Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WuSvHx88uGfa-vkP5zMk9gSY-ew.roa
File: WuSvHx88uGfa-vkP5zMk9gSY-ew.roa (raw, json)
Hash identifier: Y+EJ5LQRjMp+b74S4xUZnUDNPUBtBQpF2gQ2a6PwfB0=
Subject key identifier: 5A:E4:AF:1F:1F:3C:B8:67:DA:FA:F9:0F:E7:33:24:F6:04:98:F9:EC
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0189551E8BFD3C7C97FDE1C50C3CB2FC7637
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WuSvHx88uGfa-vkP5zMk9gSY-ew.roa
Signing time: Fri 14 Jul 2023 15:56:52 +0000
ROA not before: Fri 14 Jul 2023 15:56:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 88.209.230.0/24 maxlen: 24
88.209.255.0/24 maxlen: 24
77.242.159.0/24 maxlen: 24
88.209.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 31 Jul 2023 15:22:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:55:1e:8b:fd:3c:7c:97:fd:e1:c5:0c:3c:b2:fc:76:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 14 15:56:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ae4af1f1f3cb867dafaf90fe73324f60498f9ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5d:a9:1d:ff:4c:da:bc:58:30:fd:91:64:8e:
c2:a3:5d:46:9e:f1:d1:09:8b:04:1a:5e:80:98:e9:
da:f8:6c:53:06:63:8c:80:f2:66:04:7e:a2:c7:11:
cd:bb:ee:74:ca:e4:0a:8f:0a:10:42:12:18:b7:38:
18:98:d1:e2:c3:be:26:b6:d5:5b:dc:79:4b:45:12:
23:27:7d:fc:90:e4:dd:8d:d3:ad:e8:79:75:40:74:
22:41:07:f5:61:9a:30:0f:bc:4f:3a:69:a6:80:6f:
b0:11:85:b1:6a:88:fe:ba:76:32:de:62:71:4c:f7:
a6:82:cf:9b:cc:07:e7:e7:0f:c0:17:40:66:a3:c6:
a9:3f:b9:dc:20:2d:d1:c9:f8:4b:82:42:59:ca:d1:
4a:ec:55:12:e6:5c:fb:0d:9b:dc:d3:b7:a2:2d:39:
7e:36:df:56:10:d8:09:a6:de:f9:39:4d:81:5e:64:
31:98:c1:1e:18:7c:65:b2:51:eb:07:50:65:c5:a2:
5c:63:c0:9a:25:d5:29:2a:e8:a7:93:18:38:a4:56:
51:dc:81:92:34:1d:ea:1a:9b:2b:43:52:e7:b0:a7:
65:5b:6c:db:30:d5:d9:6a:a6:8f:16:9e:70:2d:2f:
1c:eb:35:8a:20:02:f4:d5:d0:a9:08:62:4f:85:ba:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:AF:1F:1F:3C:B8:67:DA:FA:F9:0F:E7:33:24:F6:04:98:F9:EC
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/WuSvHx88uGfa-vkP5zMk9gSY-ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.242.159.0/24
88.209.203.0/24
88.209.230.0/24
88.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
60:89:84:a7:c9:7e:28:8f:21:32:61:ec:1d:79:ed:59:88:8d:
a6:66:7f:fc:95:b3:7d:63:83:35:fb:c4:79:fc:87:bc:cf:6c:
3a:32:ad:6a:99:c8:e2:44:2b:c4:2b:86:e4:91:cf:fb:53:68:
ec:74:15:35:ce:d6:6b:70:95:49:37:a5:a1:c0:4f:f4:cd:7b:
40:94:5c:52:0d:15:80:75:69:a3:09:87:f4:74:cb:d8:9b:df:
9b:3b:30:8d:b2:f5:4c:43:45:38:9a:fb:ae:6e:e4:27:12:99:
dc:7d:5c:bf:94:27:96:4a:81:f1:2f:59:dc:1a:af:94:33:c6:
c2:d8:b2:de:9d:8e:72:69:12:fc:93:89:61:31:0b:4c:66:19:
89:f2:bf:ad:ad:45:df:97:b3:b9:6a:78:11:e1:d3:61:62:24:
c5:bf:e0:7d:20:f4:f3:e3:fc:36:98:5e:4b:b6:a6:61:14:2d:
04:09:a4:e2:a8:45:be:af:29:7d:4a:79:9d:54:cb:c2:74:77:
71:42:b9:85:56:a8:31:92:fa:df:9e:43:81:90:7a:bb:17:50:
aa:22:17:ac:f2:76:a9:80:c2:80:69:20:80:7e:46:3d:43:89:
a1:2f:3d:22:f2:20:75:1d:5c:04:ca:b2:d9:a6:3b:e4:60:0d:
ff:7e:f7:e1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYlVHov9PHyX/eHFDDyy/HY3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjMwNzE0MTU1NjUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YWU0YWYxZjFmM2NiODY3ZGFmYWY5MGZlNzMzMjRmNjA0OThmOWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhV2pHf9M2rxYMP2RZI7Co11GnvHR
CYsEGl6AmOna+GxTBmOMgPJmBH6ixxHNu+50yuQKjwoQQhIYtzgYmNHiw74mttVb
3HlLRRIjJ338kOTdjdOt6Hl1QHQiQQf1YZowD7xPOmmmgG+wEYWxaoj+unYy3mJx
TPemgs+bzAfn5w/AF0Bmo8apP7ncIC3RyfhLgkJZytFK7FUS5lz7DZvc07eiLTl+
Nt9WENgJpt75OU2BXmQxmMEeGHxlslHrB1BlxaJcY8CaJdUpKuinkxg4pFZR3IGS
NB3qGpsrQ1LnsKdlW2zbMNXZaqaPFp5wLS8c6zWKIAL01dCpCGJPhbq69QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFrkrx8fPLhn2vr5D+czJPYEmPnsMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvV3VTdkh4ODh1R2ZhLXZrUDV6TWs5Z1NZLWV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATfKfAwQA
WNHLAwQAWNHmAwQAWNH/MA0GCSqGSIb3DQEBCwUAA4IBAQBgiYSnyX4ojyEyYewd
ee1ZiI2mZn/8lbN9Y4M1+8R5/Ie8z2w6Mq1qmcjiRCvEK4bkkc/7U2jsdBU1ztZr
cJVJN6WhwE/0zXtAlFxSDRWAdWmjCYf0dMvYm9+bOzCNsvVMQ0U4mvuubuQnEpnc
fVy/lCeWSoHxL1ncGq+UM8bC2LLenY5yaRL8k4lhMQtMZhmJ8r+trUXfl7O5angR
4dNhYiTFv+B9IPTz4/w2mF5LtqZhFC0ECaTiqEW+ryl9SnmdVMvCdHdxQrmFVqgx
kvrfnkOBkHq7F1CqIhes8napgMKAaSCAfkY9Q4mhLz0i8iB1HVwEyrLZpjvkYA3/
fvfh
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org