Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/UUhEMZpsatSuksfDE_8eGZ9Mzj0.roa
File: UUhEMZpsatSuksfDE_8eGZ9Mzj0.roa (raw, json)
Hash identifier: OVcPIL3SqAbp5RjJA3V+PwQpPjFNYWBu0+xR8WdoUik=
Subject key identifier: 51:48:44:31:9A:6C:6A:D4:AE:92:C7:C3:13:FF:1E:19:9F:4C:CE:3D
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BBA26FED594B3301AB466476F4D9F42D0
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/UUhEMZpsatSuksfDE_8eGZ9Mzj0.roa
Signing time: Fri 10 Nov 2023 16:53:19 +0000
ROA not before: Fri 10 Nov 2023 16:53:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 5.1.40.0/24 maxlen: 24
188.95.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ba:26:fe:d5:94:b3:30:1a:b4:66:47:6f:4d:9f:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 10 16:53:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=514844319a6c6ad4ae92c7c313ff1e199f4cce3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:06:56:e6:fe:6f:a9:31:35:f4:38:4a:1a:
54:31:7f:ba:7a:9c:79:9c:11:45:83:42:7c:40:9d:
fc:cc:69:75:34:53:57:f6:e8:61:73:03:44:4a:87:
43:f0:fd:ab:39:fc:05:c5:de:3b:e6:9a:dd:ab:ac:
fa:5f:a8:a3:99:45:5e:90:36:88:82:c6:4b:65:c3:
d8:90:61:67:b6:4b:70:47:48:df:1a:87:70:07:f6:
67:d9:be:7d:e3:9f:ac:84:a8:15:75:10:84:79:08:
65:b6:4e:32:cb:d2:e7:d2:51:ba:d6:d3:ab:e8:96:
64:7e:34:8d:08:ca:e5:0c:6b:4c:b4:f1:b1:ab:96:
bc:a1:62:51:55:98:76:3f:45:9c:5e:1b:30:d6:66:
64:43:06:3a:f0:c4:da:ec:e4:62:e0:c4:47:ed:4e:
05:a5:b2:cd:a4:21:b3:96:2a:15:ae:8d:01:0a:47:
17:82:4c:4a:46:55:26:43:84:0f:2b:a5:69:cb:6f:
7f:88:f2:b6:fd:08:7a:79:67:c2:a1:9f:62:fd:cf:
53:b0:65:ec:15:0a:0f:16:a5:73:b8:44:aa:3d:1c:
3e:24:8f:4a:51:58:37:59:d6:39:f1:bc:38:1e:a0:
39:89:e4:50:1f:c3:ef:1e:ff:09:48:5a:7b:70:b1:
0a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:48:44:31:9A:6C:6A:D4:AE:92:C7:C3:13:FF:1E:19:9F:4C:CE:3D
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/UUhEMZpsatSuksfDE_8eGZ9Mzj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.40.0/24
188.95.67.0/24
Signature Algorithm: sha256WithRSAEncryption
77:f4:15:fd:b9:b8:13:1d:e5:42:4f:35:5c:e6:42:1f:9e:ef:
42:f7:dd:9f:f5:1b:fc:7b:c3:57:1c:c8:68:6f:5b:2d:e4:e5:
b6:6d:1c:1c:31:34:60:e0:15:0c:b0:d4:05:a3:fb:86:66:e5:
a9:15:bf:19:c8:13:5d:4f:b3:63:74:13:c8:1c:bf:06:70:fc:
58:d2:62:e9:7d:e8:c5:33:ec:54:0b:7d:c8:bb:5d:43:52:05:
9c:ff:86:ae:f1:4b:77:04:e8:0b:74:b0:4a:af:c2:e8:51:a1:
ca:b0:ab:b8:4d:c2:79:0e:7e:2c:1f:7a:3a:44:3e:ad:24:8d:
a9:73:dd:7c:1b:d9:fb:d8:86:d0:d1:e7:b0:0e:1b:42:47:8f:
cb:c4:76:1c:8d:b5:9e:1a:c3:15:39:02:33:38:a3:74:d1:39:
68:5c:d4:13:75:5d:76:9c:81:94:a5:e6:e8:e7:73:97:11:9d:
ef:a6:97:44:f8:62:d6:b9:a8:5d:8d:ce:ce:0a:94:af:14:4d:
38:d0:df:de:ca:8a:79:5f:71:89:f7:31:ad:73:8f:0a:ba:d5:
3b:34:20:be:0d:39:50:a6:04:9c:ba:1d:b8:59:db:ca:7d:1f:
cb:ed:12:91:b5:d6:6c:7c:12:a6:66:a9:8e:2f:6f:c0:de:40:
cc:01:f9:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYu6Jv7VlLMwGrRmR29Nn0LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMxMTEwMTY1MzE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTQ4NDQzMTlhNmM2YWQ0YWU5MmM3YzMxM2ZmMWUxOTlmNGNjZTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1oGVub+b6kxNfQ4ShpUMX+6epx5
nBFFg0J8QJ38zGl1NFNX9uhhcwNESodD8P2rOfwFxd475prdq6z6X6ijmUVekDaI
gsZLZcPYkGFntktwR0jfGodwB/Zn2b5945+shKgVdRCEeQhltk4yy9Ln0lG61tOr
6JZkfjSNCMrlDGtMtPGxq5a8oWJRVZh2P0WcXhsw1mZkQwY68MTa7ORi4MRH7U4F
pbLNpCGzlioVro0BCkcXgkxKRlUmQ4QPK6Vpy29/iPK2/Qh6eWfCoZ9i/c9TsGXs
FQoPFqVzuESqPRw+JI9KUVg3WdY58bw4HqA5ieRQH8PvHv8JSFp7cLEKSwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFFIRDGabGrUrpLHwxP/HhmfTM49MB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvVVVoRU1acHNhdFN1a3NmREVfOGVHWjlNemowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQEoAwQA
vF9DMA0GCSqGSIb3DQEBCwUAA4IBAQB39BX9ubgTHeVCTzVc5kIfnu9C992f9Rv8
e8NXHMhob1st5OW2bRwcMTRg4BUMsNQFo/uGZuWpFb8ZyBNdT7NjdBPIHL8GcPxY
0mLpfejFM+xUC33Iu11DUgWc/4au8Ut3BOgLdLBKr8LoUaHKsKu4TcJ5Dn4sH3o6
RD6tJI2pc918G9n72IbQ0eewDhtCR4/LxHYcjbWeGsMVOQIzOKN00TloXNQTdV12
nIGUpebo53OXEZ3vppdE+GLWuahdjc7OCpSvFE040N/eyop5X3GJ9zGtc48KutU7
NCC+DTlQpgScuh24WdvKfR/L7RKRtdZsfBKmZqmOL2/A3kDMAfkY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org