Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/wpNSi2nj0iSPZumPr4k_eWw9BpA.roa
File: wpNSi2nj0iSPZumPr4k_eWw9BpA.roa (raw, json)
Hash identifier: 7mmF6RcEfE7UmnrXmecXbEqCLbUxMmT6RnAOrL0br1I=
Subject key identifier: C2:93:52:8B:69:E3:D2:24:8F:66:E9:8F:AF:89:3F:79:6C:3D:06:90
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 01894541419369001CE3875B2440E16DA7D1
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/wpNSi2nj0iSPZumPr4k_eWw9BpA.roa
Signing time: Tue 11 Jul 2023 14:00:51 +0000
ROA not before: Tue 11 Jul 2023 14:00:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204666
IP address blocks: 5.59.102.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:45:41:41:93:69:00:1c:e3:87:5b:24:40:e1:6d:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jul 11 14:00:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c293528b69e3d2248f66e98faf893f796c3d0690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:88:77:41:2c:cc:33:e7:1a:0d:81:2a:e6:f5:
3c:80:fa:ab:60:2e:a0:4f:42:84:14:20:5a:66:d3:
b2:1b:65:65:a6:69:cd:ef:a6:09:0c:12:02:25:dd:
06:e9:88:e6:e5:57:23:2b:11:49:f4:9b:9e:83:3f:
79:c7:77:53:cf:89:93:8b:15:ea:f5:45:2f:58:75:
fa:79:80:d3:07:24:04:e5:44:e6:90:6e:8a:ce:b1:
98:f3:b6:db:17:d1:90:db:a8:2b:23:77:09:bd:2c:
42:7e:fb:1c:2f:3a:71:79:cf:5d:ec:64:2d:43:bf:
21:28:57:25:c2:73:82:c9:31:64:c8:b2:09:07:af:
4a:d4:a8:c3:17:0d:56:bb:58:4b:7e:cf:f4:20:96:
4f:b8:84:b3:a3:7b:d7:fa:33:ce:bf:df:98:71:b9:
c3:e7:bd:e5:48:f9:70:4c:30:30:33:08:3f:69:c6:
7e:67:ed:0d:c3:e7:02:ed:e3:1d:7f:15:84:75:de:
68:ee:77:30:78:b9:ac:99:ea:1f:cc:d7:c2:48:bf:
4d:10:7c:1f:72:a6:c0:65:6f:f1:81:56:f8:45:1e:
a3:2a:06:00:0a:f8:94:f3:68:3f:c0:d6:93:6f:f1:
1f:54:c3:f4:6d:94:61:d2:e5:b7:ab:60:d5:f7:8c:
4d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:93:52:8B:69:E3:D2:24:8F:66:E9:8F:AF:89:3F:79:6C:3D:06:90
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/wpNSi2nj0iSPZumPr4k_eWw9BpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.102.0/23
Signature Algorithm: sha256WithRSAEncryption
60:a6:67:b0:5b:bb:cc:86:4c:5c:34:90:72:26:c0:1c:40:c3:
38:23:70:c4:30:71:0f:9d:61:16:70:eb:ec:c8:29:c8:a5:43:
9b:9a:b4:ec:6e:08:56:16:25:ca:ab:66:df:be:ef:c3:db:39:
ca:1e:82:5d:6d:bb:86:b1:92:93:31:a6:83:a5:20:ea:e8:a5:
bf:22:6e:c9:ba:2e:ef:74:44:ee:87:73:3e:fd:e4:56:46:ee:
33:39:37:85:80:3e:51:c3:12:e4:6b:f6:2f:7d:27:8a:bb:e3:
e6:69:3b:38:c7:fb:1e:0c:f3:6f:c1:46:a6:1a:4e:72:b4:14:
69:25:d8:34:a1:79:db:9f:e1:9f:57:1c:d0:b0:bb:21:12:d0:
f7:0d:c3:fe:b1:e7:4a:b1:24:28:4f:f2:d0:01:e6:0f:ed:e1:
b0:20:24:3d:1c:bb:ab:ae:46:dc:93:bc:b2:f2:3f:15:a8:1e:
22:89:19:7c:fa:36:ea:70:cd:c9:a2:e0:85:84:71:66:bd:28:
58:d9:23:1e:32:4b:b0:7a:e9:90:e1:25:a6:30:6a:5f:8d:f8:
fd:16:b7:a7:23:45:a6:f7:ca:4c:49:a6:eb:70:8f:8b:67:eb:
da:d4:6d:88:fa:0e:9f:11:77:95:aa:87:9f:30:04:6e:b5:72:
17:f2:c8:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlFQUGTaQAc44dbJEDhbafRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjMwNzExMTQwMDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjkzNTI4YjY5ZTNkMjI0OGY2NmU5OGZhZjg5M2Y3OTZjM2QwNjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIh3QSzMM+caDYEq5vU8gPqrYC6g
T0KEFCBaZtOyG2VlpmnN76YJDBICJd0G6Yjm5VcjKxFJ9Juegz95x3dTz4mTixXq
9UUvWHX6eYDTByQE5UTmkG6KzrGY87bbF9GQ26grI3cJvSxCfvscLzpxec9d7GQt
Q78hKFclwnOCyTFkyLIJB69K1KjDFw1Wu1hLfs/0IJZPuISzo3vX+jPOv9+YcbnD
573lSPlwTDAwMwg/acZ+Z+0Nw+cC7eMdfxWEdd5o7ncweLmsmeofzNfCSL9NEHwf
cqbAZW/xgVb4RR6jKgYACviU82g/wNaTb/EfVMP0bZRh0uW3q2DV94xN8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMKTUotp49Ikj2bpj6+JP3lsPQaQMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvd3BOU2kybmowaVNQWnVtUHI0a19lV3c5QnBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBBTtmMA0G
CSqGSIb3DQEBCwUAA4IBAQBgpmewW7vMhkxcNJByJsAcQMM4I3DEMHEPnWEWcOvs
yCnIpUObmrTsbghWFiXKq2bfvu/D2znKHoJdbbuGsZKTMaaDpSDq6KW/Im7Jui7v
dETuh3M+/eRWRu4zOTeFgD5RwxLka/YvfSeKu+PmaTs4x/seDPNvwUamGk5ytBRp
Jdg0oXnbn+GfVxzQsLshEtD3DcP+sedKsSQoT/LQAeYP7eGwICQ9HLurrkbck7yy
8j8VqB4iiRl8+jbqcM3JouCFhHFmvShY2SMeMkuweumQ4SWmMGpfjfj9FrenI0Wm
98pMSabrcI+LZ+va1G2I+g6fEXeVqoefMARutXIX8si6
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:37 2024 by rpki-client on console-fra.rpki-client.org