Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/cPDpP7o9GChMazMDImUPRxOKQxQ.roa
File: cPDpP7o9GChMazMDImUPRxOKQxQ.roa (raw, json)
Hash identifier: 4ZiDcs0RO8Zm1rxPCJdrfMifCHaKOlnPxYULQAz6BHk=
Subject key identifier: 70:F0:E9:3F:BA:3D:18:28:4C:6B:33:03:22:65:0F:47:13:8A:43:14
Certificate issuer: /CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Certificate serial: 018A4D0F53597B63C4C04EA85FDE63221C52
Authority key identifier: 8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/cPDpP7o9GChMazMDImUPRxOKQxQ.roa
Signing time: Thu 31 Aug 2023 19:26:04 +0000
ROA not before: Thu 31 Aug 2023 19:26:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39130
IP address blocks: 5.102.36.0/24 maxlen: 24
5.102.37.0/24 maxlen: 24
5.102.38.0/24 maxlen: 24
195.5.124.0/24 maxlen: 24
195.5.124.0/23 maxlen: 24
195.222.124.0/24 maxlen: 24
195.222.124.0/22 maxlen: 22
195.222.125.0/24 maxlen: 24
195.222.126.0/24 maxlen: 24
195.222.127.0/24 maxlen: 24
2a10:d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 15 Sep 2023 18:43:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4d:0f:53:59:7b:63:c4:c0:4e:a8:5f:de:63:22:1c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdf76c54b9e6935c30a9b4c9ba9309ac470ec02
Validity
Not Before: Aug 31 19:26:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70f0e93fba3d18284c6b330322650f47138a4314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:68:b0:2a:2b:3c:ae:77:90:c5:0d:19:d1:55:
e9:43:1b:25:d4:db:2c:6a:d0:a5:7c:8c:e9:2a:10:
48:ce:57:61:e0:83:45:19:27:5b:57:a4:14:10:4c:
02:63:6c:b1:29:97:a6:d7:58:99:88:54:b8:63:80:
26:11:7d:d5:68:96:32:28:fb:e7:b9:2e:05:c0:e0:
bd:c7:18:55:39:38:19:2d:41:7a:76:a7:88:83:76:
b4:90:98:a8:1d:ee:0c:3e:b7:80:55:d9:f1:e2:d0:
7c:27:4f:39:a1:8a:1b:51:36:db:db:07:ab:50:50:
15:35:a1:9c:f6:d3:da:9e:da:3d:ee:33:55:08:00:
fe:d4:df:62:f9:2f:ef:dc:81:8b:46:36:bd:ac:80:
ae:68:a8:dc:c2:cf:fb:6c:e3:c8:fd:59:27:9a:da:
04:5e:3a:41:65:77:24:41:cc:fe:00:48:13:11:b5:
51:f8:2b:55:9f:01:45:0a:bf:f0:55:6e:a4:31:9f:
35:20:2a:93:c2:c2:f2:ee:20:3f:9a:e8:76:41:d9:
9c:3f:10:88:c4:bf:35:c6:10:8e:7d:11:26:e4:29:
f0:b8:c6:ac:a9:6e:4d:a7:38:18:15:5b:bb:e0:93:
52:c3:af:0b:f5:27:d2:cf:8d:74:c1:e9:85:c4:b1:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F0:E9:3F:BA:3D:18:28:4C:6B:33:03:22:65:0F:47:13:8A:43:14
X509v3 Authority Key Identifier:
keyid:8B:DF:76:C5:4B:9E:69:35:C3:0A:9B:4C:9B:A9:30:9A:C4:70:EC:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i992xUueaTXDCptMm6kwmsRw7AI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/cPDpP7o9GChMazMDImUPRxOKQxQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/21519e-b8dc-4240-aa78-8d218665027d/1/i992xUueaTXDCptMm6kwmsRw7AI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.36.0-5.102.38.255
