Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/h-dgdOrv4QjVMQgOiShm_DwANMw.roa
File: h-dgdOrv4QjVMQgOiShm_DwANMw.roa (raw, json)
Hash identifier: cBcrYsAw908NlZbXFZixiUIlWPr2AUWzkeMa4Le3Lz8=
Subject key identifier: 87:E7:60:74:EA:EF:E1:08:D5:31:08:0E:89:28:66:FC:3C:00:34:CC
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 01856D0A8A0C3DB50D169BDF0E966763E656
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/h-dgdOrv4QjVMQgOiShm_DwANMw.roa
Signing time: Sun 01 Jan 2023 11:14:45 +0000
ROA not before: Sun 01 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49835
IP address blocks: 109.69.12.0/24 maxlen: 24
109.69.14.0/24 maxlen: 24
109.69.15.0/24 maxlen: 24
109.69.13.0/24 maxlen: 24
185.32.17.0/24 maxlen: 24
185.32.16.0/24 maxlen: 24
185.32.18.0/24 maxlen: 24
185.32.19.0/24 maxlen: 24
5.10.205.0/24 maxlen: 24
5.10.206.0/24 maxlen: 24
5.10.203.0/24 maxlen: 24
5.10.204.0/24 maxlen: 24
5.10.202.0/24 maxlen: 24
5.10.200.0/24 maxlen: 24
5.10.201.0/24 maxlen: 24
5.10.207.0/24 maxlen: 24
109.69.11.0/24 maxlen: 24
109.69.9.0/24 maxlen: 24
109.69.10.0/24 maxlen: 24
109.69.8.0/24 maxlen: 24
2a00:1508::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8a:0c:3d:b5:0d:16:9b:df:0e:96:67:63:e6:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jan 1 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87e76074eaefe108d531080e892866fc3c0034cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:7c:2c:9c:f8:cc:32:1a:f2:e5:e3:53:b6:
36:d7:e2:a3:77:65:99:76:dc:38:a4:41:59:40:de:
04:a5:a7:a8:72:ff:be:0b:1b:27:1c:bb:c4:43:3b:
bc:e6:10:d4:4c:df:0b:48:2b:bf:40:fc:f2:7c:a0:
6c:e9:2b:ff:be:76:7f:45:53:45:bd:ef:4c:b7:82:
d2:51:fd:20:87:e0:96:ea:9d:7b:37:74:e0:27:ea:
6a:63:ad:2e:32:c5:d9:80:57:14:88:c3:a0:f3:a3:
59:67:54:3d:55:c9:e5:a3:e7:69:8d:3e:ae:18:9a:
03:f5:01:df:a9:5a:1a:4b:ba:a8:40:ff:ff:fc:20:
ee:c5:4b:93:27:b9:5a:b9:5d:79:a2:1b:10:91:ec:
ca:52:64:4d:33:ed:51:cc:05:71:a5:98:45:74:e4:
19:68:89:03:38:bb:7e:11:b9:76:f5:2e:37:25:61:
3d:78:ce:b5:a6:02:ef:68:da:56:1a:3d:a2:77:ef:
e7:f6:2f:82:39:62:fb:de:de:bf:ec:04:a8:59:3e:
c0:4a:9d:fc:d2:33:d4:e3:f7:e4:8c:79:6c:e2:a8:
b8:ba:2c:d0:a0:6d:23:7d:00:9e:f2:73:aa:6a:a7:
4b:f4:6a:70:8c:07:20:75:dd:93:d5:6f:76:2b:0e:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E7:60:74:EA:EF:E1:08:D5:31:08:0E:89:28:66:FC:3C:00:34:CC
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/h-dgdOrv4QjVMQgOiShm_DwANMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.200.0/21
109.69.8.0/21
185.32.16.0/22
IPv6:
