Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/WW_4cnN3UtNH-T4FqPs2I6W4C6Q.roa
File: WW_4cnN3UtNH-T4FqPs2I6W4C6Q.roa (raw, json)
Hash identifier: FPTjLTpbsCLFHlaovE8ylR8ZOQ7G51OBZLNET/aSn98=
Subject key identifier: 59:6F:F8:72:73:77:52:D3:47:F9:3E:05:A8:FB:36:23:A5:B8:0B:A4
Certificate issuer: /CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Certificate serial: 018BAE4F587FE2331A7BA03A776561A41270
Authority key identifier: 81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/WW_4cnN3UtNH-T4FqPs2I6W4C6Q.roa
Signing time: Wed 08 Nov 2023 09:41:57 +0000
ROA not before: Wed 08 Nov 2023 09:41:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44569
IP address blocks: 93.190.232.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ae:4f:58:7f:e2:33:1a:7b:a0:3a:77:65:61:a4:12:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81a7ce8bacbeceeb16f600b607d1bfd08033b302
Validity
Not Before: Nov 8 09:41:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=596ff872737752d347f93e05a8fb3623a5b80ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:96:3b:81:1a:6b:13:fc:e4:dc:52:33:f9:
cf:b7:91:eb:0e:0c:64:94:64:a5:23:91:8e:16:1d:
db:50:50:44:75:1a:61:f8:70:18:f3:04:93:98:31:
a5:d1:82:4c:91:23:8b:66:d7:fb:13:10:5c:07:ff:
2a:e3:1c:09:eb:eb:ee:eb:a7:bc:5d:e7:c9:ff:cf:
c8:50:01:c2:80:09:0c:b3:09:a3:9e:bc:b8:b8:54:
a0:9c:7d:4d:1b:62:18:84:f9:28:9b:34:af:19:d2:
69:08:10:4b:5d:a7:71:ac:ac:ea:a8:45:6a:02:ae:
7a:35:71:19:e7:0b:42:e0:6a:2b:3d:13:9f:e9:64:
a9:2d:8d:fc:8a:f8:32:ba:bf:16:fb:9c:a8:01:ea:
d6:72:4b:50:0c:f1:72:82:f2:38:b6:23:08:57:d1:
32:d4:b0:c9:dc:22:83:d8:49:e7:aa:73:ff:be:55:
20:17:cf:6b:af:33:40:c3:75:db:a8:91:9f:d6:10:
3b:b2:26:a4:aa:3f:43:4e:82:3a:61:8e:c3:c9:02:
fb:a8:ab:5d:69:dd:ce:b2:da:81:64:06:fe:b1:46:
9b:50:1b:95:25:cc:83:49:2d:14:c1:ed:07:8c:f6:
00:00:8c:78:87:b8:99:c6:35:fc:10:50:82:8d:fd:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6F:F8:72:73:77:52:D3:47:F9:3E:05:A8:FB:36:23:A5:B8:0B:A4
X509v3 Authority Key Identifier:
keyid:81:A7:CE:8B:AC:BE:CE:EB:16:F6:00:B6:07:D1:BF:D0:80:33:B3:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gafOi6y-zusW9gC2B9G_0IAzswI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/WW_4cnN3UtNH-T4FqPs2I6W4C6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ee66fb-5dc0-4122-9bc7-b27d8730a270/1/gafOi6y-zusW9gC2B9G_0IAzswI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.232.0/21
Signature Algorithm: sha256WithRSAEncryption