195.5.124.0/23
195.222.124.0/22
IPv6:
2a10:d80::/29
Signature Algorithm: sha256WithRSAEncryption
65:d6:84:c5:4c:3a:03:b2:ca:23:77:cc:27:05:61:9e:98:95:
91:f5:c4:ea:cd:e8:42:ad:33:bb:b9:46:30:b8:51:0d:28:a4:
a5:88:91:bb:7e:f8:cb:b6:8b:10:73:8b:27:87:35:c2:df:b6:
af:d6:7a:b5:05:df:e1:88:ac:a2:7b:06:70:35:6a:cb:bb:c7:
34:f9:7e:68:96:8c:32:a3:ed:bb:5a:81:c1:be:7b:fc:c2:8f:
1d:6d:c2:c1:1d:e8:29:f4:7b:26:a5:03:f5:a9:3a:0c:02:fd:
c1:c0:6a:97:80:21:5e:6c:51:b9:de:ca:2c:57:ad:ac:05:50:
d5:97:6b:54:fd:25:61:a3:68:92:dd:eb:2e:51:30:a3:f5:57:
50:d8:23:23:6b:53:9f:21:dd:9f:19:78:24:64:9d:de:45:c5:
ef:89:26:6d:ec:53:dc:aa:82:e7:f2:23:7c:40:03:b2:2e:0c:
3c:be:ab:27:1f:a4:6e:bc:0d:96:ba:13:bd:6e:49:93:0c:9c:
d8:0a:ca:7b:45:46:4a:6c:96:2f:fe:b2:53:94:b0:b3:c0:ff:
c4:54:89:d4:9a:a0:1a:ac:84:08:b8:ba:c4:e8:c7:98:f0:8e:
1b:dd:05:fb:e2:53:69:bb:77:a1:a6:14:a8:7d:25:f5:8f:3a:
9b:04:24:c0
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYpND1NZe2PEwE6oX95jIhxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGY3NmM1NGI5ZTY5MzVjMzBhOWI0YzliYTkzMDlhYzQ3
MGVjMDIwHhcNMjMwODMxMTkyNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGYwZTkzZmJhM2QxODI4NGM2YjMzMDMyMjY1MGY0NzEzOGE0MzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGiwKis8rneQxQ0Z0VXpQxsl1Nss
atClfIzpKhBIzldh4INFGSdbV6QUEEwCY2yxKZem11iZiFS4Y4AmEX3VaJYyKPvn
uS4FwOC9xxhVOTgZLUF6dqeIg3a0kJioHe4MPreAVdnx4tB8J085oYobUTbb2wer
UFAVNaGc9tPanto97jNVCAD+1N9i+S/v3IGLRja9rICuaKjcws/7bOPI/VknmtoE
XjpBZXckQcz+AEgTEbVR+CtVnwFFCr/wVW6kMZ81ICqTwsLy7iA/muh2QdmcPxCI
xL81xhCOfREm5CnwuMasqW5NpzgYFVu74JNSw68L9SfSz410wemFxLFmGwIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFHDw6T+6PRgoTGszAyJlD0cTikMUMB8GA1UdIwQY
MBaAFIvfdsVLnmk1wwqbTJupMJrEcOwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgt
OGQyMTg2NjUwMjdkLzEvY1BEcFA3bzlHQ2hNYXpNREltVVBSeE9LUXhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8yMTUxOWUtYjhkYy00MjQwLWFhNzgtOGQyMTg2NjUwMjdk
LzEvaTk5MnhVdWVhVFhEQ3B0TW02a3dtc1J3N0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBAIFZiQD
BAAFZiYDBAHDBXwDBALD3nwwDQQCAAIwBwMFAyoQDYAwDQYJKoZIhvcNAQELBQAD
ggEBAGXWhMVMOgOyyiN3zCcFYZ6YlZH1xOrN6EKtM7u5RjC4UQ0opKWIkbt++Mu2
ixBziyeHNcLftq/WerUF3+GIrKJ7BnA1asu7xzT5fmiWjDKj7btagcG+e/zCjx1t
wsEd6Cn0eyalA/WpOgwC/cHAapeAIV5sUbneyixXrawFUNWXa1T9JWGjaJLd6y5R
MKP1V1DYIyNrU58h3Z8ZeCRknd5Fxe+JJm3sU9yqgufyI3xAA7IuDDy+qycfpG68
DZa6E71uSZMMnNgKyntFRkpsli/+slOUsLPA/8RUidSaoBqshAi4usTox5jwjhvd
BfviU2m7d6GmFKh9JfWPOpsEJMA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:06 2024 by rpki-client on console-ams.rpki-client.org