Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/WT_c_2lBLAULGADUBFGlx0L_JyY.roa
File: WT_c_2lBLAULGADUBFGlx0L_JyY.roa (raw, json)
Hash identifier: jQSDw5TCcKP7kaBJl1yabE7dH6ykCS1CEJlLsH2zUew=
Subject key identifier: 59:3F:DC:FF:69:41:2C:05:0B:18:00:D4:04:51:A5:C7:42:FF:27:26
Certificate issuer: /CN=82468b53967545e28e9267ccbf0069d87b259869
Certificate serial: 01856F5DC18B196470BFE2A545586EABCF91
Authority key identifier: 82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/WT_c_2lBLAULGADUBFGlx0L_JyY.roa
Signing time: Sun 01 Jan 2023 22:04:53 +0000
ROA not before: Sun 01 Jan 2023 22:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56523
IP address blocks: 91.224.224.0/23 maxlen: 23
185.38.220.0/23 maxlen: 23
2a04:7840::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:c1:8b:19:64:70:bf:e2:a5:45:58:6e:ab:cf:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82468b53967545e28e9267ccbf0069d87b259869
Validity
Not Before: Jan 1 22:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=593fdcff69412c050b1800d40451a5c742ff2726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:03:68:25:a8:c7:d7:39:d7:f7:c5:ff:f2:68:
56:75:f9:90:13:4d:5b:6a:ac:32:c8:a1:3c:01:4a:
27:d3:8e:f3:cb:19:52:f0:b6:84:4f:84:1a:df:fe:
eb:60:3a:5b:24:9b:da:c4:ab:8f:94:32:35:e8:d5:
52:95:b0:39:a9:83:8a:56:00:43:86:f2:70:55:5f:
be:36:4f:90:f4:fd:a2:9d:02:96:19:6c:8b:42:25:
5e:bf:4a:14:1b:ca:f6:82:60:26:17:88:8b:c0:4f:
05:9a:19:ed:ac:87:56:32:b1:7d:ac:47:89:0b:a0:
22:0a:74:72:c7:14:e8:2a:15:5f:6e:ca:33:7b:cc:
9f:44:3f:d9:54:f0:c1:bb:0e:a6:38:af:7f:af:91:
86:a3:e9:07:ca:5d:aa:48:a7:a3:37:d2:25:9a:27:
79:ce:ff:9f:b4:bf:95:dc:66:3e:b0:78:b3:b2:cf:
02:c4:d9:4e:4f:d7:8b:df:e4:e1:0a:fe:08:80:32:
4c:d5:60:1e:41:ee:fd:66:49:59:32:50:30:84:a3:
4a:7a:e6:5e:4e:df:79:44:e5:01:41:32:ae:ed:85:
83:60:18:81:33:0c:9c:3c:a0:2b:62:47:a6:d6:e5:
83:80:d6:07:d4:cc:48:c7:f3:99:c6:de:af:d5:56:
a8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3F:DC:FF:69:41:2C:05:0B:18:00:D4:04:51:A5:C7:42:FF:27:26
X509v3 Authority Key Identifier:
keyid:82:46:8B:53:96:75:45:E2:8E:92:67:CC:BF:00:69:D8:7B:25:98:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gkaLU5Z1ReKOkmfMvwBp2HslmGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/WT_c_2lBLAULGADUBFGlx0L_JyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9cdacf-53e9-4139-bb4a-8ac2baf696c8/1/gkaLU5Z1ReKOkmfMvwBp2HslmGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.224.0/23
185.38.220.0/23
IPv6:
2a04:7840::/32
