Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/7at4ldanSXChq6pY2NdawRiH3zw.roa
File: 7at4ldanSXChq6pY2NdawRiH3zw.roa (raw, json)
Hash identifier: SY5F0qiUbQhHHCa7KluL7rplGxpK4VEwabc3q2aa8Zo=
Subject key identifier: ED:AB:78:95:D6:A7:49:70:A1:AB:AA:58:D8:D7:5A:C1:18:87:DF:3C
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018F6814FC4A3E5E7E57E566C58496F687D5
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/7at4ldanSXChq6pY2NdawRiH3zw.roa
Signing time: Sat 11 May 2024 14:35:56 +0000
ROA not before: Sat 11 May 2024 14:35:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39130
IP address blocks: 5.102.38.0/24 maxlen: 24
195.5.124.0/23 maxlen: 24
195.5.124.0/24 maxlen: 24
2a10:d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Aug 2024 19:21:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:68:14:fc:4a:3e:5e:7e:57:e5:66:c5:84:96:f6:87:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: May 11 14:35:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edab7895d6a74970a1abaa58d8d75ac11887df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:bc:f4:37:51:b6:7c:fb:7e:93:34:70:fe:
40:f0:bb:80:09:a0:62:aa:13:da:6a:7d:1b:de:4f:
04:a4:dd:68:58:b8:25:7d:31:d0:1a:67:19:c3:59:
c0:f3:c0:e7:ab:33:5a:2d:a9:69:6b:3e:84:9f:d4:
69:4b:03:8d:82:fa:e3:44:b4:70:09:1e:66:28:a1:
77:e9:56:0a:42:e4:ae:43:01:a4:8b:8a:0f:dd:5c:
29:62:30:e4:47:7d:9d:9d:e5:3e:c6:c3:3e:3a:5b:
df:a2:13:07:b5:08:2a:27:85:2c:60:2d:69:cb:28:
c3:20:24:b3:ca:f8:77:3b:7b:de:44:2e:1a:b0:71:
cb:af:b5:6a:03:e0:ce:b7:24:23:37:7d:cb:0e:51:
ab:f3:ce:3b:4c:f4:9d:fd:f0:29:fa:33:e5:1f:1c:
2a:4a:d0:ef:ed:40:64:ce:46:49:1e:fb:b1:b6:12:
20:39:15:7a:77:03:6f:31:d0:df:d8:d1:09:7f:55:
79:3a:dd:f9:a9:3b:7d:61:f9:f6:25:7b:03:f3:ba:
f6:11:27:af:8f:00:9c:74:92:6b:31:75:1c:c8:3e:
60:b8:60:3d:7d:0f:c2:17:65:9d:3b:6a:ab:d7:8e:
7c:3c:e8:9b:26:65:61:83:15:ca:4d:61:4e:52:89:
ee:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:AB:78:95:D6:A7:49:70:A1:AB:AA:58:D8:D7:5A:C1:18:87:DF:3C
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/7at4ldanSXChq6pY2NdawRiH3zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.38.0/24
195.5.124.0/23
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
28:43:3c:68:5d:2d:a9:f7:b0:ea:2d:26:34:3a:5f:15:89:83:
4a:60:95:d1:88:e1:0a:d7:cc:89:7d:5d:c8:fd:b8:85:bb:9b:
c4:ae:40:24:0a:73:67:95:df:f7:ef:d9:8b:10:fd:54:e1:a2:
ce:66:88:cb:4c:87:10:c6:4f:90:0c:02:67:4c:8d:69:dd:96:
ea:48:ea:8f:a4:ff:1f:9f:eb:26:61:e0:83:10:b2:aa:a6:d3:
e5:c3:22:4c:03:69:b1:b3:20:b4:70:8a:43:de:29:e0:26:d4:
7c:64:ed:83:97:35:37:85:ca:79:ab:7d:94:bc:c1:c5:58:71:
e2:f0:99:b9:d7:0c:00:e2:b8:10:4d:87:bc:f6:12:a9:37:82:
17:cd:09:6f:f5:37:8c:92:99:07:59:4d:84:b2:5f:82:e0:c5:
cd:23:72:2c:c8:c3:78:39:92:db:35:f4:c1:5e:65:c9:07:9c:
7d:b0:c9:90:57:f0:41:c8:e6:86:da:0c:09:c5:5b:15:25:46:
12:13:14:03:b5:1c:84:52:98:b8:3a:78:81:de:62:fb:0b:af:
d6:12:2a:d5:95:c9:d3:b3:09:1f:e1:82:ac:48:a2:ea:3f:0f:
51:3f:40:88:cc:ae:27:24:f3:f6:24:9c:cf:cd:63:e6:43:b7:
74:58:40:cb
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY9oFPxKPl5+V+VmxYSW9ofVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjQwNTExMTQzNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGFiNzg5NWQ2YTc0OTcwYTFhYmFhNThkOGQ3NWFjMTE4ODdkZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRO89DdRtnz7fpM0cP5A8LuACaBi
qhPaan0b3k8EpN1oWLglfTHQGmcZw1nA88DnqzNaLalpaz6En9RpSwONgvrjRLRw
CR5mKKF36VYKQuSuQwGki4oP3VwpYjDkR32dneU+xsM+OlvfohMHtQgqJ4UsYC1p
yyjDICSzyvh3O3veRC4asHHLr7VqA+DOtyQjN33LDlGr8847TPSd/fAp+jPlHxwq
StDv7UBkzkZJHvuxthIgORV6dwNvMdDf2NEJf1V5Ot35qTt9Yfn2JXsD87r2ESev
jwCcdJJrMXUcyD5guGA9fQ/CF2WdO2qr1458POibJmVhgxXKTWFOUonufwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFO2reJXWp0lwoauqWNjXWsEYh988MB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvN2F0NGxkYW5TWENocTZwWTJOZGF3UmlIM3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQABWYmAwQB
wwV8MA0EAgACMAcDBQMqEA2AMA0GCSqGSIb3DQEBCwUAA4IBAQAoQzxoXS2p97Dq
LSY0Ol8ViYNKYJXRiOEK18yJfV3I/biFu5vErkAkCnNnld/379mLEP1U4aLOZojL
TIcQxk+QDAJnTI1p3ZbqSOqPpP8fn+smYeCDELKqptPlwyJMA2mxsyC0cIpD3ing
JtR8ZO2DlzU3hcp5q32UvMHFWHHi8Jm51wwA4rgQTYe89hKpN4IXzQlv9TeMkpkH
WU2Esl+C4MXNI3IsyMN4OZLbNfTBXmXJB5x9sMmQV/BByOaG2gwJxVsVJUYSExQD
tRyEUpi4OniB3mL7C6/WEirVlcnTswkf4YKsSKLqPw9RP0CIzK4nJPP2JJzPzWPm
Q7d0WEDL
-----END CERTIFICATE-----
Generated at Tue Aug 6 22:17:04 2024 by rpki-client on console-fra.rpki-client.org