Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/Wc58N0UdotgCmYAlwXS5iILMPVM.roa
File: Wc58N0UdotgCmYAlwXS5iILMPVM.roa (raw, json)
Hash identifier: dLm3ZUoOuMNS6Flt/3JxWRihw4mf5aBXrOVnFc6YN6w=
Subject key identifier: 59:CE:7C:37:45:1D:A2:D8:02:99:80:25:C1:74:B9:88:82:CC:3D:53
Certificate issuer: /CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Certificate serial: 018CC793EA1EA5CC641272DE09DADE343812
Authority key identifier: 1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/Wc58N0UdotgCmYAlwXS5iILMPVM.roa
Signing time: Tue 02 Jan 2024 00:30:08 +0000
ROA not before: Tue 02 Jan 2024 00:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209211
IP address blocks: 92.118.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:48:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:ea:1e:a5:cc:64:12:72:de:09:da:de:34:38:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb8a70f909ae3e1fc1dbd6bdc425e08eec81b9
Validity
Not Before: Jan 2 00:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59ce7c37451da2d802998025c174b98882cc3d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:73:9e:92:13:6b:56:52:81:11:89:f3:0e:
46:52:16:fa:4e:6e:e8:f9:b6:93:52:8f:15:87:37:
36:c7:05:25:9a:83:bc:88:fe:b3:b7:c7:39:6f:9f:
41:ea:2d:22:f4:bb:10:9f:72:c7:9c:16:c6:22:61:
16:c8:19:60:7b:be:f4:5f:c1:64:77:b3:27:e3:cd:
85:46:8d:de:3e:a4:cf:99:eb:7e:6e:ba:14:ef:60:
ba:f8:3b:7e:72:66:47:7f:20:d0:a3:5f:5f:25:7f:
80:6b:ff:2f:38:52:89:33:5e:21:f5:b1:d8:57:47:
32:fc:be:52:41:09:74:29:14:8c:85:8c:45:7d:29:
a4:58:aa:93:78:05:71:af:f7:8d:5d:0f:74:2c:d9:
a7:45:2f:d2:7b:5a:17:3e:a4:81:f9:4f:87:7c:a6:
5a:7b:eb:41:08:f8:75:70:c6:1e:ce:15:73:d2:92:
d2:0c:27:46:57:36:7d:25:ad:7f:18:3d:3f:70:1f:
af:d5:0a:74:02:04:66:c1:1b:4e:8d:59:c8:22:2d:
53:7e:cb:af:c1:0a:b7:0f:c3:87:d5:89:3b:d1:d8:
16:d6:7c:9a:72:a9:f8:70:45:61:9a:b6:19:3b:f0:
46:b8:eb:2b:22:f4:40:cc:1b:d2:45:7b:fd:24:50:
14:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CE:7C:37:45:1D:A2:D8:02:99:80:25:C1:74:B9:88:82:CC:3D:53
X509v3 Authority Key Identifier:
keyid:1A:CB:8A:70:F9:09:AE:3E:1F:C1:DB:D6:BD:C4:25:E0:8E:EC:81:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsuKcPkJrj4fwdvWvcQl4I7sgbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/Wc58N0UdotgCmYAlwXS5iILMPVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b9456e-4e52-4de5-bbd6-60de224cfa4b/1/GsuKcPkJrj4fwdvWvcQl4I7sgbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.118.20.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:5a:18:b4:0a:68:6c:bc:e6:d9:25:d2:d7:df:16:9b:66:0b:
14:2c:ea:69:d6:49:62:68:70:66:64:64:ba:70:9f:94:20:6d:
89:ed:ff:f5:5c:80:de:79:82:ac:00:2c:44:f9:62:88:1d:a7:
62:d6:8f:f1:52:1d:b8:f0:cd:5d:1b:16:3e:99:c1:20:fe:c3:
bc:61:d7:ef:52:0f:d7:63:15:28:83:7e:7e:f8:2e:0c:a9:fb:
4e:11:11:9d:10:bc:89:47:0d:ab:94:36:bd:b8:37:3e:dc:76:
49:15:30:fc:79:a8:8a:07:69:cf:39:c0:78:f2:a0:d4:57:21:
7c:ad:3e:2f:0e:68:54:37:ab:7f:79:ec:0d:22:11:f6:e7:54:
39:73:e4:67:65:be:29:bf:40:cf:74:c5:5f:3f:6a:32:97:02:
87:25:fc:fa:cd:ec:46:89:45:3a:7f:ac:8e:1a:9d:c5:93:42:
5d:db:fb:15:83:68:f1:17:95:a7:03:90:0a:33:c7:97:8e:5c:
d2:42:43:6a:fe:a2:70:92:bc:d1:d7:21:cd:f0:19:6f:78:b5:
77:93:28:2e:54:e9:03:af:b8:fe:63:ca:b2:f7:bc:0b:af:b3:
09:8d:ed:94:0a:1d:cb:0c:98:f2:cb:19:60:57:36:32:32:fe:
fd:fa:3b:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHk+oepcxkEnLeCdreNDgSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I4YTcwZjkwOWFlM2UxZmMxZGJkNmJkYzQyNWUwOGVl
YzgxYjkwHhcNMjQwMTAyMDAzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWNlN2MzNzQ1MWRhMmQ4MDI5OTgwMjVjMTc0Yjk4ODgyY2MzZDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhhznpITa1ZSgRGJ8w5GUhb6Tm7o
+baTUo8Vhzc2xwUlmoO8iP6zt8c5b59B6i0i9LsQn3LHnBbGImEWyBlge770X8Fk
d7Mn482FRo3ePqTPmet+broU72C6+Dt+cmZHfyDQo19fJX+Aa/8vOFKJM14h9bHY
V0cy/L5SQQl0KRSMhYxFfSmkWKqTeAVxr/eNXQ90LNmnRS/Se1oXPqSB+U+HfKZa
e+tBCPh1cMYezhVz0pLSDCdGVzZ9Ja1/GD0/cB+v1Qp0AgRmwRtOjVnIIi1Tfsuv
wQq3D8OH1Yk70dgW1nyacqn4cEVhmrYZO/BGuOsrIvRAzBvSRXv9JFAUIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFnOfDdFHaLYApmAJcF0uYiCzD1TMB8GA1UdIwQY
MBaAFBrLinD5Ca4+H8Hb1r3EJeCO7IG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYt
NjBkZTIyNGNmYTRiLzEvV2M1OE4wVWRvdGdDbVlBbHdYUzVpSUxNUFZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iOTQ1NmUtNGU1Mi00ZGU1LWJiZDYtNjBkZTIyNGNmYTRi
LzEvR3N1S2NQa0pyajRmd2R2V3ZjUWw0STdzZ2JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHYUMA0G
CSqGSIb3DQEBCwUAA4IBAQDLWhi0CmhsvObZJdLX3xabZgsULOpp1kliaHBmZGS6
cJ+UIG2J7f/1XIDeeYKsACxE+WKIHadi1o/xUh248M1dGxY+mcEg/sO8YdfvUg/X
YxUog35++C4MqftOERGdELyJRw2rlDa9uDc+3HZJFTD8eaiKB2nPOcB48qDUVyF8
rT4vDmhUN6t/eewNIhH251Q5c+RnZb4pv0DPdMVfP2oylwKHJfz6zexGiUU6f6yO
Gp3Fk0Jd2/sVg2jxF5WnA5AKM8eXjlzSQkNq/qJwkrzR1yHN8BlveLV3kyguVOkD
r7j+Y8qy97wLr7MJje2UCh3LDJjyyxlgVzYyMv79+jsQ
-----END CERTIFICATE-----
Generated at Sun May 11 23:14:03 2025 by rpki-client