Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/waaxC5vmlRBbOKxWfbExuCGoeFM.roa
File: waaxC5vmlRBbOKxWfbExuCGoeFM.roa (raw, json)
Hash identifier: uGtqI2CA4ixrjWZzpFWQ7Uz+5mOh7zgZf1KD6fkK8DU=
Subject key identifier: C1:A6:B1:0B:9B:E6:95:10:5B:38:AC:56:7D:B1:31:B8:21:A8:78:53
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01905FCA80C74857B82F9DEA05D8A5112582
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/waaxC5vmlRBbOKxWfbExuCGoeFM.roa
Signing time: Fri 28 Jun 2024 17:00:25 +0000
ROA not before: Fri 28 Jun 2024 17:00:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215211
IP address blocks: 31.58.255.0/24 maxlen: 24
31.59.0.0/16 maxlen: 16
46.224.0.0/15 maxlen: 15
91.98.0.0/16 maxlen: 16
151.238.0.0/15 maxlen: 15
2a14:6e40::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 04 Jul 2024 07:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5f:ca:80:c7:48:57:b8:2f:9d:ea:05:d8:a5:11:25:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jun 28 17:00:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c1a6b10b9be695105b38ac567db131b821a87853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c9:2b:fb:e1:3b:25:8c:ec:e6:8c:19:36:ec:
da:4f:c0:54:42:e3:1f:51:4d:8e:e5:4d:91:bc:ad:
d4:ab:e6:7c:aa:66:dc:07:44:c7:d8:5f:ad:16:26:
81:4c:d5:56:d6:6e:a9:05:90:9b:96:3f:ee:0f:89:
4f:33:b1:fe:63:80:e8:3b:73:24:63:a9:07:d0:2a:
2d:f1:ba:c0:2b:58:14:ad:99:04:07:c1:c1:2e:3c:
73:66:65:d3:9e:9d:ab:d6:59:0f:07:ef:14:48:7d:
88:be:d6:6e:cd:61:e8:a7:57:29:be:66:20:d8:5d:
0e:30:55:c2:2f:f0:d2:86:b7:82:cb:25:ad:56:b7:
ef:3f:8e:d2:7d:bb:17:40:3c:75:9c:4f:de:11:71:
4f:80:f3:4a:55:a7:9b:a3:23:39:39:b7:0e:f9:37:
2a:73:6e:19:4c:c6:d5:ef:3a:fd:3d:e5:8c:5d:24:
a0:c5:85:98:5d:ef:97:fa:5a:80:da:07:c0:b3:6e:
8a:18:4b:cc:76:c5:6a:6e:5c:86:9a:79:5c:e0:3d:
d7:a4:d7:b5:93:2b:bc:68:a7:04:ba:19:5f:6c:d2:
6e:e6:e3:ef:c1:ec:b6:d5:78:4a:d6:7a:71:2a:4e:
a7:7f:87:4d:75:b8:a4:6a:94:82:dd:bf:77:41:9c:
b2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A6:B1:0B:9B:E6:95:10:5B:38:AC:56:7D:B1:31:B8:21:A8:78:53
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/waaxC5vmlRBbOKxWfbExuCGoeFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.58.255.0-31.59.255.255
46.224.0.0/15
91.98.0.0/16
151.238.0.0/15
IPv6:
2a14:6e40::/32
Signature Algorithm: sha256WithRSAEncryption
8d:c7:d6:ce:fb:52:68:b0:5e:6b:b7:e7:af:cf:cd:46:fc:d0:
ca:88:3b:ec:d8:1d:77:27:96:6b:c9:c2:d9:36:3a:94:19:75:
e1:92:76:cf:3d:c3:62:0e:89:1b:d1:95:17:73:4c:10:b8:14:
67:19:0d:d4:c0:51:99:4d:ae:83:a0:33:ad:59:bf:e9:97:63:
45:be:4b:e3:9e:22:93:98:09:94:df:95:60:6a:90:48:9f:de:
e3:07:4f:84:d0:58:77:63:21:33:97:97:8e:9a:82:1e:73:31:
db:1d:ce:02:6f:77:5e:73:1d:98:fd:63:b6:13:be:b7:b2:86:
71:9a:dd:e5:c5:5e:f4:f7:6d:c9:00:3b:8a:67:0c:9c:f0:e4:
a2:d2:a4:00:41:7e:0d:53:27:13:c9:89:5c:e3:d0:1e:f6:82:
2e:5f:2e:19:2a:e0:bc:46:c3:f7:1a:f7:0f:2a:1c:9e:9d:e3:
71:14:5a:a8:c2:99:2b:65:20:e6:23:6a:b9:5e:e9:7a:6e:d3:
ed:2c:f3:94:46:cf:1f:fc:5b:f3:53:a3:d9:8c:d0:e3:49:7c:
f3:32:0d:b6:04:2c:26:44:fe:2b:80:f8:c4:c0:3d:a9:71:3f:
56:eb:cd:da:1a:5c:61:3f:f3:21:12:10:2a:1c:82:5d:3e:0d:
6b:26:4e:03
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAZBfyoDHSFe4L53qBdilESWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2
YjI1YzUwHhcNMjQwNjI4MTcwMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWE2YjEwYjliZTY5NTEwNWIzOGFjNTY3ZGIxMzFiODIxYTg3ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMkr++E7JYzs5owZNuzaT8BUQuMf
UU2O5U2RvK3Uq+Z8qmbcB0TH2F+tFiaBTNVW1m6pBZCblj/uD4lPM7H+Y4DoO3Mk
Y6kH0Cot8brAK1gUrZkEB8HBLjxzZmXTnp2r1lkPB+8USH2IvtZuzWHop1cpvmYg
2F0OMFXCL/DShreCyyWtVrfvP47SfbsXQDx1nE/eEXFPgPNKVaeboyM5ObcO+Tcq
c24ZTMbV7zr9PeWMXSSgxYWYXe+X+lqA2gfAs26KGEvMdsVqblyGmnlc4D3XpNe1
kyu8aKcEuhlfbNJu5uPvwey21XhK1npxKk6nf4dNdbikapSC3b93QZyyAQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFMGmsQub5pUQWzisVn2xMbghqHhTMB8GA1UdIwQY
MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt
YjgxMWNmY2I5ZmQ1LzEvd2FheEM1dm1sUkJiT0t4V2ZiRXh1Q0dvZUZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1
LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAiBAIAATAcMAsDBAAfOv8D
AwIfOAMDAS7gAwMAW2IDAwGX7jANBAIAAjAHAwUAKhRuQDANBgkqhkiG9w0BAQsF
AAOCAQEAjcfWzvtSaLBea7fnr8/NRvzQyog77NgddyeWa8nC2TY6lBl14ZJ2zz3D
Yg6JG9GVF3NMELgUZxkN1MBRmU2ug6AzrVm/6ZdjRb5L454ik5gJlN+VYGqQSJ/e
4wdPhNBYd2MhM5eXjpqCHnMx2x3OAm93XnMdmP1jthO+t7KGcZrd5cVe9PdtyQA7
imcMnPDkotKkAEF+DVMnE8mJXOPQHvaCLl8uGSrgvEbD9xr3Dyocnp3jcRRaqMKZ
K2Ug5iNquV7pem7T7SzzlEbPH/xb81Oj2YzQ40l88zINtgQsJkT+K4D4xMA9qXE/
VuvN2hpcYT/zIRIQKhyCXT4NayZOAw==
-----END CERTIFICATE-----
Generated at Thu Jul 4 08:29:20 2024 by rpki-client on console-fra.rpki-client.org