Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wTAwnv_GB-_3D01G4eZS2jFcQLE.roa
File: wTAwnv_GB-_3D01G4eZS2jFcQLE.roa (raw, json)
Hash identifier: sIrbTCwbJ6me0SnmNaow0CS2BaMp2T7TZtUfjNmLef8=
Subject key identifier: C1:30:30:9E:FF:C6:07:EF:F7:0F:4D:46:E1:E6:52:DA:31:5C:40:B1
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01875ACA082F7C4DBC044DE18B6D5342635D
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wTAwnv_GB-_3D01G4eZS2jFcQLE.roa
Signing time: Fri 07 Apr 2023 08:16:42 +0000
ROA not before: Fri 07 Apr 2023 08:16:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200113
IP address blocks: 5.10.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:ca:08:2f:7c:4d:bc:04:4d:e1:8b:6d:53:42:63:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 7 08:16:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c130309effc607eff70f4d46e1e652da315c40b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b8:cf:80:46:04:17:a9:ca:64:fb:7f:1f:92:
9c:ec:b0:6e:87:f4:fd:92:d8:c0:8a:72:3d:13:90:
25:72:90:66:1b:51:06:5f:1a:2b:40:9f:6d:27:61:
8b:cf:31:9e:4e:36:a3:55:59:bc:94:39:f7:58:81:
b7:1d:15:82:bb:57:7f:7b:15:8e:f0:cd:06:c3:5a:
48:8d:09:0d:12:7e:97:ca:e4:65:4a:c6:17:f2:8c:
54:5b:8f:bc:04:02:3a:a5:1c:24:65:f2:96:98:ba:
c4:ed:c7:36:44:d2:da:b8:14:fa:b9:69:f5:37:b0:
ae:d9:d7:f6:c0:15:b1:99:cf:cb:5c:49:7b:a6:e6:
d7:54:92:b6:ce:f7:8a:71:df:42:9f:bc:91:84:c4:
10:fd:ad:ba:46:8c:e5:e3:22:7f:2f:51:a3:99:63:
16:2b:79:34:6f:e3:4f:19:cb:1e:00:30:ba:4f:93:
9c:f5:3c:1b:5a:b3:5e:d3:bb:c8:ea:e5:65:6b:a7:
f3:3c:eb:c9:0f:03:b9:a9:62:ed:f4:ce:57:3d:3b:
0a:46:6c:21:28:82:de:05:b9:b6:87:20:37:71:7a:
b3:2b:8d:15:4e:83:aa:16:76:d1:fd:b0:09:28:17:
77:70:a3:5e:da:25:1e:01:00:39:70:98:33:8f:76:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:30:30:9E:FF:C6:07:EF:F7:0F:4D:46:E1:E6:52:DA:31:5C:40:B1
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/wTAwnv_GB-_3D01G4eZS2jFcQLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.250.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8e:ac:69:b4:af:6c:67:43:47:81:61:e0:24:03:95:f9:84:
64:08:18:58:80:64:f3:ba:ac:b4:a2:2d:b1:20:70:77:2f:97:
08:87:13:76:3c:59:32:3c:0b:a1:43:a0:04:ef:f1:5a:d1:d3:
20:2a:fb:7e:4c:2a:f4:d2:a7:e9:02:77:c3:a1:ff:1a:50:84:
5d:bf:67:91:78:7f:39:01:22:f6:bd:6a:fe:ee:24:16:27:97:
65:85:cf:1b:4a:25:38:8e:05:cb:f4:62:64:b2:29:0d:23:d1:
e4:ce:4b:f3:cb:81:20:0f:a6:30:cc:65:fe:ef:c6:52:e8:2b:
b3:9c:f1:73:ba:d4:97:09:91:68:85:15:54:24:89:a4:ad:fc:
5b:ee:34:9a:c6:48:ab:30:cd:3d:6e:83:b4:93:d8:ff:63:b5:
38:64:1b:1f:45:99:77:ba:f1:b3:53:09:7b:e8:66:35:12:2a:
32:4f:76:37:2d:73:48:39:45:d6:9f:70:fd:c4:f2:30:1d:d6:
12:f2:ba:37:30:0c:2e:5b:b6:a0:c4:5f:44:c7:c9:f6:8c:ec:
5a:9a:89:5c:d0:46:92:bc:56:d8:01:ad:2a:76:1d:42:d9:41:
8c:b3:41:ca:e8:34:a2:25:81:29:a5:00:bc:0c:3c:d5:f4:53:
38:82:63:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdayggvfE28BE3hi21TQmNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwNDA3MDgxNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMTMwMzA5ZWZmYzYwN2VmZjcwZjRkNDZlMWU2NTJkYTMxNWM0MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7jPgEYEF6nKZPt/H5Kc7LBuh/T9
ktjAinI9E5AlcpBmG1EGXxorQJ9tJ2GLzzGeTjajVVm8lDn3WIG3HRWCu1d/exWO
8M0Gw1pIjQkNEn6XyuRlSsYX8oxUW4+8BAI6pRwkZfKWmLrE7cc2RNLauBT6uWn1
N7Cu2df2wBWxmc/LXEl7pubXVJK2zveKcd9Cn7yRhMQQ/a26Rozl4yJ/L1GjmWMW
K3k0b+NPGcseADC6T5Oc9TwbWrNe07vI6uVla6fzPOvJDwO5qWLt9M5XPTsKRmwh
KILeBbm2hyA3cXqzK40VToOqFnbR/bAJKBd3cKNe2iUeAQA5cJgzj3aatwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMEwMJ7/xgfv9w9NRuHmUtoxXECxMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvd1RBd252X0dCLV8zRDAxRzRlWlMyakZjUUxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABQr6MA0G
CSqGSIb3DQEBCwUAA4IBAQCHjqxptK9sZ0NHgWHgJAOV+YRkCBhYgGTzuqy0oi2x
IHB3L5cIhxN2PFkyPAuhQ6AE7/Fa0dMgKvt+TCr00qfpAnfDof8aUIRdv2eReH85
ASL2vWr+7iQWJ5dlhc8bSiU4jgXL9GJksikNI9Hkzkvzy4EgD6YwzGX+78ZS6Cuz
nPFzutSXCZFohRVUJImkrfxb7jSaxkirMM09boO0k9j/Y7U4ZBsfRZl3uvGzUwl7
6GY1EioyT3Y3LXNIOUXWn3D9xPIwHdYS8ro3MAwuW7agxF9Ex8n2jOxamolc0EaS
vFbYAa0qdh1C2UGMs0HK6DSiJYEppQC8DDzV9FM4gmO2
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org