Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/wWvr8DZJQJukCR8KwFMwiF0hQtU.roa
File: wWvr8DZJQJukCR8KwFMwiF0hQtU.roa (raw, json)
Hash identifier: AsaImMy8iakHnTk6jSEiFM+EEMdRQyYNBLJZxNG0ePs=
Subject key identifier: C1:6B:EB:F0:36:49:40:9B:A4:09:1F:0A:C0:53:30:88:5D:21:42:D5
Certificate issuer: /CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Certificate serial: 01856BCA3D23516D1AC7313C4186F18E0965
Authority key identifier: 70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/wWvr8DZJQJukCR8KwFMwiF0hQtU.roa
Signing time: Sun 01 Jan 2023 05:24:54 +0000
ROA not before: Sun 01 Jan 2023 05:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206094
IP address blocks: 185.192.240.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:3d:23:51:6d:1a:c7:31:3c:41:86:f1:8e:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7012a52e88b01832cf0ee37ccdab61dece7d12c6
Validity
Not Before: Jan 1 05:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c16bebf03649409ba4091f0ac05330885d2142d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:78:4a:10:95:98:0d:6d:f9:e1:84:58:c4:0b:
5f:63:da:00:d2:63:f4:21:14:b6:b7:e9:98:ca:11:
ca:dc:ca:19:b1:5a:7c:57:f9:3c:a5:13:28:b3:66:
a0:f4:98:4a:16:52:46:e2:0e:7a:81:49:48:60:1c:
3b:70:b5:51:8c:e2:66:ea:5f:33:9e:f5:28:35:5b:
8d:46:bd:a1:f7:a9:e1:65:54:2a:e9:a7:13:f7:a6:
b3:dc:c9:91:3e:44:c0:64:77:0b:c9:d8:0a:b4:65:
07:b3:ea:a5:2c:e5:61:3f:a1:e8:1f:52:05:a1:72:
23:9c:5d:a2:92:c0:6d:c5:a9:b2:a2:a4:8c:61:c3:
15:e6:d0:64:2f:26:d2:81:5e:75:67:68:a8:2c:7a:
90:86:99:2a:f8:84:d4:07:68:45:f6:5c:6b:ea:a2:
3a:9c:50:ae:0c:63:a0:39:35:37:61:60:96:df:9b:
33:8c:f9:3a:ea:21:09:28:56:f5:d3:af:39:4c:d0:
45:4f:de:7d:24:90:c6:d0:17:8b:8e:5f:a7:24:2f:
d3:da:e6:f9:cf:80:ec:f9:93:08:36:f1:3e:95:a6:
27:65:71:07:dd:96:71:ca:f6:6b:5c:44:84:ae:05:
32:2a:5b:4e:cd:71:46:69:b8:1b:1c:82:c6:72:d7:
99:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:6B:EB:F0:36:49:40:9B:A4:09:1F:0A:C0:53:30:88:5D:21:42:D5
X509v3 Authority Key Identifier:
keyid:70:12:A5:2E:88:B0:18:32:CF:0E:E3:7C:CD:AB:61:DE:CE:7D:12:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBKlLoiwGDLPDuN8zath3s59EsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/wWvr8DZJQJukCR8KwFMwiF0hQtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0e545b-443f-4cfb-8c28-3201b87f1490/1/cBKlLoiwGDLPDuN8zath3s59EsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:4b:31:ab:dd:2c:fb:e8:b7:47:29:9c:92:cd:c8:e9:eb:ad:
