Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Wcs22qTZELgu98z5yTGQwKc6XkM.roa
File: Wcs22qTZELgu98z5yTGQwKc6XkM.roa (raw, json)
Hash identifier: fMZ9NUw1OSK4ozHlH+x6NgDxWOem2YEJAqPN9lzTLoE=
Subject key identifier: 59:CB:36:DA:A4:D9:10:B8:2E:F7:CC:F9:C9:31:90:C0:A7:3A:5E:43
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01905115FF4E1A4ECE6C325E44770B2B375E
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Wcs22qTZELgu98z5yTGQwKc6XkM.roa
Signing time: Tue 25 Jun 2024 20:28:34 +0000
ROA not before: Tue 25 Jun 2024 20:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51032
IP address blocks: 31.128.128.0/19 maxlen: 24
31.130.0.0/19 maxlen: 24
31.130.12.0/22 maxlen: 22
31.130.16.0/20 maxlen: 20
31.130.31.192/29 maxlen: 29
62.122.88.0/21 maxlen: 24
85.159.224.0/24 maxlen: 24
85.159.227.0/24 maxlen: 24
89.23.128.0/19 maxlen: 19
89.23.128.0/21 maxlen: 24
89.23.144.0/20 maxlen: 24
89.23.146.0/24 maxlen: 24
89.23.147.0/24 maxlen: 24
89.23.160.0/19 maxlen: 19
89.23.168.0/21 maxlen: 21
89.23.176.0/21 maxlen: 21
91.123.80.0/20 maxlen: 20
91.202.204.0/22 maxlen: 22
93.157.160.0/21 maxlen: 21
93.157.162.0/24 maxlen: 24
93.157.163.0/24 maxlen: 24
178.212.80.0/21 maxlen: 24
178.216.176.0/21 maxlen: 21
2a13:2c80::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 07:32:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:51:15:ff:4e:1a:4e:ce:6c:32:5e:44:77:0b:2b:37:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 25 20:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59cb36daa4d910b82ef7ccf9c93190c0a73a5e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:36:de:9f:fd:7f:20:fa:67:6c:bb:27:95:
c0:e4:59:3f:46:29:d6:1f:92:b8:94:08:d1:98:da:
34:43:54:31:05:39:33:61:3c:df:97:68:8b:7a:25:
ad:0c:cc:6f:1e:2e:a3:3c:28:6c:ef:dc:da:06:b9:
62:11:61:2e:19:32:d5:c3:5e:1e:02:10:e6:14:67:
47:24:51:5d:b8:1a:01:a0:9a:51:4f:ec:7e:21:df:
a3:f5:0f:1c:59:0e:b7:ac:0c:96:a0:35:9b:31:83:
eb:48:f8:55:64:3c:ab:87:5f:3b:12:1c:44:46:56:
8d:4e:71:a4:cc:98:6f:bd:f2:84:4b:c5:9e:0a:60:
53:40:2b:bb:9e:58:66:0e:a6:d9:69:04:93:af:e3:
2a:67:ae:3d:89:b0:51:81:32:37:7b:52:5d:be:43:
f8:40:81:4f:f0:10:14:ce:43:e4:a9:bb:23:87:6f:
21:cf:1f:e4:79:2d:b8:49:1f:0e:5a:e5:9f:d3:88:
3c:a6:e3:00:7d:98:ff:13:6e:f1:4b:4b:0d:7b:aa:
86:4f:54:69:0c:a3:24:0f:fe:b9:75:6f:40:83:cf:
d2:dd:ca:6a:24:6a:a6:6d:24:b3:85:7b:c6:a9:9c:
ee:aa:7b:eb:28:dc:2e:08:6d:9e:74:aa:08:81:55:
ab:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:CB:36:DA:A4:D9:10:B8:2E:F7:CC:F9:C9:31:90:C0:A7:3A:5E:43
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/Wcs22qTZELgu98z5yTGQwKc6XkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.128.128.0/19
