Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wuyQWcKXUtHqtTs2mUwFdDfelqE.roa
File: wuyQWcKXUtHqtTs2mUwFdDfelqE.roa (raw, json)
Hash identifier: 5YFseSueJjA99ULP11twH/37oIfghkcCg5j+qPMCoaE=
Subject key identifier: C2:EC:90:59:C2:97:52:D1:EA:B5:3B:36:99:4C:05:74:37:DE:96:A1
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019007F9E049A7F4B001EBE3650A5C57C348
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wuyQWcKXUtHqtTs2mUwFdDfelqE.roa
Signing time: Tue 11 Jun 2024 15:45:34 +0000
ROA not before: Tue 11 Jun 2024 15:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214790
IP address blocks: 5.188.51.0/24 maxlen: 24
5.188.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 22 Jul 2024 12:44:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:f9:e0:49:a7:f4:b0:01:eb:e3:65:0a:5c:57:c3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jun 11 15:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2ec9059c29752d1eab53b36994c057437de96a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:8a:83:28:6b:6b:3b:ac:2a:f2:de:fa:5e:
28:07:b9:58:b4:f5:7f:53:62:93:55:ee:de:ea:15:
c9:3e:bc:a8:2f:8e:13:cb:ee:4a:e7:54:1e:c9:53:
7f:94:db:23:cd:21:93:23:45:ec:79:e4:de:88:35:
1e:32:e9:d3:f5:98:b5:73:09:a7:51:ab:ce:ec:38:
d3:a0:e2:05:57:e5:b7:d0:8e:04:1a:51:65:a2:70:
46:51:85:81:97:25:dc:05:3b:cf:64:c3:86:fc:79:
15:d5:08:6e:ad:ab:17:c5:06:0d:a9:72:7e:97:fb:
e8:3b:72:3b:aa:88:a4:e6:72:6c:df:2b:9d:a5:84:
61:e3:4a:d0:3c:f6:a6:8e:1c:d4:eb:0b:d4:c9:6d:
60:42:73:3b:f6:1d:d0:e9:d5:cd:0d:e7:7f:4f:62:
cc:62:fb:e8:04:6c:3d:0c:80:ac:57:42:86:69:9c:
32:17:d5:de:e9:4d:43:62:c8:7a:36:50:f3:73:64:
b1:58:ae:90:70:8d:c1:cb:c0:94:95:05:66:0e:cb:
e3:8c:a1:4a:ea:81:60:d3:1f:74:83:3d:35:e0:d3:
7e:f8:f7:07:32:9c:b9:98:4c:b0:76:a8:69:a2:ff:
c0:cb:d9:55:2f:1a:50:92:bd:61:fc:59:b5:06:fc:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EC:90:59:C2:97:52:D1:EA:B5:3B:36:99:4C:05:74:37:DE:96:A1
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/wuyQWcKXUtHqtTs2mUwFdDfelqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.188.51.0/24
5.188.203.0/24
Signature Algorithm: sha256WithRSAEncryption
11:83:51:31:cb:dd:56:2c:da:12:ec:63:52:45:57:eb:18:f2:
82:36:5e:7c:cf:f6:22:39:af:73:39:0c:b8:2f:20:54:7b:f8:
6e:14:7c:c3:e8:97:6f:c2:42:0c:ad:86:28:3a:0e:f9:b9:f1:
cb:22:e5:35:7b:1f:3e:15:c2:93:c1:0b:72:b7:d0:a9:51:d6:
03:6f:1a:24:d6:90:14:ca:01:92:f6:54:c9:f3:23:a1:67:f0:
d1:94:b7:62:c6:38:c1:c4:2c:27:86:88:b0:0c:5b:0f:10:a3:
17:12:53:ce:6e:cf:78:1e:cd:26:44:f1:3e:d1:81:a6:b6:c2:
d6:a5:b2:54:03:17:8a:ff:6f:1f:8f:a1:a2:80:6a:da:0c:99:
f9:2d:3e:cb:4b:23:89:08:a9:2f:3e:7b:b3:08:70:65:35:47:
23:4a:85:12:f3:45:33:84:26:7e:d2:f8:f5:09:f0:a5:32:a7:
80:2f:1c:82:5c:bc:72:4a:2d:07:05:6b:53:07:7b:22:a3:fa:
e6:6f:ed:1b:44:73:1a:7a:97:48:1a:82:a6:58:5d:24:98:69:
6c:63:ce:87:0f:62:2e:2d:41:e2:dd:5d:9f:2d:38:44:ed:87:
40:04:0e:84:fa:3b:db:35:d6:2c:61:df:f9:e1:e3:ce:53:fa:
9b:bc:dd:e8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAH+eBJp/SwAevjZQpcV8NIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwNjExMTU0NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmVjOTA1OWMyOTc1MmQxZWFiNTNiMzY5OTRjMDU3NDM3ZGU5NmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudmKgyhrazusKvLe+l4oB7lYtPV/
U2KTVe7e6hXJPryoL44Ty+5K51QeyVN/lNsjzSGTI0XseeTeiDUeMunT9Zi1cwmn
UavO7DjToOIFV+W30I4EGlFlonBGUYWBlyXcBTvPZMOG/HkV1QhurasXxQYNqXJ+
l/voO3I7qoik5nJs3yudpYRh40rQPPamjhzU6wvUyW1gQnM79h3Q6dXNDed/T2LM
YvvoBGw9DICsV0KGaZwyF9Xe6U1DYsh6NlDzc2SxWK6QcI3By8CUlQVmDsvjjKFK
6oFg0x90gz014NN++PcHMpy5mEywdqhpov/Ay9lVLxpQkr1h/Fm1BvwybwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMLskFnCl1LR6rU7NplMBXQ33pahMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvd3V5UVdjS1hVdEhxdFRzMm1Vd0ZkRGZlbHFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbwzAwQA
BbzLMA0GCSqGSIb3DQEBCwUAA4IBAQARg1Exy91WLNoS7GNSRVfrGPKCNl58z/Yi
Oa9zOQy4LyBUe/huFHzD6JdvwkIMrYYoOg75ufHLIuU1ex8+FcKTwQtyt9CpUdYD
bxok1pAUygGS9lTJ8yOhZ/DRlLdixjjBxCwnhoiwDFsPEKMXElPObs94Hs0mRPE+
0YGmtsLWpbJUAxeK/28fj6GigGraDJn5LT7LSyOJCKkvPnuzCHBlNUcjSoUS80Uz
hCZ+0vj1CfClMqeALxyCXLxySi0HBWtTB3sio/rmb+0bRHMaepdIGoKmWF0kmGls
Y86HD2IuLUHi3V2fLThE7YdABA6E+jvbNdYsYd/54ePOU/qbvN3o
-----END CERTIFICATE-----
Generated at Mon Jul 22 16:02:46 2024 by rpki-client on console-fra.rpki-client.org