Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/wmwpHaBGixtgcCkYO35CqhlSDHI.roa
File: wmwpHaBGixtgcCkYO35CqhlSDHI.roa (raw, json)
Hash identifier: PWVfHEyfAdOSxOK1OiBAfPVZYrDoATgiNVYptT0MtsU=
Subject key identifier: C2:6C:29:1D:A0:46:8B:1B:60:70:29:18:3B:7E:42:AA:19:52:0C:72
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 01884CB3B126B4722DDB8B2A03C1D9201903
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/wmwpHaBGixtgcCkYO35CqhlSDHI.roa
Signing time: Wed 24 May 2023 07:40:24 +0000
ROA not before: Wed 24 May 2023 07:40:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61102
IP address blocks: 185.136.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:b3:b1:26:b4:72:2d:db:8b:2a:03:c1:d9:20:19:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: May 24 07:40:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c26c291da0468b1b607029183b7e42aa19520c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c5:3b:ca:3a:53:7e:b7:2b:d3:bd:20:42:74:
3d:f2:c2:18:ec:8b:bf:70:c8:b0:b9:7a:7e:d8:47:
10:2a:94:db:72:1b:43:94:40:6e:f9:f2:da:c2:a5:
aa:f1:d9:f1:a2:a8:f2:64:d3:15:f5:8d:30:b2:d7:
90:9b:ad:0d:e1:83:6c:5d:19:aa:aa:d1:56:94:26:
3b:44:b2:e8:5e:26:ad:04:c5:3c:ab:5b:c6:74:a2:
bb:2f:ed:60:5d:fc:ef:88:d2:28:7b:62:97:ec:2f:
62:5d:a4:65:96:17:56:4d:93:e3:1b:83:27:71:ea:
39:cd:bd:6b:96:cc:0c:fd:81:29:82:ca:b4:9e:b9:
b7:49:03:da:5c:d4:ad:48:f7:0e:18:81:d7:a8:a1:
5e:58:25:f5:6d:6a:34:d2:55:1b:22:0a:09:c9:9d:
3c:86:d6:37:5a:b4:a6:75:54:65:7c:27:d6:09:ea:
72:d1:bb:d7:12:16:50:66:aa:00:72:29:a7:dd:6d:
a6:44:29:50:48:7c:b2:9b:d9:12:5e:01:19:c9:2d:
b9:67:17:c6:1f:38:1f:20:3b:d2:7e:ff:91:4b:55:
ba:89:66:46:50:5d:42:4e:9b:68:de:bc:96:4e:45:
ba:04:4f:25:16:b6:dd:4d:02:6d:c3:48:b6:50:aa:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:6C:29:1D:A0:46:8B:1B:60:70:29:18:3B:7E:42:AA:19:52:0C:72
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/wmwpHaBGixtgcCkYO35CqhlSDHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.132.0/24
Signature Algorithm: sha256WithRSAEncryption
54:93:76:38:b7:2d:b2:b2:81:93:9e:32:47:f5:9c:84:eb:9d:
2f:cd:60:39:47:89:99:a5:c9:84:11:54:1b:21:bb:63:5f:70:
9b:f6:e7:53:0b:f0:e7:42:fd:a9:5c:c6:07:d4:0e:ed:31:59:
76:9f:ae:b3:ff:1e:df:dc:e2:a4:3e:d5:30:ec:25:b0:44:79:
43:5e:08:17:60:70:2b:4f:86:eb:9e:46:51:57:7d:b1:df:67:
e9:71:58:52:91:22:bf:d1:aa:2f:25:25:d2:12:d7:af:b7:bb:
ee:0c:f6:57:3d:28:f4:89:12:7f:63:80:5f:23:70:19:c4:e1:
50:df:54:0b:e9:25:de:6c:75:1f:90:e2:47:22:d6:fe:a1:50:
21:19:a7:fa:6a:5a:d7:39:13:1d:99:88:d2:7c:9a:d1:65:cf:
8d:3c:bc:70:e2:d3:bc:ec:0c:6d:85:f7:0a:99:81:72:90:30:
3c:44:c7:8c:d4:2f:1a:b1:ac:a5:29:9f:eb:93:ae:cf:56:64:
97:0e:da:9c:49:e5:f2:ea:4c:2c:4c:cb:a0:43:5b:b7:27:6e:
05:48:de:4a:2f:40:9e:b8:2b:6f:a4:bc:7b:55:be:61:40:ec:
4e:f0:42:8e:fb:99:37:c3:fa:82:91:71:2d:81:18:b1:03:34:
51:e1:6e:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhMs7EmtHIt24sqA8HZIBkDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYmVmMThlNGY3MGQwOGRmM2ZiMzBmZWU1MDdlNWI1YTkx
OTZmOTkwHhcNMjMwNTI0MDc0MDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjZjMjkxZGEwNDY4YjFiNjA3MDI5MTgzYjdlNDJhYTE5NTIwYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8U7yjpTfrcr070gQnQ98sIY7Iu/
cMiwuXp+2EcQKpTbchtDlEBu+fLawqWq8dnxoqjyZNMV9Y0wsteQm60N4YNsXRmq
qtFWlCY7RLLoXiatBMU8q1vGdKK7L+1gXfzviNIoe2KX7C9iXaRllhdWTZPjG4Mn
ceo5zb1rlswM/YEpgsq0nrm3SQPaXNStSPcOGIHXqKFeWCX1bWo00lUbIgoJyZ08
htY3WrSmdVRlfCfWCepy0bvXEhZQZqoAcimn3W2mRClQSHyym9kSXgEZyS25ZxfG
HzgfIDvSfv+RS1W6iWZGUF1CTpto3ryWTkW6BE8lFrbdTQJtw0i2UKoqGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMJsKR2gRosbYHApGDt+QqoZUgxyMB8GA1UdIwQY
MBaAFOK+8Y5PcNCN8/sw/uUH5bWpGW+ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWIt
Nzk5MGUzZDFkZGFhLzEvd213cEhhQkdpeHRnY0NrWU8zNUNxaGxTREhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy80ZDI5MjgtYzYzNi00MGMwLTljOWItNzk5MGUzZDFkZGFh
LzEvNHI3eGprOXcwSTN6LXpELTVRZmx0YWtaYjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYiEMA0G
CSqGSIb3DQEBCwUAA4IBAQBUk3Y4ty2ysoGTnjJH9ZyE650vzWA5R4mZpcmEEVQb
IbtjX3Cb9udTC/DnQv2pXMYH1A7tMVl2n66z/x7f3OKkPtUw7CWwRHlDXggXYHAr
T4brnkZRV32x32fpcVhSkSK/0aovJSXSEtevt7vuDPZXPSj0iRJ/Y4BfI3AZxOFQ
31QL6SXebHUfkOJHItb+oVAhGaf6alrXORMdmYjSfJrRZc+NPLxw4tO87AxthfcK
mYFykDA8RMeM1C8asaylKZ/rk67PVmSXDtqcSeXy6kwsTMugQ1u3J24FSN5KL0Ce
uCtvpLx7Vb5hQOxO8EKO+5k3w/qCkXEtgRixAzRR4W4u
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:17 2024 by rpki-client on console-fra.rpki-client.org