31.130.0.0/19
62.122.88.0/21
85.159.224.0/24
85.159.227.0/24
89.23.128.0/18
91.123.80.0/20
91.202.204.0/22
93.157.160.0/21
178.212.80.0/21
178.216.176.0/21
IPv6:
2a13:2c80::/29
Signature Algorithm: sha256WithRSAEncryption
41:a9:e7:e7:78:f5:6c:5a:c0:d4:14:a4:5e:f5:54:e1:6c:d5:
39:3e:73:d4:cf:51:97:63:4e:8d:cc:5b:d5:0e:a4:a6:ce:8d:
88:b6:1e:27:ce:8a:85:65:3e:8c:ae:c7:39:3f:f3:5f:1c:83:
12:37:fe:52:fc:29:71:11:0f:ed:c7:61:2e:df:3d:ec:2f:e0:
93:54:b7:ae:0d:9e:15:71:7c:1f:10:2f:c3:63:f1:d1:1a:c1:
0f:13:22:cf:b6:93:e1:3f:a8:70:6f:4c:9f:34:77:f8:83:80:
ec:5e:9a:f6:5f:22:39:b2:a9:9f:8e:ba:02:e7:be:3a:ff:3c:
02:ff:88:ea:ea:74:7b:ba:64:fe:88:3f:ff:8f:54:13:60:b4:
be:10:ba:d2:4c:ae:78:a4:8c:9c:f0:5d:6d:f2:3a:ca:24:70:
77:b9:0a:f4:fc:19:58:3a:01:b3:84:1b:f6:1f:ae:91:ea:86:
1d:79:a7:38:d7:19:4d:c4:0a:9c:04:ab:e5:a6:27:7a:11:27:
cc:99:3e:c8:24:8a:78:33:6f:3e:42:70:fb:7d:69:91:07:e0:
b9:b3:23:16:48:97:39:81:3e:af:67:77:8e:92:0b:88:8b:05:
b5:2f:1b:16:91:ef:50:6d:08:eb:b6:e7:a8:47:10:91:b3:77:
b8:34:8c:6a
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAZBRFf9OGk7ObDJeRHcLKzdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1
NDEyNTUwHhcNMjQwNjI1MjAyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OWNiMzZkYWE0ZDkxMGI4MmVmN2NjZjljOTMxOTBjMGE3M2E1ZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy423p/9fyD6Z2y7J5XA5Fk/RinW
H5K4lAjRmNo0Q1QxBTkzYTzfl2iLeiWtDMxvHi6jPChs79zaBrliEWEuGTLVw14e
AhDmFGdHJFFduBoBoJpRT+x+Id+j9Q8cWQ63rAyWoDWbMYPrSPhVZDyrh187EhxE
RlaNTnGkzJhvvfKES8WeCmBTQCu7nlhmDqbZaQSTr+MqZ649ibBRgTI3e1JdvkP4
QIFP8BAUzkPkqbsjh28hzx/keS24SR8OWuWf04g8puMAfZj/E27xS0sNe6qGT1Rp
DKMkD/65dW9Ag8/S3cpqJGqmbSSzhXvGqZzuqnvrKNwuCG2edKoIgVWrcQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFFnLNtqk2RC4LvfM+ckxkMCnOl5DMB8GA1UdIwQY
MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt
ZGY3OTNhOTQwYmFiLzEvV2NzMjJxVFpFTGd1OTh6NXlUR1F3S2M2WGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi
LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBIBAIAATBCAwQFH4CAAwQF
H4IAAwQDPnpYAwQAVZ/gAwQAVZ/jAwQGWReAAwQEW3tQAwQCW8rMAwQDXZ2gAwQD
stRQAwQDstiwMA0EAgACMAcDBQMqEyyAMA0GCSqGSIb3DQEBCwUAA4IBAQBBqefn
ePVsWsDUFKRe9VThbNU5PnPUz1GXY06NzFvVDqSmzo2Ith4nzoqFZT6Mrsc5P/Nf
HIMSN/5S/ClxEQ/tx2Eu3z3sL+CTVLeuDZ4VcXwfEC/DY/HRGsEPEyLPtpPhP6hw
b0yfNHf4g4DsXpr2XyI5sqmfjroC5746/zwC/4jq6nR7umT+iD//j1QTYLS+ELrS
TK54pIyc8F1t8jrKJHB3uQr0/BlYOgGzhBv2H66R6oYdeac41xlNxAqcBKvlpid6
ESfMmT7IJIp4M28+QnD7fWmRB+C5syMWSJc5gT6vZ3eOkguIiwW1LxsWke9QbQjr
tueoRxCRs3e4NIxq
Generated at Fri Jul 5 09:04:46 2024 by rpki-client on console-ams.rpki-client.org