Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/WUMNRu-bz-W0aR6-RxyAhfUArjE.roa
File: WUMNRu-bz-W0aR6-RxyAhfUArjE.roa (raw, json)
Hash identifier: txO1RdZgkogtj6rwYZ8k95W5RcXsOGRUEl/lBK5Vzxg=
Subject key identifier: 59:43:0D:46:EF:9B:CF:E5:B4:69:1E:BE:47:1C:80:85:F5:00:AE:31
Certificate issuer: /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial: 018DC62798433E4FD0710CC54014EF5D0206
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/WUMNRu-bz-W0aR6-RxyAhfUArjE.roa
Signing time: Tue 20 Feb 2024 10:55:00 +0000
ROA not before: Tue 20 Feb 2024 10:55:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62442
IP address blocks: 78.157.32.0/19 maxlen: 19
78.157.32.0/24 maxlen: 24
78.157.34.0/24 maxlen: 24
78.157.35.0/24 maxlen: 24
78.157.36.0/24 maxlen: 24
78.157.37.0/24 maxlen: 24
78.157.38.0/24 maxlen: 24
78.157.39.0/24 maxlen: 24
78.157.40.0/24 maxlen: 24
78.157.41.0/24 maxlen: 24
78.157.42.0/24 maxlen: 24
78.157.43.0/24 maxlen: 24
78.157.44.0/24 maxlen: 24
78.157.45.0/24 maxlen: 24
78.157.46.0/24 maxlen: 24
78.157.47.0/24 maxlen: 24
78.157.48.0/21 maxlen: 21
78.157.48.0/24 maxlen: 24
78.157.49.0/24 maxlen: 24
78.157.50.0/24 maxlen: 24
78.157.51.0/24 maxlen: 24
78.157.52.0/24 maxlen: 24
78.157.53.0/24 maxlen: 24
78.157.54.0/24 maxlen: 24
78.157.55.0/24 maxlen: 24
78.157.56.0/21 maxlen: 21
78.157.56.0/24 maxlen: 24
78.157.57.0/24 maxlen: 24
78.157.58.0/24 maxlen: 24
78.157.59.0/24 maxlen: 24
78.157.60.0/24 maxlen: 24
78.157.61.0/24 maxlen: 24
78.157.62.0/24 maxlen: 24
78.157.63.0/24 maxlen: 24
89.221.84.0/22 maxlen: 22
89.221.88.0/21 maxlen: 21
2a10:8180::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 03 Apr 2024 10:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c6:27:98:43:3e:4f:d0:71:0c:c5:40:14:ef:5d:02:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Validity
Not Before: Feb 20 10:55:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59430d46ef9bcfe5b4691ebe471c8085f500ae31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5b:ef:be:7d:72:72:0c:6d:18:92:f4:07:f7:
a0:06:eb:b1:0f:9d:9a:0a:00:f9:0c:d5:a2:da:3a:
35:de:f8:53:ed:d6:28:73:ee:1e:15:cc:da:3f:1a:
7f:66:3b:31:20:00:57:28:2c:4e:66:16:fe:04:02:
e6:60:66:26:a3:d0:77:4d:d0:cb:25:46:03:71:f9:
01:7f:6a:df:30:4b:94:21:32:9b:43:e9:19:e7:4d:
c9:61:a6:3a:b1:25:33:f8:f2:69:49:fd:90:6a:84:
bf:5d:ae:fe:8f:fc:51:25:ad:36:86:b7:eb:36:18:
79:6d:d7:c1:bc:30:0d:35:79:97:81:67:2c:9e:c3:
e7:0a:f0:39:e7:21:94:13:04:44:18:ba:f9:ee:85:
08:6f:b0:81:9a:5a:78:3f:37:3a:ae:5d:e3:30:60:
57:3b:55:1f:d3:bf:71:09:70:be:68:c1:41:39:09:
ba:4c:86:be:3d:36:b3:7c:71:5b:6f:c7:26:e3:bf:
68:cb:fe:ef:a2:0c:34:e3:07:b2:ab:ca:41:44:67:
d9:15:25:c0:f1:a1:2a:b2:da:27:a5:d9:b6:d4:7f:
a3:2a:0a:d2:5d:ca:ba:6e:39:3b:d4:81:d1:67:af:
3b:85:d8:26:69:1e:da:54:ea:00:a7:94:fa:1a:80:
1c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:43:0D:46:EF:9B:CF:E5:B4:69:1E:BE:47:1C:80:85:F5:00:AE:31
X509v3 Authority Key Identifier:
keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/WUMNRu-bz-W0aR6-RxyAhfUArjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.157.32.0/19
89.221.84.0-89.221.95.255
IPv6:
2a10:8180::/29
Signature Algorithm: sha256WithRSAEncryption
2a:54:01:bc:c3:e7:86:5e:25:dc:b9:40:22:fd:79:c1:7b:5f:
f0:40:e1:c6:e2:ed:68:ab:c2:25:b8:e5:39:3b:76:d1:3e:16:
a6:9b:6c:b6:a6:ad:a1:26:84:d0:87:00:94:06:83:10:3a:f1:
aa:59:32:b0:90:8b:19:b4:58:2a:50:bf:7e:d9:1d:47:fc:54:
68:a1:3b:df:49:64:98:92:63:59:ca:95:60:12:49:5f:d4:c5:
63:9e:05:74:37:df:55:50:0a:aa:64:d3:d6:34:bc:b4:1f:86:
b8:a5:54:1a:c7:8c:af:5e:54:75:a5:a1:4d:5d:fe:00:bb:94:
2a:0e:e3:17:2a:30:a0:92:11:dd:4a:02:86:eb:a4:e4:e7:a1:
0b:75:a9:b0:c9:53:8a:c2:d6:08:ab:4f:29:98:93:e9:f9:1d:
90:89:e6:b0:1d:f8:6f:99:63:a9:77:90:51:dd:14:9e:40:ba:
64:33:75:24:79:ee:5d:7a:63:8e:f0:aa:29:a1:d3:b4:63:b2:
a9:be:75:5f:12:bd:9b:9f:27:cc:aa:b8:b4:bc:ef:c8:03:f1:
f3:8f:70:fd:0e:14:3f:ef:93:fa:84:60:ee:d9:ed:7e:e4:68:
72:96:d7:53:27:0c:1d:54:d2:77:8c:d6:99:b3:16:df:82:5b:
db:2e:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:07 2024 by rpki-client on console-fra.rpki-client.org