Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/WzZs5ZXcVeOC7V1zfLbtBJlV30o.roa
File: WzZs5ZXcVeOC7V1zfLbtBJlV30o.roa (raw, json)
Hash identifier: iaS0jzNo8QFFGGWBmPAqM5f/DJQ0gLq7ga9BQ7vIdr8=
Subject key identifier: 5B:36:6C:E5:95:DC:55:E3:82:ED:5D:73:7C:B6:ED:04:99:55:DF:4A
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 0188D288F50E4E7676AF1924DFCD96D35E76
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/WzZs5ZXcVeOC7V1zfLbtBJlV30o.roa
Signing time: Mon 19 Jun 2023 07:22:50 +0000
ROA not before: Mon 19 Jun 2023 07:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5410
IP address blocks: 5.48.0.0/14 maxlen: 24
Validation: Failed, certificate revoked on Tue 10 Oct 2023 14:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:88:f5:0e:4e:76:76:af:19:24:df:cd:96:d3:5e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jun 19 07:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b366ce595dc55e382ed5d737cb6ed049955df4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7b:c1:8f:92:f5:52:97:70:ee:38:da:d0:75:
37:9f:08:bf:cb:34:dc:ee:99:b0:ef:07:2b:09:b2:
3d:b6:b2:53:4a:06:fc:f8:d8:2f:21:15:1f:59:7e:
9f:56:d1:ff:1c:9e:c1:04:53:7e:3e:3d:66:81:81:
7a:dc:fe:cc:ca:be:f5:b8:39:4f:c0:22:b1:33:3f:
e6:56:78:dc:57:1e:c1:a6:4a:68:6a:a9:f1:bd:98:
66:c5:b0:62:85:15:db:22:82:6c:97:6e:4a:a7:6d:
4e:36:17:8f:db:16:4e:04:de:99:b8:f6:27:26:fc:
76:76:cd:be:99:70:f8:df:0b:4d:e4:85:e0:61:a5:
25:51:53:00:c0:6b:b3:3c:67:91:e4:56:0d:e5:4c:
4a:6b:aa:c4:3e:a5:74:8f:a2:a8:e9:8c:9b:82:61:
91:6e:ad:81:fb:f4:2a:3a:e9:b1:fc:39:be:ca:96:
39:b5:7d:81:0b:33:16:5e:6e:d3:dc:ec:9d:50:45:
69:25:27:56:d1:89:90:45:f5:85:59:6b:13:f1:f1:
f6:be:63:c7:64:da:fb:e0:0f:73:36:13:87:ae:e0:
33:a3:07:e5:52:5c:2b:af:25:55:f8:32:70:2b:4f:
9e:e1:67:2a:f7:d7:19:2a:04:53:b7:ba:ea:7d:f7:
e6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:36:6C:E5:95:DC:55:E3:82:ED:5D:73:7C:B6:ED:04:99:55:DF:4A
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/WzZs5ZXcVeOC7V1zfLbtBJlV30o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.48.0.0/14
Signature Algorithm: sha256WithRSAEncryption
9c:05:ba:4d:6b:09:c9:5d:69:c6:91:90:42:c0:19:a8:7c:2c:
26:f5:68:45:c0:d5:04:91:e1:60:f8:8c:4f:a9:54:0b:7b:c6:
64:c6:cf:9b:55:e5:b5:12:44:50:3c:5d:06:b9:eb:f0:93:45:
51:e5:d8:e1:60:c1:77:68:28:67:46:53:28:1f:af:11:56:0f:
c2:c8:a0:0b:05:09:d9:2c:ea:12:b8:98:f5:7a:73:5b:28:b5:
08:33:16:3b:fd:8d:ea:c5:ed:d8:f0:ee:7d:3a:c2:27:70:d4:
75:f7:dc:c0:a9:6e:b9:4c:77:a3:9d:ac:58:19:34:fe:48:f8:
34:5b:ce:aa:ab:a0:d6:68:02:70:f6:59:6c:ce:5e:a2:a7:5c:
86:91:38:40:1e:99:b7:50:e9:47:97:fd:04:18:96:9c:59:f4:
60:b4:41:be:ee:36:8b:d4:71:d7:03:02:77:76:40:2d:15:63:
0e:fa:3e:d1:5a:bf:98:42:27:f1:7d:90:fb:60:a5:4f:60:69:
52:fa:98:8f:bf:24:8a:65:2a:76:55:f8:93:4b:f2:13:7c:ef:
d7:d5:22:c6:44:40:17:a6:a1:f9:38:e2:10:e8:2e:09:1f:c5:
0e:8c:8b:20:df:bf:0d:57:13:11:97:7b:08:29:5d:de:16:33:
17:6b:8b:1d
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYjSiPUOTnZ2rxkk382W0152MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjMwNjE5MDcyMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjM2NmNlNTk1ZGM1NWUzODJlZDVkNzM3Y2I2ZWQwNDk5NTVkZjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunvBj5L1Updw7jja0HU3nwi/yzTc
7pmw7wcrCbI9trJTSgb8+NgvIRUfWX6fVtH/HJ7BBFN+Pj1mgYF63P7Myr71uDlP
wCKxMz/mVnjcVx7BpkpoaqnxvZhmxbBihRXbIoJsl25Kp21ONheP2xZOBN6ZuPYn
Jvx2ds2+mXD43wtN5IXgYaUlUVMAwGuzPGeR5FYN5UxKa6rEPqV0j6Ko6YybgmGR
bq2B+/QqOumx/Dm+ypY5tX2BCzMWXm7T3OydUEVpJSdW0YmQRfWFWWsT8fH2vmPH
ZNr74A9zNhOHruAzowflUlwrryVV+DJwK0+e4Wcq99cZKgRTt7rqfffmIwIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFFs2bOWV3FXjgu1dc3y27QSZVd9KMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEvV3paczVaWGNWZU9DN1YxemZMYnRCSmxWMzBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCBTAwDQYJ
KoZIhvcNAQELBQADggEBAJwFuk1rCcldacaRkELAGah8LCb1aEXA1QSR4WD4jE+p
VAt7xmTGz5tV5bUSRFA8XQa56/CTRVHl2OFgwXdoKGdGUygfrxFWD8LIoAsFCdks
6hK4mPV6c1sotQgzFjv9jerF7djw7n06widw1HX33MCpbrlMd6OdrFgZNP5I+DRb
zqqroNZoAnD2WWzOXqKnXIaROEAembdQ6UeX/QQYlpxZ9GC0Qb7uNovUcdcDAnd2
QC0VYw76PtFav5hCJ/F9kPtgpU9gaVL6mI+/JIplKnZV+JNL8hN879fVIsZEQBem
ofk44hDoLgkfxQ6MiyDfvw1XExGXewgpXd4WMxdrix0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:00 2024 by rpki-client on console-ams.rpki-client.org