Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/WQ1RG9BojlyWYa2n-pXuIlf8hL8.roa
File: WQ1RG9BojlyWYa2n-pXuIlf8hL8.roa (raw, json)
Hash identifier: fSZeN+i3QYGxX+/v1ifCLSIEumap6LirNeq1/q66XQI=
Subject key identifier: 59:0D:51:1B:D0:68:8E:5C:96:61:AD:A7:FA:95:EE:22:57:FC:84:BF
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01858094ECDB022EC502AF2E75B297E802A7
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/WQ1RG9BojlyWYa2n-pXuIlf8hL8.roa
Signing time: Thu 05 Jan 2023 06:18:41 +0000
ROA not before: Thu 05 Jan 2023 06:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.24.0/21 maxlen: 24
217.113.18.0/23 maxlen: 23
45.133.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:94:ec:db:02:2e:c5:02:af:2e:75:b2:97:e8:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 5 06:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=590d511bd0688e5c9661ada7fa95ee2257fc84bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:93:a4:b9:1e:11:cd:41:ba:4c:71:1e:35:f9:
5e:62:6c:33:1a:4f:82:a4:87:97:71:a3:c4:17:af:
4c:65:12:c0:ed:63:7c:2f:49:d6:12:cb:4d:dd:01:
28:cc:65:5b:6d:df:80:c7:d7:25:c1:c6:ea:c1:53:
61:a5:28:d9:e8:2f:93:0a:48:71:69:48:3f:33:ee:
f5:19:60:3d:11:2b:46:23:ec:b1:a8:ac:53:44:cb:
6f:10:00:53:55:4e:c1:e3:40:d6:51:eb:6c:4a:43:
26:0b:24:70:9c:3f:1f:56:e0:73:94:88:26:a2:ef:
f1:0e:7c:8e:d9:c3:07:49:cf:fd:64:f5:62:2c:37:
69:bf:9c:de:fe:47:64:6f:0b:41:5f:b5:e6:f3:f2:
5e:ac:34:c0:97:94:16:47:fb:ff:2e:5a:1e:7b:41:
8b:f5:fc:82:cf:94:87:8b:db:92:50:c0:a4:3c:cf:
84:a9:c1:06:15:80:79:94:e6:2e:0c:c5:f1:6d:09:
d1:fa:49:48:8d:27:d6:b3:3a:1b:69:4d:d0:30:7d:
f1:80:79:93:3e:38:04:13:69:ea:2c:e1:a6:1c:f1:
a7:a1:08:1b:d2:0b:75:4d:fa:99:43:a1:0e:87:a7:
32:f8:00:49:3a:2d:63:15:5b:e1:93:c1:45:4d:b3:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0D:51:1B:D0:68:8E:5C:96:61:AD:A7:FA:95:EE:22:57:FC:84:BF
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/WQ1RG9BojlyWYa2n-pXuIlf8hL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/22
217.113.18.0/23
217.113.24.0/21
Signature Algorithm: sha256WithRSAEncryption
72:34:05:db:69:e7:20:52:87:0b:3a:90:88:0d:25:7e:dd:7e:
87:78:29:4e:8f:9c:d0:bc:d7:33:c6:3b:2b:38:8d:dd:ce:c9:
5e:eb:0f:4f:79:af:12:12:5d:15:31:d6:38:17:e3:9c:39:51:
ce:39:4c:75:ab:70:b0:a5:f0:bc:d1:f6:b4:28:59:96:16:48:
51:3a:7e:3d:eb:f0:10:b2:ef:dc:16:5a:01:0c:36:c6:07:2d:
58:b7:85:94:81:e6:85:d5:af:f3:c3:71:47:02:5f:56:c0:69:
53:63:d4:82:7f:cc:27:1e:64:42:2d:3c:39:c6:36:8b:11:ec:
63:fa:66:89:3e:40:9f:eb:df:5a:60:da:70:19:33:8c:7f:93:
db:2f:c1:01:ba:a7:d6:35:fd:7f:79:51:e2:32:5b:8b:e9:f3:
52:7e:42:36:e7:69:46:87:25:a3:0d:f9:66:ef:09:30:69:c1:
3d:56:84:d5:ae:09:9c:35:9c:7a:d2:0e:24:6c:d6:82:96:ab:
ca:d8:a1:6e:c4:df:a4:0b:ca:07:98:b9:3d:a7:2b:d1:0b:6a:
94:4a:1f:82:d1:b1:b4:0c:2a:a3:c8:bc:c4:b5:65:d7:2b:ef:
9b:6c:a8:2f:67:c1:10:9a:67:3d:cc:13:37:96:43:69:ad:2d:
91:8b:aa:12
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYWAlOzbAi7FAq8udbKX6AKnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMTA1MDYxODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTBkNTExYmQwNjg4ZTVjOTY2MWFkYTdmYTk1ZWUyMjU3ZmM4NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJOkuR4RzUG6THEeNfleYmwzGk+C
pIeXcaPEF69MZRLA7WN8L0nWEstN3QEozGVbbd+Ax9clwcbqwVNhpSjZ6C+TCkhx
aUg/M+71GWA9EStGI+yxqKxTRMtvEABTVU7B40DWUetsSkMmCyRwnD8fVuBzlIgm
ou/xDnyO2cMHSc/9ZPViLDdpv5ze/kdkbwtBX7Xm8/JerDTAl5QWR/v/Lloee0GL
9fyCz5SHi9uSUMCkPM+EqcEGFYB5lOYuDMXxbQnR+klIjSfWszobaU3QMH3xgHmT
PjgEE2nqLOGmHPGnoQgb0gt1TfqZQ6EOh6cy+ABJOi1jFVvhk8FFTbPrswIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFkNURvQaI5clmGtp/qV7iJX/IS/MB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvV1ExUkc5Qm9qbHlXWWEybi1wWHVJbGY4aEw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYVoAwQB
2XESAwQD2XEYMA0GCSqGSIb3DQEBCwUAA4IBAQByNAXbaecgUocLOpCIDSV+3X6H
eClOj5zQvNczxjsrOI3dzsle6w9Pea8SEl0VMdY4F+OcOVHOOUx1q3CwpfC80fa0
KFmWFkhROn496/AQsu/cFloBDDbGBy1Yt4WUgeaF1a/zw3FHAl9WwGlTY9SCf8wn
HmRCLTw5xjaLEexj+maJPkCf699aYNpwGTOMf5PbL8EBuqfWNf1/eVHiMluL6fNS
fkI252lGhyWjDflm7wkwacE9VoTVrgmcNZx60g4kbNaClqvK2KFuxN+kC8oHmLk9
pyvRC2qUSh+C0bG0DCqjyLzEtWXXK++bbKgvZ8EQmmc9zBM3lkNprS2Ri6oS
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:55 2023 by rpki-client on console.sobornost.net