Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wRiUUz7JNH3mCfCrhL8eUN9wGEY.roa
File: wRiUUz7JNH3mCfCrhL8eUN9wGEY.roa (raw, json)
Hash identifier: tw/1TBKjiZYKSqwzsQnt1LeRfDQi5TElASw291GotfE=
Subject key identifier: C1:18:94:53:3E:C9:34:7D:E6:09:F0:AB:84:BF:1E:50:DF:70:18:46
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185BA37E317CD36583F954149C8CC423A26
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wRiUUz7JNH3mCfCrhL8eUN9wGEY.roa
Signing time: Mon 16 Jan 2023 10:55:02 +0000
ROA not before: Mon 16 Jan 2023 10:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 193.58.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 08 Apr 2023 14:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ba:37:e3:17:cd:36:58:3f:95:41:49:c8:cc:42:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 16 10:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c11894533ec9347de609f0ab84bf1e50df701846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:61:3b:7d:f0:94:4e:79:b3:fc:d5:f3:9e:
d7:03:c6:66:de:35:e2:09:ac:24:5e:75:1e:56:f9:
22:3b:f1:23:6b:ea:5f:b9:3d:aa:6d:1f:42:97:e6:
00:cb:fa:db:c0:29:99:58:bb:5a:de:72:a9:2c:e0:
c0:ec:68:95:33:85:eb:54:59:c0:e0:f2:96:17:77:
5c:e4:ce:82:df:ee:c5:49:94:a9:ca:74:df:de:3d:
84:99:bb:16:fe:cd:ca:e1:45:93:53:d2:de:1a:40:
e2:3d:6c:39:e0:ad:15:7a:4e:e2:ac:d9:b3:61:6a:
49:e5:3a:f5:35:a4:0a:f2:e6:cc:71:e3:20:42:47:
22:5b:4d:f0:58:85:8d:5c:d3:ed:07:f7:32:cf:36:
05:97:a9:6d:04:03:6c:c9:eb:2c:94:1a:c6:51:6f:
dc:e6:42:12:0b:05:d2:4d:e3:1c:19:2e:d0:2e:de:
86:1e:db:78:df:7a:85:22:37:60:63:f0:da:c1:42:
52:2a:f5:c4:dc:db:79:a1:18:68:4c:c0:e7:02:94:
a7:c7:de:27:ef:88:70:67:35:67:e7:ef:cf:b1:67:
5d:9c:40:a4:5e:17:c7:7c:5d:95:5c:35:6b:f4:5b:
10:44:81:ed:13:d1:04:64:ae:fe:e2:83:4a:c4:23:
3a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:18:94:53:3E:C9:34:7D:E6:09:F0:AB:84:BF:1E:50:DF:70:18:46
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/wRiUUz7JNH3mCfCrhL8eUN9wGEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.58.145.0/24
Signature Algorithm: sha256WithRSAEncryption
50:56:44:75:e0:79:56:01:f9:64:c0:12:26:85:89:62:22:38:
8a:38:31:55:56:7d:b0:7a:0c:0b:0a:75:35:e9:52:9b:8d:72:
2d:83:94:82:d1:6f:93:21:17:f0:b3:a9:19:0a:a4:37:18:5b:
8c:ba:c8:8e:9b:0d:c0:a5:dc:ec:f4:8d:e0:3d:b5:05:a5:82:
8e:93:90:f0:a7:15:65:7c:f2:3d:c5:e8:ec:dc:b9:10:f7:92:
ba:eb:79:f5:ef:60:c8:88:fe:d6:0d:63:eb:b3:ee:7a:1a:4f:
d3:99:60:9b:25:f9:6e:ef:af:3f:d7:eb:d9:29:6c:91:74:43:
f1:93:c5:66:d7:61:ea:9d:1f:4f:f8:0d:cc:c0:86:6f:58:3f:
be:7f:23:0a:71:fc:b7:2d:20:85:ae:4f:cf:0b:60:8c:25:73:
d9:f6:dd:84:b1:8a:b9:34:1f:53:8f:f9:ed:a2:4a:1a:a6:b2:
ac:4d:a2:e6:2b:90:01:fa:42:a4:2c:44:9a:45:3d:88:cc:a8:
e9:a5:d0:d9:27:3a:f0:4e:f9:09:15:2a:14:e1:b8:08:1a:91:
3a:ac:da:08:67:c1:86:ec:a4:5c:1e:04:fe:9e:c4:4d:94:b2:
ac:ee:d8:64:82:5b:2c:13:a4:18:59:e3:77:97:87:50:4b:f8:
51:98:a7:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYW6N+MXzTZYP5VBScjMQjomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMTE2MTA1NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTE4OTQ1MzNlYzkzNDdkZTYwOWYwYWI4NGJmMWU1MGRmNzAxODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrphO33wlE55s/zV857XA8Zm3jXi
CawkXnUeVvkiO/Eja+pfuT2qbR9Cl+YAy/rbwCmZWLta3nKpLODA7GiVM4XrVFnA
4PKWF3dc5M6C3+7FSZSpynTf3j2EmbsW/s3K4UWTU9LeGkDiPWw54K0Vek7irNmz
YWpJ5Tr1NaQK8ubMceMgQkciW03wWIWNXNPtB/cyzzYFl6ltBANsyesslBrGUW/c
5kISCwXSTeMcGS7QLt6GHtt433qFIjdgY/DawUJSKvXE3Nt5oRhoTMDnApSnx94n
74hwZzVn5+/PsWddnECkXhfHfF2VXDVr9FsQRIHtE9EEZK7+4oNKxCM66wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEYlFM+yTR95gnwq4S/HlDfcBhGMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvd1JpVVV6N0pOSDNtQ2ZDcmhMOGVVTjl3R0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTqRMA0G
CSqGSIb3DQEBCwUAA4IBAQBQVkR14HlWAflkwBImhYliIjiKODFVVn2wegwLCnU1
6VKbjXItg5SC0W+TIRfws6kZCqQ3GFuMusiOmw3Apdzs9I3gPbUFpYKOk5DwpxVl
fPI9xejs3LkQ95K663n172DIiP7WDWPrs+56Gk/TmWCbJflu768/1+vZKWyRdEPx
k8Vm12HqnR9P+A3MwIZvWD++fyMKcfy3LSCFrk/PC2CMJXPZ9t2EsYq5NB9Tj/nt
okoaprKsTaLmK5AB+kKkLESaRT2IzKjppdDZJzrwTvkJFSoU4bgIGpE6rNoIZ8GG
7KRcHgT+nsRNlLKs7thkglssE6QYWeN3l4dQS/hRmKcD
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:30 2024 by rpki-client on console-ams.rpki-client.org