:68:8f:1f:fb:f5:98:
d8:6c:25:b7:09:02:4e:a8:c1:bc:5b:48:e8:8e:24:
86:0c:86:6e:72:a8:62:1d:ed:30:f5:71:58:36:47:
0a:54:26:4f:8c:0b:8b:69:68:70:50:70:0d:7c:8f:
b6:08:0b:dd:c0:fa:18:01:6a:5c:6d:05:80:43:dd:
00:aa:ac:5a:b9:da:e3:41:a1:10:42:a6:27:19:b8:
89:25:34:72:40:79:8c:ff:c9:d8:28:80:9e:80:34:
f7:aa:e8:2f:bf:4f:d5:ca:71:6d:d3:47:0e:97:46:
be:87:4b:81:e2:5e:ea:23:86:99:9c:91:b7:81:e3:
81:b8:c3:b4:a9:ff:06:c5:25:6f:ce:b2:ee:1d:9f:
1e:d0:e0:1b:6e:7a:49:15:89:f9:a7:ba:b3:96:d0:
fa:9c:f1:80:3b:a6:2b:75:88:69:79:b7:e6:01:d2:
89:4e:75:94:f0:b0:e0:a3:50:bc:b3:2f:2f:1d:42:
57:0b:60:7c:92:ae:49:49:b5:06:f8:00:86:d2:3b:
02:a9:1a:c4:98:41:b0:4d:ce:c0:63:42:67:ef:66:
10:02:45:5d:ed:05:82:fe:06:f2:5f:8a:68:fe:99:
77:2a:8b:31:c5:8d:6e:50:dc:11:92:75:bc:44:98:
94:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:B5:03:FD:FD:25:E0:AC:A4:CA:94:93:16:F4:FA:F5:BE:0C:83:80
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/wLUD_f0l4KykypSTFvT69b4Mg4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
92.255.127.0/24
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.187.0/24
213.180.192.0/19
IPv6:
2a02:6b8::/29
Signature Algorithm: sha256WithRSAEncryption
78:ab:25:93:17:45:50:6b:82:e3:bd:9d:ad:73:6b:53:ff:b9:
fe:18:2e:ef:da:3c:cd:5a:03:6b:0f:cb:d1:d8:ab:74:3a:9b:
50:94:e1:b5:91:9b:5c:52:32:d5:8c:3b:59:ec:37:82:23:23:
e0:ef:7a:f7:5a:7c:86:04:bd:50:04:ed:21:a8:e6:5d:38:21:
61:56:94:13:6b:1d:c0:aa:9c:a1:57:ca:f0:e1:72:27:93:b6:
26:cc:05:3e:f8:cd:0a:4f:91:97:0b:e5:61:98:56:bf:27:e0:
f9:7b:c9:4f:c3:f2:c4:3a:e6:4e:09:77:ab:05:ac:09:d4:02:
94:46:2f:18:35:3c:59:64:37:eb:ce:1e:a5:94:c0:6e:f8:a9:
52:6f:0c:cc:41:12:6b:15:af:fe:17:94:94:e7:bd:ee:e0:02:
d8:55:4c:dd:f9:85:e4:85:fc:7d:39:c3:f1:80:af:0e:41:cc:
2f:d8:24:68:d6:8c:fe:43:f1:52:01:65:55:a9:c9:9a:9d:71:
92:76:79:27:c0:8a:3e:f5:0f:29:e2:f6:37:78:77:bb:b6:f8:
48:a5:d5:3b:d6:d3:3c:ef:55:55:3b:54:47:aa:cf:7c:98:e5:
98:36:4d:35:65:b2:6f:ba:4b:8d:86:82:02:a1:13:8c:83:0a:
9a:d9:f9:cc
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAYgfPSKQayu0aUq85MZcS2EtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjMwNTE1MTE0ODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGI1MDNmZGZkMjVlMGFjYTRjYTk0OTMxNmY0ZmFmNWJlMGM4MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0YB/qJCUYNojx/79ZjYbCW3CQJO
qMG8W0jojiSGDIZucqhiHe0w9XFYNkcKVCZPjAuLaWhwUHANfI+2CAvdwPoYAWpc
bQWAQ90AqqxaudrjQaEQQqYnGbiJJTRyQHmM/8nYKICegDT3qugvv0/VynFt00cO
l0a+h0uB4l7qI4aZnJG3geOBuMO0qf8GxSVvzrLuHZ8e0OAbbnpJFYn5p7qzltD6
nPGAO6YrdYhpebfmAdKJTnWU8LDgo1C8sy8vHUJXC2B8kq5JSbUG+ACG0jsCqRrE
mEGwTc7AY0Jn72YQAkVd7QWC/gbyX4po/pl3KosxxY1uUNwRknW8RJiUhwIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFMC1A/39JeCspMqUkxb0+vW+DIOAMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvd0xVRF9mMGw0S3lreXBTVEZ2VDY5YjRNZzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQGBS3AAwQG
Bf/AAwQGJQlAAwQGJYyAAwQGTVgAAwQFVPygAwQFV/rgAwQAXP9/AwQGXZ6AAwQH
X2yAAwQGjQiAAwQGspqAAwQAuSC7AwQF1bTAMA0EAgACMAcDBQMqAga4MA0GCSqG
SIb3DQEBCwUAA4IBAQB4qyWTF0VQa4LjvZ2tc2tT/7n+GC7v2jzNWgNrD8vR2Kt0
OptQlOG1kZtcUjLVjDtZ7DeCIyPg73r3WnyGBL1QBO0hqOZdOCFhVpQTax3Aqpyh
V8rw4XInk7YmzAU++M0KT5GXC+VhmFa/J+D5e8lPw/LEOuZOCXerBawJ1AKURi8Y
NTxZZDfrzh6llMBu+KlSbwzMQRJrFa/+F5SU573u4ALYVUzd+YXkhfx9OcPxgK8O
Qcwv2CRo1oz+Q/FSAWVVqcmanXGSdnknwIo+9Q8p4vY3eHe7tvhIpdU71tM871VV
O1RHqs98mOWYNk01ZbJvukuNhoICoROMgwqa2fnM
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:21 2024 by rpki-client on console-fra.rpki-client.org