2a00:1508::/32
Signature Algorithm: sha256WithRSAEncryption
5a:b8:6f:2a:31:8d:05:1f:e4:14:ff:a5:63:12:eb:29:7e:a3:
de:a5:01:38:0e:c3:d7:f7:75:2f:04:6d:da:6b:85:10:52:34:
47:98:67:46:79:fa:88:54:90:24:60:ff:ca:12:9e:d5:24:98:
c1:63:7a:9e:b5:ed:db:c1:5f:da:be:f3:d0:45:17:7d:60:55:
c1:86:dc:67:28:7f:98:4c:78:38:3e:75:49:bf:7f:65:77:39:
cb:9a:99:3b:32:8e:1e:9c:0a:08:9a:98:a8:d3:3c:32:5c:bc:
74:27:ef:a0:1c:45:4f:52:35:89:54:37:f9:eb:e6:62:7a:19:
25:b4:77:5d:af:4b:07:9e:25:e3:63:3b:22:09:52:7e:a3:8a:
25:78:66:fe:1c:25:49:bb:9e:2b:b4:2a:58:98:80:77:ab:66:
66:e2:4d:b8:82:8b:c0:c7:5a:fc:4f:e9:2e:92:ac:38:c8:fb:
00:1f:30:dc:f8:c2:66:49:c5:4a:f3:61:a0:f3:96:d6:65:79:
95:6e:42:01:d4:fc:93:1d:fb:df:95:42:91:d3:8d:48:f5:79:
24:4d:f8:cb:d1:6e:ea:9e:b2:eb:b0:89:e0:84:f4:cf:cf:9e:
d5:9d:e8:7c:b2:ab:82:1a:1a:54:84:d3:2b:eb:ab:8f:16:5a:
2d:79:77:dd
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVtCooMPbUNFpvfDpZnY+ZWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OWViNGQ4YzY1ZjNhN2I0NTRjYTJhNWU1ZjY0MDk0ZTlk
ODhiZDMwHhcNMjMwMTAxMTExNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2U3NjA3NGVhZWZlMTA4ZDUzMTA4MGU4OTI4NjZmYzNjMDAzNGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMt8LJz4zDIa8uXjU7Y21+Kjd2WZ
dtw4pEFZQN4Epaeocv++CxsnHLvEQzu85hDUTN8LSCu/QPzyfKBs6Sv/vnZ/RVNF
ve9Mt4LSUf0gh+CW6p17N3TgJ+pqY60uMsXZgFcUiMOg86NZZ1Q9Vcnlo+dpjT6u
GJoD9QHfqVoaS7qoQP///CDuxUuTJ7lauV15ohsQkezKUmRNM+1RzAVxpZhFdOQZ
aIkDOLt+Ebl29S43JWE9eM61pgLvaNpWGj2id+/n9i+COWL73t6/7ASoWT7ASp38
0jPU4/fkjHls4qi4uizQoG0jfQCe8nOqaqdL9GpwjAcgdd2T1W92Kw5KuwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFIfnYHTq7+EI1TEIDokoZvw8ADTMMB8GA1UdIwQY
MBaAFAeetNjGXzp7RUyipeX2QJTp2IvTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjct
NDg0ZDg0M2U2ZGUzLzEvaC1kZ2RPcnY0UWpWTVFnT2lTaG1fRHdBTk13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8yZmMwMDctMzYxZC00ZjQ3LWFhZjctNDg0ZDg0M2U2ZGUz
LzEvQjU2MDJNWmZPbnRGVEtLbDVmWkFsT25ZaTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBQrIAwQD
bUUIAwQCuSAQMA0EAgACMAcDBQAqABUIMA0GCSqGSIb3DQEBCwUAA4IBAQBauG8q
MY0FH+QU/6VjEuspfqPepQE4DsPX93UvBG3aa4UQUjRHmGdGefqIVJAkYP/KEp7V
JJjBY3qete3bwV/avvPQRRd9YFXBhtxnKH+YTHg4PnVJv39ldznLmpk7Mo4enAoI
mpio0zwyXLx0J++gHEVPUjWJVDf56+ZiehkltHddr0sHniXjYzsiCVJ+o4oleGb+
HCVJu54rtCpYmIB3q2Zm4k24govAx1r8T+kukqw4yPsAHzDc+MJmScVK82Gg85bW
ZXmVbkIB1PyTHfvflUKR041I9XkkTfjL0W7qnrLrsInghPTPz57Vneh8squCGhpU
hNMr66uPFloteXfd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:19 2024 by rpki-client on console-ams.rpki-client.org