Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/WXQYYXLDOXOvmEY2YBaewgmXfQI.roa
File: WXQYYXLDOXOvmEY2YBaewgmXfQI.roa (raw, json)
Hash identifier: vakjuRLOb+K26Jdk1rSypaci7gONQN4nZUGL8EIfPLQ=
Subject key identifier: 59:74:18:61:72:C3:39:73:AF:98:46:36:60:16:9E:C2:09:97:7D:02
Certificate issuer: /CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Certificate serial: 01857227D77E7BD98911564F8E9462850B11
Authority key identifier: AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/WXQYYXLDOXOvmEY2YBaewgmXfQI.roa
Signing time: Mon 02 Jan 2023 11:04:51 +0000
ROA not before: Mon 02 Jan 2023 11:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49243
IP address blocks: 86.57.128.0/17 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:d7:7e:7b:d9:89:11:56:4f:8e:94:62:85:0b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab882cd6d196ae1f96872acae78321be7a92b8eb
Validity
Not Before: Jan 2 11:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5974186172c33973af98463660169ec209977d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:81:cf:99:f2:2d:ca:19:f5:54:e8:1a:6c:01:
e6:88:8a:2a:f7:46:31:2a:31:0b:67:f1:ec:d3:d9:
80:6f:2b:d8:83:c7:4d:78:e2:8a:2e:98:e9:df:4a:
ff:a9:7b:08:92:7e:cd:2c:cd:01:07:ec:30:ad:3d:
94:5a:0f:9f:60:88:61:ef:b7:ff:60:6e:de:33:21:
77:a3:5a:d8:de:dd:33:12:85:9a:3f:51:35:23:3f:
76:c4:8a:2c:4c:ac:8f:ef:13:9f:eb:47:04:30:82:
3a:3f:0d:9c:d9:f3:af:db:f8:b6:1f:e3:0c:88:9b:
05:01:79:b8:6e:ec:f0:dd:2a:ad:60:bc:be:db:f8:
f3:13:87:b1:be:63:b7:b7:b7:08:e8:26:00:2f:7d:
de:e7:ce:5e:9e:dc:3d:1e:dd:59:5e:d3:71:ad:f5:
d7:3c:4a:c4:62:2a:48:83:32:e1:24:6d:15:73:00:
66:83:d1:5e:82:0b:72:7b:af:d1:75:46:df:03:39:
68:d5:d4:7f:b9:c4:41:13:e0:e2:e6:de:38:19:d0:
56:cf:ab:71:2e:49:b7:f3:2d:47:4e:07:f9:af:65:
f7:05:46:b8:f1:93:0d:22:c4:14:aa:4f:c7:6e:02:
df:a6:df:ca:14:df:ac:88:20:4c:e0:91:ff:93:67:
e6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:18:61:72:C3:39:73:AF:98:46:36:60:16:9E:C2:09:97:7D:02
X509v3 Authority Key Identifier:
keyid:AB:88:2C:D6:D1:96:AE:1F:96:87:2A:CA:E7:83:21:BE:7A:92:B8:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4gs1tGWrh-WhyrK54MhvnqSuOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/WXQYYXLDOXOvmEY2YBaewgmXfQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/4b6cc9-09d3-4678-b0a7-950c180596d0/1/q4gs1tGWrh-WhyrK54MhvnqSuOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.57.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0c:e4:66:1f:3c:c6:66:d9:a4:e9:9b:fb:22:d0:80:a3:b3:08:
56:fe:f8:da:b3:5c:19:98:59:76:44:0b:06:37:94:46:5d:e7:
25:d3:3f:2a:6b:ef:e5:a0:f0:09:79:6e:ab:a7:cd:5f:80:18:
25:d9:39:2a:46:66:b0:e0:6b:f7:bc:ac:f5:ec:d0:d6:88:8e:
bd:d3:b1:6a:74:8e:56:a7:ac:d0:ab:21:9e:81:dc:87:14:9f:
48:46:f7:46:0b:1b:cd:c8:ad:66:fb:47:49:f5:d4:e7:7c:6f:
ef:98:8c:62:90:d9:7d:1d:a5:f5:b4:e5:d7:53:32:18:69:49:
a3:d5:4c:bc:78:63:db:b6:45:27:2f:23:ce:f0:21:2f:b1:3e:
56:c8:ae:75:cb:5e:51:88:87:06:1f:48:9d:78:90:cd:51:69:
63:34:d9:4a:f8:55:50:85:91:3b:e5:aa:a1:a2:bd:22:b4:9b:
8e:5a:8c:36:69:d2:fc:0c:f1:03:45:64:2d:38:bf:99:89:3a:
ec:fe:f0:c4:09:8c:dd:43:b2:bf:f0:f0:8b:1d:ee:1a:4d:a8:
f0:fb:99:3f:db:ae:90:88:9d:f4:cc:c5:36:ba:5c:51:4a:5c:
37:2b:64:7a:5e:84:16:35:2c:e2:a1:94:7b:1b:5d:60:27:a6:
46:e9:e6:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ9d+e9mJEVZPjpRihQsRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiODgyY2Q2ZDE5NmFlMWY5Njg3MmFjYWU3ODMyMWJlN2E5
MmI4ZWIwHhcNMjMwMTAyMTEwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTc0MTg2MTcyYzMzOTczYWY5ODQ2MzY2MDE2OWVjMjA5OTc3ZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoHPmfItyhn1VOgabAHmiIoq90Yx
KjELZ/Hs09mAbyvYg8dNeOKKLpjp30r/qXsIkn7NLM0BB+wwrT2UWg+fYIhh77f/
YG7eMyF3o1rY3t0zEoWaP1E1Iz92xIosTKyP7xOf60cEMII6Pw2c2fOv2/i2H+MM
iJsFAXm4buzw3SqtYLy+2/jzE4exvmO3t7cI6CYAL33e585entw9Ht1ZXtNxrfXX
PErEYipIgzLhJG0VcwBmg9Feggtye6/RdUbfAzlo1dR/ucRBE+Di5t44GdBWz6tx
Lkm38y1HTgf5r2X3BUa48ZMNIsQUqk/HbgLfpt/KFN+siCBM4JH/k2fmzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFl0GGFywzlzr5hGNmAWnsIJl30CMB8GA1UdIwQY
MBaAFKuILNbRlq4flocqyueDIb56krjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTct
OTUwYzE4MDU5NmQwLzEvV1hRWVlYTERPWE92bUVZMllCYWV3Z21YZlFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS80YjZjYzktMDlkMy00Njc4LWIwYTctOTUwYzE4MDU5NmQw
LzEvcTRnczF0R1dyaC1XaHlySzU0TWh2bnFTdU9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHVjmAMA0G
CSqGSIb3DQEBCwUAA4IBAQAM5GYfPMZm2aTpm/si0ICjswhW/vjas1wZmFl2RAsG
N5RGXecl0z8qa+/loPAJeW6rp81fgBgl2TkqRmaw4Gv3vKz17NDWiI6907FqdI5W
p6zQqyGegdyHFJ9IRvdGCxvNyK1m+0dJ9dTnfG/vmIxikNl9HaX1tOXXUzIYaUmj
1Uy8eGPbtkUnLyPO8CEvsT5WyK51y15RiIcGH0ideJDNUWljNNlK+FVQhZE75aqh
or0itJuOWow2adL8DPEDRWQtOL+ZiTrs/vDECYzdQ7K/8PCLHe4aTajw+5k/266Q
iJ30zMU2ulxRSlw3K2R6XoQWNSzioZR7G11gJ6ZG6ebV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:04 2024 by rpki-client on console-ams.rpki-client.org