Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/tzUtBu1tiRmhcdM-Bi5k5GrWwXQ.roa
File: tzUtBu1tiRmhcdM-Bi5k5GrWwXQ.roa (raw, json)
Hash identifier: Stf81nkjxrRYOOuD+huZoWs08mcd2k+r1PqCr3pCaeA=
Subject key identifier: B7:35:2D:06:ED:6D:89:19:A1:71:D3:3E:06:2E:64:E4:6A:D6:C1:74
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 018D5F6F82AF766A855A1797F3CB448E5F01
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/tzUtBu1tiRmhcdM-Bi5k5GrWwXQ.roa
Signing time: Wed 31 Jan 2024 12:12:39 +0000
ROA not before: Wed 31 Jan 2024 12:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198885
IP address blocks: 5.61.200.0/24 maxlen: 24
5.61.201.0/24 maxlen: 24
5.61.202.0/24 maxlen: 24
5.61.203.0/24 maxlen: 24
5.61.204.0/24 maxlen: 24
5.61.205.0/24 maxlen: 24
5.61.206.0/24 maxlen: 24
5.61.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Mar 2024 08:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:6f:82:af:76:6a:85:5a:17:97:f3:cb:44:8e:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Jan 31 12:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7352d06ed6d8919a171d33e062e64e46ad6c174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:9c:ac:94:1e:54:c2:c5:fe:e8:5d:1d:d3:
43:c6:3a:2f:54:d4:38:21:97:d5:fb:d5:aa:bf:c4:
e0:8e:2d:67:4e:d7:2c:0e:35:ec:8d:0c:53:74:52:
f3:78:a4:74:6a:9d:59:dc:5d:0f:a6:a1:d7:fb:12:
e7:00:a1:0f:30:e4:c4:7c:0b:58:73:33:fd:16:e0:
06:29:9b:6b:6e:dc:2c:fe:86:49:3a:b1:ed:15:5b:
dc:a6:40:e4:96:40:94:9b:63:2b:7f:60:e0:3a:6e:
49:a1:03:19:c6:08:a3:bb:b8:fd:3f:dd:1d:5d:d3:
8e:0d:b3:a1:a5:a4:f1:d0:91:d9:44:e8:6a:1e:f3:
10:70:c3:94:e5:67:87:8d:fc:e1:a0:8d:8c:31:99:
a3:ca:26:c3:40:cb:56:de:de:2a:76:58:0c:2d:0f:
29:0b:48:ac:9f:56:dd:7b:1a:b4:67:0a:e2:cd:d1:
eb:30:10:f3:14:46:13:65:20:95:b8:42:a4:1d:3d:
d6:eb:13:8a:2c:82:41:b4:85:7f:32:73:b7:aa:aa:
21:8e:d4:a1:fb:82:99:11:b8:f9:ee:b1:d9:62:44:
38:d6:3e:d9:db:88:53:25:83:da:02:69:6c:9d:a7:
ef:7d:bf:72:ab:7b:fc:a8:e9:a9:52:0c:2f:55:c9:
b6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:2D:06:ED:6D:89:19:A1:71:D3:3E:06:2E:64:E4:6A:D6:C1:74
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/tzUtBu1tiRmhcdM-Bi5k5GrWwXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.200.0/21
Signature Algorithm: sha256WithRSAEncryption
24:be:34:73:6d:c1:8c:7c:40:f0:2c:50:2b:10:b5:81:dd:4d:
2e:6e:d8:25:a6:30:ec:f7:49:10:1e:0b:cb:58:16:1e:71:52:
f6:7e:23:27:90:68:85:7c:87:53:6f:0e:d7:3d:04:cf:8f:ba:
35:73:3b:ec:b2:49:49:08:35:c6:55:d8:17:3e:5d:20:c6:05:
71:69:14:a4:eb:9d:af:96:3e:53:19:9f:f9:ec:ba:7b:aa:5e:
5d:38:75:7e:4d:6e:cb:6b:0e:e6:51:1d:82:c5:2c:f4:94:28:
bd:d9:de:49:b8:10:f2:b5:0a:1b:fa:19:8f:6a:d6:67:e8:80:
0e:ca:6b:10:c4:b0:34:fa:df:9e:12:e8:7c:55:af:5f:6d:54:
f5:59:d5:31:39:f0:8f:de:5d:b8:30:41:9c:96:1e:96:20:55:
96:e6:19:1b:aa:91:01:ed:dc:fa:62:bb:34:20:6f:18:84:26:
67:59:a4:38:7a:82:74:ce:b4:38:d8:1b:90:16:ef:88:cd:bb:
d4:78:7c:be:f4:b2:0e:cb:20:27:5e:3b:70:20:11:c5:ea:ba:
6e:c0:dc:bb:1a:88:33:eb:98:64:43:a6:9d:9b:50:25:63:69:
f5:12:6d:46:49:10:91:6e:68:77:9a:da:bd:76:69:a4:b2:57:
5a:9a:44:a9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1fb4KvdmqFWheX88tEjl8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw
MzM3ZDEwHhcNMjQwMTMxMTIxMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzM1MmQwNmVkNmQ4OTE5YTE3MWQzM2UwNjJlNjRlNDZhZDZjMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBucrJQeVMLF/uhdHdNDxjovVNQ4
IZfV+9Wqv8Tgji1nTtcsDjXsjQxTdFLzeKR0ap1Z3F0PpqHX+xLnAKEPMOTEfAtY
czP9FuAGKZtrbtws/oZJOrHtFVvcpkDklkCUm2Mrf2DgOm5JoQMZxgiju7j9P90d
XdOODbOhpaTx0JHZROhqHvMQcMOU5WeHjfzhoI2MMZmjyibDQMtW3t4qdlgMLQ8p
C0isn1bdexq0ZwrizdHrMBDzFEYTZSCVuEKkHT3W6xOKLIJBtIV/MnO3qqohjtSh
+4KZEbj57rHZYkQ41j7Z24hTJYPaAmlsnafvfb9yq3v8qOmpUgwvVcm2fwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLc1LQbtbYkZoXHTPgYuZORq1sF0MB8GA1UdIwQY
MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt
Y2ZlZmRmZGZiZTZiLzEvdHpVdEJ1MXRpUm1oY2RNLUJpNWs1R3JXd1hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi
LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDBT3IMA0G
CSqGSIb3DQEBCwUAA4IBAQAkvjRzbcGMfEDwLFArELWB3U0ubtglpjDs90kQHgvL
WBYecVL2fiMnkGiFfIdTbw7XPQTPj7o1czvssklJCDXGVdgXPl0gxgVxaRSk652v
lj5TGZ/57Lp7ql5dOHV+TW7Law7mUR2CxSz0lCi92d5JuBDytQob+hmPatZn6IAO
ymsQxLA0+t+eEuh8Va9fbVT1WdUxOfCP3l24MEGclh6WIFWW5hkbqpEB7dz6Yrs0
IG8YhCZnWaQ4eoJ0zrQ42BuQFu+IzbvUeHy+9LIOyyAnXjtwIBHF6rpuwNy7Gogz
65hkQ6adm1AlY2n1Em1GSRCRbmh3mtq9dmmksldamkSp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:07 2024 by rpki-client on console-ams.rpki-client.org