18:57:84:69:dc:42:7d:22:01:94:2e:56:a8:71:c4:e8:f0:80:
e9:c3:8a:db:16:56:8d:cc:18:06:f4:37:ac:8d:a5:7c:30:15:
ba:2b:a0:99:cc:d7:4e:fb:d9:c9:af:bc:fc:52:29:ef:f2:11:
0c:be:91:c6:e1:7f:ac:0e:48:26:e0:64:8d:71:d1:cc:d2:f9:
3f:75:25:4a:f9:44:be:99:f7:f2:91:ac:c7:1a:c8:03:65:64:
95:b0:89:9a:57:42:e7:41:e5:11:51:ab:11:27:1c:87:d5:50:
c4:c0:2e:a4:50:19:53:d1:04:69:f4:77:75:50:87:fc:0d:16:
60:77:b2:62:95:73:c2:b9:95:f9:44:73:2f:b1:45:7b:48:35:
d4:73:d8:5f:4e:79:de:44:a0:57:ae:e0:66:27:a5:b1:83:ab:
2a:fc:c0:e7:09:07:5c:b2:cf:87:42:21:ae:7e:07:cc:42:cc:
7b:07:87:f8:a7:72:9c:d1:dc:57:3c:36:a8:54:4b:c3:83:1c:
83:0b:bf:f8:ab:6e:c1:34:51:0e:cf:0f:6c:d0:64:71:ec:58:
9d:94:25:a9:62:62:44:0b:5f:52:20:a1:d5:ef:f3:d3:73:64:
23:bc:4e:01:13:3d:02:46:87:76:17:65:9b:33:54:18:25:7e:
2d:01:f0:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuuT1h/4jMae6A6d2VhpBJwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYTdjZThiYWNiZWNlZWIxNmY2MDBiNjA3ZDFiZmQwODAz
M2IzMDIwHhcNMjMxMTA4MDk0MTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTZmZjg3MjczNzc1MmQzNDdmOTNlMDVhOGZiMzYyM2E1YjgwYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKWWO4EaaxP85NxSM/nPt5HrDgxk
lGSlI5GOFh3bUFBEdRph+HAY8wSTmDGl0YJMkSOLZtf7ExBcB/8q4xwJ6+vu66e8
XefJ/8/IUAHCgAkMswmjnry4uFSgnH1NG2IYhPkomzSvGdJpCBBLXadxrKzqqEVq
Aq56NXEZ5wtC4GorPROf6WSpLY38ivgyur8W+5yoAerWcktQDPFygvI4tiMIV9Ey
1LDJ3CKD2EnnqnP/vlUgF89rrzNAw3XbqJGf1hA7siakqj9DToI6YY7DyQL7qKtd
ad3OstqBZAb+sUabUBuVJcyDSS0Uwe0HjPYAAIx4h7iZxjX8EFCCjf1lnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFlv+HJzd1LTR/k+Baj7NiOluAukMB8GA1UdIwQY
MBaAFIGnzousvs7rFvYAtgfRv9CAM7MCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzct
YjI3ZDg3MzBhMjcwLzEvV1dfNGNuTjNVdE5ILVQ0RnFQczJJNlc0QzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9lZTY2ZmItNWRjMC00MTIyLTliYzctYjI3ZDg3MzBhMjcw
LzEvZ2FmT2k2eS16dXNXOWdDMkI5R18wSUF6c3dJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXb7oMA0G
CSqGSIb3DQEBCwUAA4IBAQAYV4Rp3EJ9IgGULlaoccTo8IDpw4rbFlaNzBgG9Des
jaV8MBW6K6CZzNdO+9nJr7z8Uinv8hEMvpHG4X+sDkgm4GSNcdHM0vk/dSVK+US+
mffykazHGsgDZWSVsImaV0LnQeURUasRJxyH1VDEwC6kUBlT0QRp9Hd1UIf8DRZg
d7JilXPCuZX5RHMvsUV7SDXUc9hfTnneRKBXruBmJ6Wxg6sq/MDnCQdcss+HQiGu
fgfMQsx7B4f4p3Kc0dxXPDaoVEvDgxyDC7/4q27BNFEOzw9s0GRx7FidlCWpYmJE
C19SIKHV7/PTc2QjvE4BEz0CRod2F2WbM1QYJX4tAfBB
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:58 2024 by rpki-client on console-ams.rpki-client.org