Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/WbY-8i016qYrXuGFfzTaJJI2Np4.roa
File: WbY-8i016qYrXuGFfzTaJJI2Np4.roa (raw, json)
Hash identifier: yxXSCTH1NW35txdDm02S/zM1+laB8Ck1ka2B1NxtpPs=
Subject key identifier: 59:B6:3E:F2:2D:35:EA:A6:2B:5E:E1:85:7F:34:DA:24:92:36:36:9E
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 018D5AFB6171430513C11D0CDB12CF50D938
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/WbY-8i016qYrXuGFfzTaJJI2Np4.roa
Signing time: Tue 30 Jan 2024 15:27:20 +0000
ROA not before: Tue 30 Jan 2024 15:27:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 95.141.242.0/24 maxlen: 24
2a13:3f81::/32 maxlen: 32
2a13:3f82::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 05 Feb 2024 16:09:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5a:fb:61:71:43:05:13:c1:1d:0c:db:12:cf:50:d9:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jan 30 15:27:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59b63ef22d35eaa62b5ee1857f34da249236369e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:88:19:85:f6:65:d2:b8:dd:7c:47:0f:e4:61:
9e:f6:2f:38:d0:09:4a:77:59:b9:12:df:4e:76:4e:
ae:c6:de:10:dd:6b:58:82:87:14:29:83:3d:61:04:
ba:28:ab:bf:47:dc:6a:0c:40:e8:31:b9:38:27:73:
e9:53:0c:ac:e4:fc:9b:47:06:b9:29:44:d0:6e:9f:
6f:24:cd:70:ea:e5:37:bb:08:85:58:60:75:03:98:
19:d6:91:b1:84:46:78:96:f5:ad:2e:6e:ad:a9:cf:
bd:2e:7e:28:67:10:16:82:92:ff:b3:bc:23:20:42:
1f:57:f7:97:b7:f3:46:e9:18:84:78:76:ac:6d:af:
83:96:71:d6:52:dc:1e:aa:3e:57:f6:6a:ef:dd:2e:
47:1e:82:6e:18:10:79:d9:2b:72:0a:50:1b:3f:a3:
5a:60:04:0c:8c:cd:8a:0e:f3:cd:4f:3a:c2:72:8c:
3a:02:8d:76:50:90:a8:e9:72:3d:2e:75:82:b6:a0:
49:35:f9:e6:12:82:25:b6:8a:1c:b0:8e:c4:3a:f7:
92:13:c7:23:86:0c:9d:bc:ae:50:a7:d9:5b:d7:1a:
0a:bd:39:3b:87:b5:4e:f4:6c:16:c4:b3:34:6e:e2:
40:f5:66:ab:df:22:39:dd:a1:c8:d4:5d:7b:21:d6:
20:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:3E:F2:2D:35:EA:A6:2B:5E:E1:85:7F:34:DA:24:92:36:36:9E
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/WbY-8i016qYrXuGFfzTaJJI2Np4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.141.242.0/24
IPv6:
2a13:3f81::-2a13:3f82:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
14:3c:ce:ef:c8:87:8b:1d:f0:0a:76:90:23:d3:48:1a:08:9b:
42:f5:f4:d3:92:14:c6:c9:10:f6:72:77:92:42:ea:13:08:12:
10:1f:ae:5a:42:5c:22:58:d7:17:e3:92:71:e2:aa:84:e0:da:
61:4a:22:79:53:e7:e8:d0:98:3f:b1:de:b1:41:0f:46:49:00:
a9:33:7a:8b:e9:fa:f6:f7:f2:0a:c7:aa:5a:0d:78:06:c1:d8:
69:c5:c6:4d:53:14:3e:f0:3a:72:9d:f5:1f:0f:59:34:87:fa:
98:ee:43:6c:f6:fc:35:e1:f1:80:1e:33:fb:08:a7:b0:fd:5b:
0d:0a:0a:32:82:61:82:9f:33:de:88:7c:30:54:4d:7f:f9:26:
59:c6:b7:89:bb:ca:3a:5a:ab:63:39:07:ae:11:c8:da:bb:10:
6d:d9:8c:de:01:9c:a8:ec:24:c3:7a:5b:42:66:07:1a:2a:58:
42:be:7d:0f:38:85:bf:15:2f:b5:6a:61:d9:55:ad:f0:da:ae:
4b:35:a7:00:cf:db:1c:96:ea:f3:f4:4a:43:c0:71:47:9b:5b:
38:7d:9e:9d:ff:43:37:4c:77:bc:29:75:e5:6b:3f:db:60:5d:
63:87:49:ec:05:30:fc:e4:69:2a:a0:a2:f5:13:4e:ed:b6:07:
21:96:4c:da
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY1a+2FxQwUTwR0M2xLPUNk4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MjJmYzJmOGFkOGIwMDgzNTdkYmU2ZjAxOTU5NjBjOWRl
NjFiZDUwHhcNMjQwMTMwMTUyNzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWI2M2VmMjJkMzVlYWE2MmI1ZWUxODU3ZjM0ZGEyNDkyMzYzNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4gZhfZl0rjdfEcP5GGe9i840AlK
d1m5Et9Odk6uxt4Q3WtYgocUKYM9YQS6KKu/R9xqDEDoMbk4J3PpUwys5PybRwa5
KUTQbp9vJM1w6uU3uwiFWGB1A5gZ1pGxhEZ4lvWtLm6tqc+9Ln4oZxAWgpL/s7wj
IEIfV/eXt/NG6RiEeHasba+DlnHWUtweqj5X9mrv3S5HHoJuGBB52StyClAbP6Na
YAQMjM2KDvPNTzrCcow6Ao12UJCo6XI9LnWCtqBJNfnmEoIltoocsI7EOveSE8cj
hgydvK5Qp9lb1xoKvTk7h7VO9GwWxLM0buJA9War3yI53aHI1F17IdYg9wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFm2PvItNeqmK17hhX802iSSNjaeMB8GA1UdIwQY
MBaAFDYi/C+K2LAINX2+bwGVlgyd5hvVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmIt
MDg4MzVkZmY2YzRmLzEvV2JZLThpMDE2cVlyWHVHRmZ6VGFKSkkyTnA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS9mNjNlNTgtOWVmYy00MDgyLTgyYmItMDg4MzVkZmY2YzRm
LzEvTmlMOEw0cllzQWcxZmI1dkFaV1dESjNtRzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAX43yMBYE
AgACMBAwDgMFACoTP4EDBQAqEz+CMA0GCSqGSIb3DQEBCwUAA4IBAQAUPM7vyIeL
HfAKdpAj00gaCJtC9fTTkhTGyRD2cneSQuoTCBIQH65aQlwiWNcX45Jx4qqE4Nph
SiJ5U+fo0Jg/sd6xQQ9GSQCpM3qL6fr29/IKx6paDXgGwdhpxcZNUxQ+8DpynfUf
D1k0h/qY7kNs9vw14fGAHjP7CKew/VsNCgoygmGCnzPeiHwwVE1/+SZZxreJu8o6
WqtjOQeuEcjauxBt2YzeAZyo7CTDeltCZgcaKlhCvn0POIW/FS+1amHZVa3w2q5L
NacAz9sclurz9EpDwHFHm1s4fZ6d/0M3THe8KXXlaz/bYF1jh0nsBTD85GkqoKL1
E07ttgchlkza
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:11 2024 by rpki-client on console-ams.rpki-client.org