Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WO67ifg_1mUOuWPH2Yj5T2CY44Y.roa
File: WO67ifg_1mUOuWPH2Yj5T2CY44Y.roa (raw, json)
Hash identifier: cdf/QRWI3D1AfwGCIQ7g8KxLM6fdhjRMdZAafJFmUI8=
Subject key identifier: 58:EE:BB:89:F8:3F:D6:65:0E:B9:63:C7:D9:88:F9:4F:60:98:E3:86
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB15AA9CBD8A61FD13CE3A26D6F12E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WO67ifg_1mUOuWPH2Yj5T2CY44Y.roa
Signing time: Sun 01 Jan 2023 10:05:26 +0000
ROA not before: Sun 01 Jan 2023 10:05:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 192.121.247.0/24 maxlen: 24
192.121.82.0/24 maxlen: 24
193.234.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:15:aa:9c:bd:8a:61:fd:13:ce:3a:26:d6:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58eebb89f83fd6650eb963c7d988f94f6098e386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0d:e2:da:70:62:88:a7:3c:bd:27:f1:7a:58:
e0:21:30:2a:0e:69:0f:e9:c4:94:85:a0:66:c2:bc:
6c:50:d7:13:6d:2b:a4:42:b4:18:4b:be:f7:01:1b:
95:7e:f6:96:2b:c2:25:30:c9:58:9e:f1:f4:09:64:
2c:05:77:85:04:b2:04:bd:68:7f:6d:5a:e7:d2:fc:
3b:b3:b8:b6:04:fa:14:48:d3:13:b4:9d:37:44:69:
83:f1:e1:9e:62:02:9d:ca:fb:e1:e5:39:4e:71:1e:
3a:bb:80:a4:c0:73:fa:8f:60:a8:a4:49:85:a7:e8:
d9:7d:da:86:d4:eb:ae:22:eb:e8:4d:5e:14:92:8d:
7a:9a:f7:5b:7f:a5:ed:c9:1f:7a:6b:bb:4b:97:3e:
6d:f2:d4:55:6a:3e:f3:61:4f:c3:b7:d1:97:2d:c6:
90:77:01:5f:12:75:31:ef:c3:b8:68:93:53:ba:1c:
da:ab:cb:73:e3:4a:b9:59:96:58:45:6b:f6:57:0c:
60:fa:d3:02:3e:87:55:ee:b4:b8:54:ef:64:89:e9:
07:30:8f:ed:f4:0d:b2:a3:26:36:0a:d5:24:cd:04:
8e:68:01:3f:16:f4:98:d2:0c:34:26:5a:82:b3:f5:
20:b9:58:50:d8:e2:87:9a:ba:a3:fe:06:f8:4a:9f:
8c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:EE:BB:89:F8:3F:D6:65:0E:B9:63:C7:D9:88:F9:4F:60:98:E3:86
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/WO67ifg_1mUOuWPH2Yj5T2CY44Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.82.0/24
192.121.247.0/24
193.234.55.0/24
Signature Algorithm: sha256WithRSAEncryption
36:eb:07:30:9c:e5:08:5b:e1:36:39:dc:56:80:54:d2:b6:3d:
41:cd:29:29:c3:62:43:ed:02:be:01:7e:e8:b9:38:ec:6c:63:
ec:33:a7:84:15:90:36:90:a2:50:9b:42:42:e7:ec:b3:58:7c:
14:65:c5:9c:f1:d2:66:2a:e5:95:0d:55:43:09:e4:b9:5c:d2:
af:2c:09:f5:0f:19:e8:51:76:4e:24:47:ce:c6:71:a0:21:59:
ee:a8:71:ea:bd:fe:8b:23:3d:04:14:88:4a:c4:42:4d:40:58:
43:55:41:6d:c0:4e:e5:aa:7d:ea:b1:03:c4:d0:96:b1:3b:24:
c2:4e:4a:0c:41:d0:62:b6:8f:10:89:01:e0:06:50:98:2b:0e:
0b:3b:18:c0:3f:24:7b:87:e8:fb:f8:4f:c3:b3:fe:55:df:6d:
30:22:23:72:94:36:8b:f0:62:68:e5:9e:d6:71:28:77:bd:61:
df:96:9f:49:fa:a6:1b:67:aa:bc:35:74:67:5c:41:dd:33:3d:
85:23:8c:8d:ec:2e:05:98:51:41:4e:7a:58:8b:89:21:5a:47:
d7:a2:9b:f6:fc:de:b8:05:c5:c4:cf:1e:42:dc:2d:77:10:2a:
98:7d:b4:02:55:e6:d1:87:29:8a:81:da:fd:bc:53:a8:e2:5a:
4e:dd:4c:d4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVsyxWqnL2KYf0Tzjom1vEuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjMwMTAxMTAwNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGVlYmI4OWY4M2ZkNjY1MGViOTYzYzdkOTg4Zjk0ZjYwOThlMzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg3i2nBiiKc8vSfxeljgITAqDmkP
6cSUhaBmwrxsUNcTbSukQrQYS773ARuVfvaWK8IlMMlYnvH0CWQsBXeFBLIEvWh/
bVrn0vw7s7i2BPoUSNMTtJ03RGmD8eGeYgKdyvvh5TlOcR46u4CkwHP6j2CopEmF
p+jZfdqG1OuuIuvoTV4Uko16mvdbf6XtyR96a7tLlz5t8tRVaj7zYU/Dt9GXLcaQ
dwFfEnUx78O4aJNTuhzaq8tz40q5WZZYRWv2Vwxg+tMCPodV7rS4VO9kiekHMI/t
9A2yoyY2CtUkzQSOaAE/FvSY0gw0JlqCs/UguVhQ2OKHmrqj/gb4Sp+MOwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFjuu4n4P9ZlDrljx9mI+U9gmOOGMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvV082N2lmZ18xbVVPdVdQSDJZajVUMkNZNDRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwHlSAwQA
wHn3AwQAweo3MA0GCSqGSIb3DQEBCwUAA4IBAQA26wcwnOUIW+E2OdxWgFTStj1B
zSkpw2JD7QK+AX7ouTjsbGPsM6eEFZA2kKJQm0JC5+yzWHwUZcWc8dJmKuWVDVVD
CeS5XNKvLAn1DxnoUXZOJEfOxnGgIVnuqHHqvf6LIz0EFIhKxEJNQFhDVUFtwE7l
qn3qsQPE0JaxOyTCTkoMQdBito8QiQHgBlCYKw4LOxjAPyR7h+j7+E/Ds/5V320w
IiNylDaL8GJo5Z7WcSh3vWHflp9J+qYbZ6q8NXRnXEHdMz2FI4yN7C4FmFFBTnpY
i4khWkfXopv2/N64BcXEzx5C3C13ECqYfbQCVebRhymKgdr9vFOo4lpO3UzU
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org