Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/u5Sgs855t3lujjD4AHlkBsj50Co.roa
File: u5Sgs855t3lujjD4AHlkBsj50Co.roa (raw, json)
Hash identifier: h6UdhJ8ogLPszjXO5Iy5t/BMGi9fQpRSMVmCFP0LVJA=
Subject key identifier: BB:94:A0:B3:CE:79:B7:79:6E:8E:30:F8:00:79:64:06:C8:F9:D0:2A
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01856F1D920EA4AAB8FAE8E94740209FD454
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/u5Sgs855t3lujjD4AHlkBsj50Co.roa
Signing time: Sun 01 Jan 2023 20:54:46 +0000
ROA not before: Sun 01 Jan 2023 20:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3178
IP address blocks: 185.56.192.0/24 maxlen: 24
185.56.192.0/22 maxlen: 22
185.56.195.0/24 maxlen: 24
185.56.193.0/24 maxlen: 24
185.56.194.0/24 maxlen: 24
5.8.240.0/23 maxlen: 23
5.8.240.0/24 maxlen: 24
5.8.241.0/24 maxlen: 24
5.8.245.0/24 maxlen: 24
5.8.240.0/21 maxlen: 21
5.8.246.0/24 maxlen: 24
5.8.243.0/24 maxlen: 24
5.8.244.0/23 maxlen: 23
5.8.244.0/24 maxlen: 24
5.8.242.0/24 maxlen: 24
5.8.242.0/23 maxlen: 23
5.8.247.0/24 maxlen: 24
2a01:aa20::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:92:0e:a4:aa:b8:fa:e8:e9:47:40:20:9f:d4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Jan 1 20:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb94a0b3ce79b7796e8e30f800796406c8f9d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:71:41:e6:aa:75:db:0b:fc:11:7a:a5:f7:
25:41:21:15:ef:ef:8d:9a:17:17:b8:5a:00:d2:04:
f1:47:39:3c:58:38:ff:e3:ba:47:b7:5b:60:0b:0f:
a4:d2:b8:7b:d3:62:45:c4:4b:90:45:a0:f5:b0:5b:
e4:23:c8:bb:1c:33:dd:3c:c3:26:15:be:fb:91:99:
86:b9:25:d1:11:ef:7d:0f:d2:77:23:ee:84:75:03:
f8:d9:a3:89:46:0d:ae:8e:84:ad:5e:6b:7a:5c:00:
39:53:e0:8d:c4:1a:7e:07:26:f7:53:42:b3:70:52:
76:e0:d3:55:ba:d9:55:23:b3:e3:95:24:28:d5:3a:
41:ef:28:e2:0f:88:61:0d:fb:50:53:30:ec:f4:92:
7f:6a:af:20:21:13:b7:e9:b4:d9:d0:fb:5c:5e:6a:
13:c1:b6:75:cf:da:eb:f0:b8:b2:38:a8:f7:e4:fc:
84:0d:18:97:ee:d0:dc:17:81:9f:56:a9:2b:38:a5:
4e:6d:c4:57:65:f2:1f:6f:f0:83:f2:7e:d1:fc:95:
20:42:ba:f1:fb:3b:8e:a1:92:eb:c6:ee:65:3b:32:
c9:8b:21:fa:87:47:3c:b5:f4:de:7b:99:c7:7a:cf:
9c:b0:cc:d7:f8:e7:d3:62:98:a3:9a:2a:59:1d:b4:
d5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:94:A0:B3:CE:79:B7:79:6E:8E:30:F8:00:79:64:06:C8:F9:D0:2A
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/u5Sgs855t3lujjD4AHlkBsj50Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.240.0/21
185.56.192.0/22
IPv6:
2a01:aa20::/32
