Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0AwJ08CidIk8t09mXLHpZaUoIaw.roa
File: 0AwJ08CidIk8t09mXLHpZaUoIaw.roa (raw, json)
Hash identifier: KTbWjin3HfcPO7BXihLzGJvhlMisO1iT1SYUovm1RzY=
Subject key identifier: D0:0C:09:D3:C0:A2:74:89:3C:B7:4F:66:5C:B1:E9:65:A5:28:21:AC
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0187233FCDF2ED85096D4D4AA0CA08ED3E51
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0AwJ08CidIk8t09mXLHpZaUoIaw.roa
Signing time: Mon 27 Mar 2023 13:26:36 +0000
ROA not before: Mon 27 Mar 2023 13:26:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 5.133.125.0/24 maxlen: 24
5.133.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Apr 2023 21:55:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:23:3f:cd:f2:ed:85:09:6d:4d:4a:a0:ca:08:ed:3e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 27 13:26:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d00c09d3c0a274893cb74f665cb1e965a52821ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:ae:14:d1:e0:1a:88:7a:52:df:1c:b9:19:
90:d2:2b:92:e4:c4:54:fc:7f:a9:33:26:0f:df:c4:
1e:7e:0b:09:2b:fb:b0:42:55:e9:a3:db:24:63:7b:
be:22:f7:63:4a:0b:9b:a3:64:6e:1b:8a:7b:57:f6:
9a:94:6f:51:b0:02:1e:6b:c7:32:28:d6:77:de:f0:
0e:6b:b7:3e:74:67:be:f9:8c:aa:4d:60:cd:0a:f0:
38:08:31:53:0c:37:3e:44:84:eb:36:ac:65:b4:a6:
6a:63:4d:d8:ae:be:d3:61:47:30:b6:fc:fa:eb:81:
83:c7:ae:51:98:59:c9:ef:00:23:3c:2e:20:7e:54:
e6:0f:6b:59:c2:3d:c6:fb:c7:ee:b6:07:3c:81:4f:
a0:a3:e2:63:53:2b:4b:dc:82:be:af:f7:31:20:05:
ea:99:85:85:73:06:b7:b7:00:b0:13:d5:d5:d3:63:
31:e8:ec:8d:12:1b:7e:f5:33:69:9f:6b:e8:60:b5:
dc:3d:35:68:ac:bf:ba:c2:f8:49:74:89:87:3d:37:
65:93:f3:dd:9d:b8:0c:30:ff:c3:1d:a4:16:c7:90:
1d:b4:15:9a:55:ad:ad:95:d8:a2:13:98:b0:c5:04:
7b:17:7f:39:ff:93:79:20:77:44:2c:14:9f:ac:2a:
65:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0C:09:D3:C0:A2:74:89:3C:B7:4F:66:5C:B1:E9:65:A5:28:21:AC
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/0AwJ08CidIk8t09mXLHpZaUoIaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.125.0-5.133.126.255
Signature Algorithm: sha256WithRSAEncryption
0e:2b:3b:e5:21:c6:8d:40:6b:81:40:54:a3:21:9f:67:bd:b6:
26:92:40:f0:8d:ed:d9:81:8c:40:fa:f6:50:ce:fc:e8:a0:9b:
32:53:75:02:04:c9:05:65:5a:1b:50:d4:34:b0:42:b9:1a:2d:
28:74:b5:8d:29:c1:21:c4:31:c3:63:d2:01:f4:e6:7e:3f:f4:
63:12:64:eb:b8:73:08:0e:f1:e7:1d:94:39:46:ef:14:09:92:
e1:f7:f6:09:c0:a3:08:bc:0a:20:60:8d:bc:ea:e2:ed:6e:51:
ba:24:98:35:4e:7c:c6:7a:d0:83:2a:71:21:89:cf:94:40:8b:
b6:f9:cb:23:1b:bf:42:15:f7:28:00:d4:2b:36:a1:6a:4d:7a:
71:cb:23:55:6d:84:d4:bc:e2:73:21:e9:7f:55:b9:4a:b5:82:
81:35:90:a0:f9:b2:b3:99:74:28:a6:65:fb:b8:f4:53:fc:6f:
95:cc:c3:73:5d:d8:8d:23:f6:0f:3a:0e:61:fd:b5:0e:96:6a:
37:24:36:9b:80:85:bb:c3:a4:08:bf:06:6e:60:f6:c2:26:ba:
4c:ae:11:f0:5b:1f:f2:48:0b:85:db:28:02:6e:fa:34:45:67:
22:b0:49:7a:9d:6d:c8:7f:11:35:8b:81:52:3c:e8:86:4c:22:
6d:71:14:3c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYcjP83y7YUJbU1KoMoI7T5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwMzI3MTMyNjM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDBjMDlkM2MwYTI3NDg5M2NiNzRmNjY1Y2IxZTk2NWE1MjgyMWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiq2uFNHgGoh6Ut8cuRmQ0iuS5MRU
/H+pMyYP38QefgsJK/uwQlXpo9skY3u+IvdjSgubo2RuG4p7V/aalG9RsAIea8cy
KNZ33vAOa7c+dGe++YyqTWDNCvA4CDFTDDc+RITrNqxltKZqY03Yrr7TYUcwtvz6
64GDx65RmFnJ7wAjPC4gflTmD2tZwj3G+8futgc8gU+go+JjUytL3IK+r/cxIAXq
mYWFcwa3twCwE9XV02Mx6OyNEht+9TNpn2voYLXcPTVorL+6wvhJdImHPTdlk/Pd
nbgMMP/DHaQWx5AdtBWaVa2tldiiE5iwxQR7F385/5N5IHdELBSfrCpl4wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNAMCdPAonSJPLdPZlyx6WWlKCGsMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvMEF3SjA4Q2lkSWs4dDA5bVhMSHBaYVVvSWF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAFhX0D
BAAFhX4wDQYJKoZIhvcNAQELBQADggEBAA4rO+Uhxo1Aa4FAVKMhn2e9tiaSQPCN
7dmBjED69lDO/OigmzJTdQIEyQVlWhtQ1DSwQrkaLSh0tY0pwSHEMcNj0gH05n4/
9GMSZOu4cwgO8ecdlDlG7xQJkuH39gnAowi8CiBgjbzq4u1uUbokmDVOfMZ60IMq
cSGJz5RAi7b5yyMbv0IV9ygA1Cs2oWpNenHLI1VthNS84nMh6X9VuUq1goE1kKD5
srOZdCimZfu49FP8b5XMw3Nd2I0j9g86DmH9tQ6WajckNpuAhbvDpAi/Bm5g9sIm
ukyuEfBbH/JIC4XbKAJu+jRFZyKwSXqdbch/ETWLgVI86IZMIm1xFDw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org