c3:24:96:df:5d:23:8a:4d:2a:52:90:4b:3d:92:33:8a:f4:35:
ce:63:82:ca:ef:f1:ad:96:be:da:18:90:2b:81:39:9d:d5:ef:
9a:2b:44:e7:34:3a:69:49:4e:c1:7e:26:34:50:bb:bb:6e:98:
b4:4e:8c:bb:52:21:cd:09:33:a9:c8:e0:a5:b0:c6:6a:17:dd:
9b:a5:c3:8d:92:23:0f:8f:57:04:81:b1:b7:7f:97:cc:c4:2b:
f5:5b:0d:ba:da:67:f4:c3:e4:d7:32:c6:46:bf:a8:ef:41:32:
69:ee:cc:ef:0e:00:a4:9f:fd:14:ab:28:40:2b:8b:bf:bd:a4:
3d:c7:69:3a:ce:35:4b:56:44:ce:0e:76:0e:09:6d:27:d2:87:
4d:5c:b2:f5:4e:59:e9:6a:60:e9:6b:9e:85:c5:70:6f:af:b2:
2a:f9:7f:8d:7f:1b:07:3e:c4:73:08:b4:24:de:db:f4:64:25:
58:d2:83:a7:f5:67:ae:f4:3b:c4:f6:1a:26:7f:ce:6a:f4:5b:
a1:eb:1a:e2:24:e6:c1:cc:a8:0d:74:89:98:87:48:08:20:5e:
01:be:82:c9:6b:6b:27:bb:f1:be:3c:61:95:0a:c0:33:a7:bf:
0c:e9:b7:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVryj0jUW0axzE8QYbxjgllMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMTJhNTJlODhiMDE4MzJjZjBlZTM3Y2NkYWI2MWRlY2U3
ZDEyYzYwHhcNMjMwMTAxMDUyNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTZiZWJmMDM2NDk0MDliYTQwOTFmMGFjMDUzMzA4ODVkMjE0MmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nhKEJWYDW354YRYxAtfY9oA0mP0
IRS2t+mYyhHK3MoZsVp8V/k8pRMos2ag9JhKFlJG4g56gUlIYBw7cLVRjOJm6l8z
nvUoNVuNRr2h96nhZVQq6acT96az3MmRPkTAZHcLydgKtGUHs+qlLOVhP6HoH1IF
oXIjnF2iksBtxamyoqSMYcMV5tBkLybSgV51Z2ioLHqQhpkq+ITUB2hF9lxr6qI6
nFCuDGOgOTU3YWCW35szjPk66iEJKFb10685TNBFT959JJDG0BeLjl+nJC/T2ub5
z4Ds+ZMINvE+laYnZXEH3ZZxyvZrXESErgUyKltOzXFGabgbHILGcteZdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMFr6/A2SUCbpAkfCsBTMIhdIULVMB8GA1UdIwQY
MBaAFHASpS6IsBgyzw7jfM2rYd7OfRLGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgt
MzIwMWI4N2YxNDkwLzEvd1d2cjhEWkpRSnVrQ1I4S3dGTXdpRjBoUXRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZTU0NWItNDQzZi00Y2ZiLThjMjgtMzIwMWI4N2YxNDkw
LzEvY0JLbExvaXdHRExQRHVOOHphdGgzczU5RXNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucDwMA0G
CSqGSIb3DQEBCwUAA4IBAQAcSzGr3Sz76LdHKZySzcjp663DJJbfXSOKTSpSkEs9
kjOK9DXOY4LK7/Gtlr7aGJArgTmd1e+aK0TnNDppSU7BfiY0ULu7bpi0Toy7UiHN
CTOpyOClsMZqF92bpcONkiMPj1cEgbG3f5fMxCv1Ww262mf0w+TXMsZGv6jvQTJp
7szvDgCkn/0UqyhAK4u/vaQ9x2k6zjVLVkTODnYOCW0n0odNXLL1TlnpamDpa56F
xXBvr7Iq+X+NfxsHPsRzCLQk3tv0ZCVY0oOn9Weu9DvE9homf85q9Fuh6xriJObB
zKgNdImYh0gIIF4BvoLJa2snu/G+PGGVCsAzp78M6bcm
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:47 2024 by rpki-client on console-fra.rpki-client.org