Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/WowLk9voPGgj-wCWZdpcpi39WJ4.roa
File: WowLk9voPGgj-wCWZdpcpi39WJ4.roa (raw, json)
Hash identifier: zPczlY90Xz0bCzcLmF0xERUo/+BjaH/IMC67CwvAjds=
Subject key identifier: 5A:8C:0B:93:DB:E8:3C:68:23:FB:00:96:65:DA:5C:A6:2D:FD:58:9E
Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Certificate serial: 0188BD35DCC7AAAC8031C00E01685B9484DC
Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/WowLk9voPGgj-wCWZdpcpi39WJ4.roa
Signing time: Thu 15 Jun 2023 04:00:03 +0000
ROA not before: Thu 15 Jun 2023 04:00:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207240
IP address blocks: 171.25.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:35:dc:c7:aa:ac:80:31:c0:0e:01:68:5b:94:84:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485
Validity
Not Before: Jun 15 04:00:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a8c0b93dbe83c6823fb009665da5ca62dfd589e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:aa:ca:ec:ed:ea:89:d6:0a:08:6d:f9:0c:21:
0c:bb:7c:da:54:e1:42:d4:72:1d:ea:fa:3d:ad:bb:
5b:52:ea:30:be:b2:64:04:ba:df:2b:6a:4b:5b:79:
48:71:01:fa:f8:0e:0a:52:48:38:17:bd:fd:b0:6b:
b7:39:33:ab:4b:8a:b1:81:eb:23:85:36:7b:f2:6a:
61:cc:2b:52:91:4f:57:1e:83:63:43:30:59:b8:40:
32:96:9c:7b:0d:0f:c4:c5:de:92:6a:0b:e7:4f:f7:
a8:9c:ba:83:11:14:7c:de:f6:5f:38:6a:a6:78:98:
81:a6:6c:75:e1:8e:65:68:f9:88:b5:5c:cf:cd:0e:
5b:b1:70:3b:14:78:1a:94:33:4d:51:e5:5c:1e:a7:
e0:25:fd:79:73:66:b6:5c:6b:f5:19:59:a7:c2:0e:
67:a2:d3:3e:b9:30:4a:60:82:67:4c:ec:6e:4e:b5:
b5:34:44:1d:10:1f:48:39:ba:64:51:9b:e8:3e:a1:
59:c6:23:da:ea:3a:6c:c8:2b:51:99:e0:d9:f4:99:
3c:dd:cc:bf:85:4f:85:9f:7b:72:c8:76:6d:90:01:
e9:ad:e8:c2:dc:67:04:8a:70:b5:70:47:3d:ff:ef:
b1:27:6c:94:d3:9f:f9:bb:b4:db:42:33:81:4d:ca:
fc:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8C:0B:93:DB:E8:3C:68:23:FB:00:96:65:DA:5C:A6:2D:FD:58:9E
X509v3 Authority Key Identifier:
keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/WowLk9voPGgj-wCWZdpcpi39WJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.25.177.0/24
Signature Algorithm: sha256WithRSAEncryption
30:e3:3e:ae:ff:b1:82:5c:6f:13:5c:31:d0:83:b3:df:68:95:
26:bb:2a:68:43:f7:2b:18:d0:ce:24:86:58:5b:c4:82:56:12:
dd:60:70:b8:5d:52:d1:f5:4f:30:74:c6:b9:f4:f1:d1:87:7d:
01:67:0d:0f:59:b9:ff:b2:e8:26:36:b5:4e:22:c2:ef:e2:1c:
e2:20:9b:9e:e0:51:c8:6e:e7:a6:4a:f4:ad:e3:31:4a:ce:11:
58:fb:47:8c:ba:02:63:49:14:8e:9a:ef:38:da:5a:41:80:83:
b4:47:8d:07:c8:3d:db:dd:20:ac:19:d5:56:80:c9:d6:1f:a4:
61:df:47:09:25:72:aa:99:b6:34:04:97:60:b0:c4:ee:d6:78:
a5:78:15:1b:36:ee:9e:3b:31:8e:b6:72:91:34:72:db:2b:02:
d9:23:b1:a2:42:3c:c2:03:99:d3:0e:8c:1d:13:a7:46:72:02:
bf:bb:62:b8:06:00:78:38:c2:51:49:6b:68:5b:ec:4e:4b:0c:
77:f7:e7:83:43:e1:ed:bf:a5:fb:40:d4:da:f2:c1:79:2d:9b:
28:39:da:d2:4d:0b:7d:09:de:ea:bb:ac:1f:d7:c9:5a:06:6a:
ce:48:8f:62:c7:a9:c6:18:2a:49:df:dd:90:46:25:de:24:18:
ca:c2:6d:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi9NdzHqqyAMcAOAWhblITcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi
Zjk0ODUwHhcNMjMwNjE1MDQwMDAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YThjMGI5M2RiZTgzYzY4MjNmYjAwOTY2NWRhNWNhNjJkZmQ1ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKrK7O3qidYKCG35DCEMu3zaVOFC
1HId6vo9rbtbUuowvrJkBLrfK2pLW3lIcQH6+A4KUkg4F739sGu3OTOrS4qxgesj
hTZ78mphzCtSkU9XHoNjQzBZuEAylpx7DQ/Exd6SagvnT/eonLqDERR83vZfOGqm
eJiBpmx14Y5laPmItVzPzQ5bsXA7FHgalDNNUeVcHqfgJf15c2a2XGv1GVmnwg5n
otM+uTBKYIJnTOxuTrW1NEQdEB9IObpkUZvoPqFZxiPa6jpsyCtRmeDZ9Jk83cy/
hU+Fn3tyyHZtkAHprejC3GcEinC1cEc9/++xJ2yU05/5u7TbQjOBTcr84wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFqMC5Pb6DxoI/sAlmXaXKYt/VieMB8GA1UdIwQY
MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt
Y2JiOTUxODNiMjdhLzEvV293TGs5dm9QR2dqLXdDV1pkcGNwaTM5V0o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh
LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxmxMA0G
CSqGSIb3DQEBCwUAA4IBAQAw4z6u/7GCXG8TXDHQg7PfaJUmuypoQ/crGNDOJIZY
W8SCVhLdYHC4XVLR9U8wdMa59PHRh30BZw0PWbn/sugmNrVOIsLv4hziIJue4FHI
buemSvSt4zFKzhFY+0eMugJjSRSOmu842lpBgIO0R40HyD3b3SCsGdVWgMnWH6Rh
30cJJXKqmbY0BJdgsMTu1nileBUbNu6eOzGOtnKRNHLbKwLZI7GiQjzCA5nTDowd
E6dGcgK/u2K4BgB4OMJRSWtoW+xOSwx39+eDQ+Htv6X7QNTa8sF5LZsoOdrSTQt9
Cd7qu6wf18laBmrOSI9ix6nGGCpJ392QRiXeJBjKwm1L
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org