Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/WX-uxvHOV7cD87QJgzwirSm6BdY.roa
File: WX-uxvHOV7cD87QJgzwirSm6BdY.roa (raw, json)
Hash identifier: zQsY2P1S7mWz1FRmAUdxRFwq2rS8d+Upr3Tpcc2LVr4=
Subject key identifier: 59:7F:AE:C6:F1:CE:57:B7:03:F3:B4:09:83:3C:22:AD:29:BA:05:D6
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 018BD4FE9A2E45D90713E08FEDCF1ADE8458
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/WX-uxvHOV7cD87QJgzwirSm6BdY.roa
Signing time: Wed 15 Nov 2023 21:58:57 +0000
ROA not before: Wed 15 Nov 2023 21:58:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44901
IP address blocks: 88.80.136.0/24 maxlen: 24
77.246.220.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d4:fe:9a:2e:45:d9:07:13:e0:8f:ed:cf:1a:de:84:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Nov 15 21:58:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=597faec6f1ce57b703f3b409833c22ad29ba05d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1d:0a:b8:59:a9:67:8c:da:c3:37:7e:3b:0f:
73:11:64:ea:ca:44:25:83:dd:c4:79:4d:5a:5b:2d:
be:8e:d9:50:92:3b:02:b6:da:0c:26:f3:1d:f2:d7:
f1:23:6a:f7:25:96:84:6c:38:bb:37:d0:4d:e4:a7:
7b:85:8c:e6:a3:52:47:27:91:cd:35:19:33:90:78:
9b:1c:e1:21:d1:23:6e:76:e9:7e:85:ad:53:ed:a5:
1b:2c:6d:a2:87:1c:6c:8d:ec:86:5c:ea:ad:97:21:
d4:e6:9d:03:10:55:a7:3c:49:d5:92:1a:04:13:0b:
36:73:b6:68:85:e1:34:c9:de:81:12:ec:2f:d6:63:
c4:14:43:e4:b8:40:60:6a:3d:f6:07:73:82:c7:6f:
8d:8c:ad:da:6c:1f:cc:70:bd:60:e7:52:71:71:4b:
bc:34:d9:23:65:cb:85:60:08:26:ec:37:30:f5:47:
71:49:c7:f3:18:68:8c:05:d0:30:d2:b6:fc:99:56:
a9:07:d9:67:e2:63:24:be:0f:8d:90:db:ae:ee:d4:
76:4d:74:ba:9e:b5:51:9f:dd:51:ec:0d:0c:5e:1b:
21:42:80:9a:38:f5:00:47:07:0d:56:df:92:e9:7c:
21:07:a4:09:fa:ca:01:8c:77:af:08:4f:c7:63:0b:
db:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7F:AE:C6:F1:CE:57:B7:03:F3:B4:09:83:3C:22:AD:29:BA:05:D6
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/WX-uxvHOV7cD87QJgzwirSm6BdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
88.80.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:23:02:23:1e:48:ca:49:aa:0d:75:77:4d:d9:0f:25:c3:7d:
05:8b:96:6d:ea:95:fc:45:eb:ac:96:35:33:9c:44:b1:11:ab:
e7:0c:ad:11:e9:12:41:ad:7e:88:49:fd:5d:bd:bf:f6:ac:69:
c4:ff:b9:09:d5:99:ae:cb:11:85:d0:43:5c:41:95:45:7b:7c:
51:1c:8c:5e:ed:a5:47:52:ac:a7:78:c5:54:b5:76:c2:b0:03:
79:cb:b1:19:eb:c7:33:f3:6b:a0:68:9c:aa:78:28:87:0c:e0:
7c:1d:51:3c:10:e1:19:5d:3f:1d:5e:0d:b9:95:2c:b5:65:40:
65:61:16:7b:0e:a7:6a:64:1a:57:91:7b:43:a9:0d:0e:13:47:
1f:8e:19:fb:4a:e6:70:23:03:e4:8a:45:00:e4:3b:83:8c:23:
25:de:4a:c2:9b:06:3d:9d:e1:42:f4:d8:05:19:25:57:d0:f6:
4a:83:4a:97:aa:01:4f:4e:af:bb:53:6e:46:44:e0:ac:98:8d:
ac:5d:61:cf:92:8a:82:26:da:3f:56:3c:61:18:ab:b9:42:07:
d0:be:9a:e5:6e:92:d4:16:e5:17:09:0c:df:68:35:2d:22:d4:
d6:4c:2f:52:2f:81:8f:d0:e6:88:b5:0e:70:aa:37:10:a9:f2:
2e:15:56:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYvU/pouRdkHE+CP7c8a3oRYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjMxMTE1MjE1ODU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OTdmYWVjNmYxY2U1N2I3MDNmM2I0MDk4MzNjMjJhZDI5YmEwNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApx0KuFmpZ4zawzd+Ow9zEWTqykQl
g93EeU1aWy2+jtlQkjsCttoMJvMd8tfxI2r3JZaEbDi7N9BN5Kd7hYzmo1JHJ5HN
NRkzkHibHOEh0SNudul+ha1T7aUbLG2ihxxsjeyGXOqtlyHU5p0DEFWnPEnVkhoE
Ews2c7ZoheE0yd6BEuwv1mPEFEPkuEBgaj32B3OCx2+NjK3abB/McL1g51JxcUu8
NNkjZcuFYAgm7Dcw9UdxScfzGGiMBdAw0rb8mVapB9ln4mMkvg+NkNuu7tR2TXS6
nrVRn91R7A0MXhshQoCaOPUARwcNVt+S6XwhB6QJ+soBjHevCE/HYwvb7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFl/rsbxzle3A/O0CYM8Iq0pugXWMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvV1gtdXh2SE9WN2NEODdRSmd6d2lyU202QmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATfbcAwQA
WFCIMA0GCSqGSIb3DQEBCwUAA4IBAQAqIwIjHkjKSaoNdXdN2Q8lw30Fi5Zt6pX8
ReusljUznESxEavnDK0R6RJBrX6ISf1dvb/2rGnE/7kJ1ZmuyxGF0ENcQZVFe3xR
HIxe7aVHUqyneMVUtXbCsAN5y7EZ68cz82ugaJyqeCiHDOB8HVE8EOEZXT8dXg25
lSy1ZUBlYRZ7DqdqZBpXkXtDqQ0OE0cfjhn7SuZwIwPkikUA5DuDjCMl3krCmwY9
neFC9NgFGSVX0PZKg0qXqgFPTq+7U25GROCsmI2sXWHPkoqCJto/VjxhGKu5QgfQ
vprlbpLUFuUXCQzfaDUtItTWTC9SL4GP0OaItQ5wqjcQqfIuFVYL
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:46 2024 by rpki-client on console-ams.rpki-client.org