Signature Algorithm: sha256WithRSAEncryption
01:5a:e2:47:65:20:b5:43:88:80:c1:71:8d:de:31:f5:a3:13:
39:d9:15:4a:96:1e:b4:76:19:55:42:29:ba:fe:72:7e:f8:43:
97:40:4b:8e:68:aa:9c:1a:7e:02:0b:d5:f4:64:a1:fe:6d:a2:
f3:02:80:fb:c9:36:19:43:07:68:70:13:ad:2f:44:02:85:eb:
21:70:6a:43:bd:93:cd:cb:9f:1a:b9:55:58:9c:e2:cb:8e:38:
bb:76:61:d5:d0:a8:d6:c4:66:4f:b0:d3:78:71:72:47:9e:42:
a9:d8:08:1a:15:8a:bc:07:c2:de:04:cf:62:97:41:98:ac:56:
f3:2f:2b:89:1e:1a:cb:cc:ed:37:c9:9e:f3:8f:31:f9:f4:91:
1e:39:ea:83:36:c1:8e:60:72:8d:2a:ef:bf:34:95:a0:2c:5f:
00:2a:cd:b5:ec:59:b2:8a:b5:a1:da:e1:8e:d4:0a:83:9e:93:
42:0e:cb:d3:79:7f:01:d0:90:cd:4a:f2:43:c8:cb:a8:40:9e:
ac:d0:75:bc:16:d0:4b:4b:04:90:84:fe:0b:8b:fa:8f:3e:84:
ca:9a:c3:b7:f3:0c:da:fe:62:1c:24:a3:ef:06:2f:6a:9c:1d:
4a:e9:a4:09:66:ca:55:d2:47:20:bb:67:fd:40:53:de:22:54:
d3:90:66:43
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVvHZIOpKq4+ujpR0Agn9RUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMzFkZGVmMjVkOTZjODRiMDAxYTJhYzUwNDdiMDRlMDYw
YTBhYzMwHhcNMjMwMTAxMjA1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjk0YTBiM2NlNzliNzc5NmU4ZTMwZjgwMDc5NjQwNmM4ZjlkMDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxdxQeaqddsL/BF6pfclQSEV7++N
mhcXuFoA0gTxRzk8WDj/47pHt1tgCw+k0rh702JFxEuQRaD1sFvkI8i7HDPdPMMm
Fb77kZmGuSXREe99D9J3I+6EdQP42aOJRg2ujoStXmt6XAA5U+CNxBp+Byb3U0Kz
cFJ24NNVutlVI7PjlSQo1TpB7yjiD4hhDftQUzDs9JJ/aq8gIRO36bTZ0PtcXmoT
wbZ1z9rr8LiyOKj35PyEDRiX7tDcF4GfVqkrOKVObcRXZfIfb/CD8n7R/JUgQrrx
+zuOoZLrxu5lOzLJiyH6h0c8tfTee5nHes+csMzX+OfTYpijmipZHbTVDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFLuUoLPOebd5bo4w+AB5ZAbI+dAqMB8GA1UdIwQY
MBaAFP4x3e8l2WyEsAGirFBHsE4GCgrDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUt
YjRkOGMyYjdhMTAzLzEvdTVTZ3M4NTV0M2x1ampENEFIbGtCc2o1MENvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83YzBmMTQtNWIyNC00YjFiLThlYjUtYjRkOGMyYjdhMTAz
LzEvX2pIZDd5WFpiSVN3QWFLc1VFZXdUZ1lLQ3NNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBQjwAwQC
uTjAMA0EAgACMAcDBQAqAaogMA0GCSqGSIb3DQEBCwUAA4IBAQABWuJHZSC1Q4iA
wXGN3jH1oxM52RVKlh60dhlVQim6/nJ++EOXQEuOaKqcGn4CC9X0ZKH+baLzAoD7
yTYZQwdocBOtL0QCheshcGpDvZPNy58auVVYnOLLjji7dmHV0KjWxGZPsNN4cXJH
nkKp2AgaFYq8B8LeBM9il0GYrFbzLyuJHhrLzO03yZ7zjzH59JEeOeqDNsGOYHKN
Ku+/NJWgLF8AKs217FmyirWh2uGO1AqDnpNCDsvTeX8B0JDNSvJDyMuoQJ6s0HW8
FtBLSwSQhP4Li/qPPoTKmsO38wza/mIcJKPvBi9qnB1K6aQJZspV0kcgu2f9QFPe
IlTTkGZD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org