Signature Algorithm: sha256WithRSAEncryption
26:cd:67:ae:71:dc:8f:f3:23:86:1c:22:67:5b:f3:f5:03:bc:
4b:72:ed:06:22:1f:98:48:05:25:8b:c8:6f:e5:3c:fb:01:ca:
c2:63:27:27:f3:97:89:10:0b:c1:40:d6:91:ce:04:c4:49:3b:
87:bc:66:d2:a4:bf:31:a0:3c:2e:31:c3:fb:81:71:6f:89:cf:
57:cd:74:84:d9:9c:9b:83:be:be:f1:6f:28:2b:b7:24:37:31:
8a:0d:09:ca:55:a9:01:22:40:5e:73:6b:68:e2:77:fa:20:fe:
4b:38:fc:e6:cd:89:f7:ad:20:e4:82:c2:31:e8:55:e7:5e:4c:
0b:2c:72:b0:31:f9:7f:4b:7a:c2:e5:bd:f5:c3:c1:e4:1b:b6:
22:82:56:cd:51:5c:ea:44:7b:0f:5d:7b:3c:76:fa:49:2c:4d:
23:0f:92:71:82:17:28:be:28:a3:41:bf:6a:ad:4d:df:46:80:
1c:10:fb:a7:84:e9:03:6c:bb:bc:3c:db:10:07:ff:04:c7:d2:
d3:3f:b2:79:d4:52:38:f8:de:84:91:b1:37:7c:1f:a4:f0:46:
ad:7d:3b:c4:0a:3b:b5:8b:c5:29:54:cf:2d:fc:6a:ab:8a:26:
77:a6:1a:0b:25:a8:ae:d4:aa:53:fc:80:81:05:16:9a:b4:e8:
d0:ff:ba:a7
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvXcGLGWRwv+KlRVhuq8+RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNDY4YjUzOTY3NTQ1ZTI4ZTkyNjdjY2JmMDA2OWQ4N2Iy
NTk4NjkwHhcNMjMwMTAxMjIwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTNmZGNmZjY5NDEyYzA1MGIxODAwZDQwNDUxYTVjNzQyZmYyNzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwNoJajH1znX98X/8mhWdfmQE01b
aqwyyKE8AUon047zyxlS8LaET4Qa3/7rYDpbJJvaxKuPlDI16NVSlbA5qYOKVgBD
hvJwVV++Nk+Q9P2inQKWGWyLQiVev0oUG8r2gmAmF4iLwE8FmhntrIdWMrF9rEeJ
C6AiCnRyxxToKhVfbsoze8yfRD/ZVPDBuw6mOK9/r5GGo+kHyl2qSKejN9Ilmid5
zv+ftL+V3GY+sHizss8CxNlOT9eL3+ThCv4IgDJM1WAeQe79ZklZMlAwhKNKeuZe
Tt95ROUBQTKu7YWDYBiBMwycPKArYkem1uWDgNYH1MxIx/OZxt6v1Vao4QIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFFk/3P9pQSwFCxgA1ARRpcdC/ycmMB8GA1UdIwQY
MBaAFIJGi1OWdUXijpJnzL8Aadh7JZhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEt
OGFjMmJhZjY5NmM4LzEvV1RfY18ybEJMQVVMR0FEVUJGR2x4MExfSnlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85Y2RhY2YtNTNlOS00MTM5LWJiNGEtOGFjMmJhZjY5NmM4
LzEvZ2thTFU1WjFSZUtPa21mTXZ3QnAySHNsbUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+DgAwQB
uSbcMA0EAgACMAcDBQAqBHhAMA0GCSqGSIb3DQEBCwUAA4IBAQAmzWeucdyP8yOG
HCJnW/P1A7xLcu0GIh+YSAUli8hv5Tz7AcrCYycn85eJEAvBQNaRzgTESTuHvGbS
pL8xoDwuMcP7gXFvic9XzXSE2Zybg76+8W8oK7ckNzGKDQnKVakBIkBec2to4nf6
IP5LOPzmzYn3rSDkgsIx6FXnXkwLLHKwMfl/S3rC5b31w8HkG7YiglbNUVzqRHsP
XXs8dvpJLE0jD5JxghcoviijQb9qrU3fRoAcEPunhOkDbLu8PNsQB/8Ex9LTP7J5
1FI4+N6EkbE3fB+k8EatfTvECju1i8UpVM8t/GqriiZ3phoLJaiu1KpT/ICBBRaa
tOjQ/7qn
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:35 2024 by rpki-client on console-fra.rpki-client.org