Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/W3SfI2U2T5owYoC_oc1D25wopyE.roa
File: W3SfI2U2T5owYoC_oc1D25wopyE.roa (raw, json)
Hash identifier: pruXkzOI7Ao8BPoOFejiLvajfKMGzr7OW6TebHLUNsc=
Subject key identifier: 5B:74:9F:23:65:36:4F:9A:30:62:80:BF:A1:CD:43:DB:9C:28:A7:21
Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Certificate serial: 01856F14A69E7EEBB9B2C87A73278C8CE6E8
Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/W3SfI2U2T5owYoC_oc1D25wopyE.roa
Signing time: Sun 01 Jan 2023 20:45:02 +0000
ROA not before: Sun 01 Jan 2023 20:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12507
IP address blocks: 46.151.144.0/21 maxlen: 21
195.49.200.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:a6:9e:7e:eb:b9:b2:c8:7a:73:27:8c:8c:e6:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00
Validity
Not Before: Jan 1 20:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b749f2365364f9a306280bfa1cd43db9c28a721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7a:6a:62:63:69:f6:4a:52:6e:e7:9b:bd:8b:
05:e6:77:3d:39:23:5d:e9:a9:c4:ea:b6:a6:98:83:
7d:bf:4c:ff:6e:99:cd:61:d1:12:0a:8b:3d:7e:35:
82:56:85:83:e3:20:5e:32:5f:8a:d5:e1:bb:0b:d8:
37:96:9c:c2:33:70:08:29:bd:55:ed:df:64:21:5e:
da:7e:38:82:ef:44:4f:13:f3:f5:df:cf:c8:ae:ae:
57:4c:32:07:81:58:eb:13:e0:49:e0:0d:74:45:83:
2a:b6:c7:bc:2e:68:80:35:40:e0:e8:37:9a:ec:e2:
b1:44:54:f0:ea:3c:4e:a3:08:75:97:2c:5d:8a:e3:
58:e3:84:7c:8e:3f:75:14:fc:9b:8e:69:9b:f3:a7:
34:b3:d1:da:31:9b:d3:94:da:ba:69:5e:d6:ae:8b:
a8:b6:fb:6e:ad:13:45:98:e6:01:5d:4c:04:15:80:
0c:26:e8:ea:6f:52:3d:a9:2f:b1:df:e5:d2:1c:88:
90:13:08:e3:04:96:b4:c0:89:82:b5:2d:e6:22:9b:
de:3a:14:4c:b9:03:d2:2c:c9:47:f9:7c:cc:5a:04:
6f:99:cc:c1:b1:4b:cc:f2:2a:2e:fb:e7:60:67:f3:
bc:be:82:93:90:98:94:43:04:d7:71:d7:72:ae:e6:
57:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:74:9F:23:65:36:4F:9A:30:62:80:BF:A1:CD:43:DB:9C:28:A7:21
X509v3 Authority Key Identifier:
keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/W3SfI2U2T5owYoC_oc1D25wopyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.144.0/21
195.49.200.0/21
Signature Algorithm: sha256WithRSAEncryption
80:02:b1:50:ed:09:5b:d7:fb:6d:3e:de:77:43:51:b2:d2:99:
74:22:b4:42:34:5e:fb:68:3c:5a:d1:68:a0:b0:ae:17:90:15:
9b:22:90:20:f5:44:e1:9c:ec:c2:b1:e8:fc:d5:24:cf:97:d3:
09:56:3a:0a:27:6a:65:2b:b9:43:4a:18:4b:98:ed:32:b3:87:
5c:7f:8c:93:c5:bc:b4:b6:56:89:97:df:1d:a8:b2:25:38:b3:
de:18:12:96:05:26:2a:06:a7:4f:8d:9e:af:70:a4:4e:11:49:
dc:b6:37:47:53:a5:e3:71:ad:ec:e4:b2:6c:34:57:2f:6b:8f:
b7:df:3d:d4:fc:36:cb:9b:70:b6:16:e9:49:c9:3e:ed:50:50:
db:74:88:7b:18:a4:d3:c1:92:15:9a:74:13:b6:c7:39:6c:89:
2c:39:30:e9:26:87:4a:7b:16:95:3e:ce:ff:4d:21:b0:8f:72:
7d:c8:d9:d5:58:fb:e3:45:ed:a8:1b:2e:c0:ad:cd:8e:e4:8e:
e5:cc:aa:b2:71:6d:e8:28:51:66:4c:19:07:4e:be:5d:8f:db:
d7:16:41:cb:95:89:d2:92:26:3b:c4:a8:83:80:7b:67:43:1c:
c8:47:86:60:e0:82:24:64:cf:c2:b5:a8:34:bf:7c:71:44:f1:
82:63:9a:b3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvFKaefuu5ssh6cyeMjOboMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh
ZGZhMDAwHhcNMjMwMTAxMjA0NTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Yjc0OWYyMzY1MzY0ZjlhMzA2MjgwYmZhMWNkNDNkYjljMjhhNzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonpqYmNp9kpSbuebvYsF5nc9OSNd
6anE6rammIN9v0z/bpnNYdESCos9fjWCVoWD4yBeMl+K1eG7C9g3lpzCM3AIKb1V
7d9kIV7afjiC70RPE/P138/Irq5XTDIHgVjrE+BJ4A10RYMqtse8LmiANUDg6Dea
7OKxRFTw6jxOowh1lyxdiuNY44R8jj91FPybjmmb86c0s9HaMZvTlNq6aV7Wrouo
tvturRNFmOYBXUwEFYAMJujqb1I9qS+x3+XSHIiQEwjjBJa0wImCtS3mIpveOhRM
uQPSLMlH+XzMWgRvmczBsUvM8iou++dgZ/O8voKTkJiUQwTXcddyruZXCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFt0nyNlNk+aMGKAv6HNQ9ucKKchMB8GA1UdIwQY
MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt
OGRmMzYzMzdlNmJjLzEvVzNTZkkyVTJUNW93WW9DX29jMUQyNXdvcHlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj
LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLpeQAwQD
wzHIMA0GCSqGSIb3DQEBCwUAA4IBAQCAArFQ7Qlb1/ttPt53Q1Gy0pl0IrRCNF77
aDxa0WigsK4XkBWbIpAg9UThnOzCsej81STPl9MJVjoKJ2plK7lDShhLmO0ys4dc
f4yTxby0tlaJl98dqLIlOLPeGBKWBSYqBqdPjZ6vcKROEUnctjdHU6Xjca3s5LJs
NFcva4+33z3U/DbLm3C2FulJyT7tUFDbdIh7GKTTwZIVmnQTtsc5bIksOTDpJodK
exaVPs7/TSGwj3J9yNnVWPvjRe2oGy7Arc2O5I7lzKqycW3oKFFmTBkHTr5dj9vX
FkHLlYnSkiY7xKiDgHtnQxzIR4Zg4IIkZM/Ctag0v3xxRPGCY5qz
-----END CERTIFICATE-----
Generated at Thu Nov 16 09:46:44 2023 by rpki-client on console-fra.rpki-client.org