Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Fd5hsw931KmM83ghkNEOLovI0N0.roa
File: Fd5hsw931KmM83ghkNEOLovI0N0.roa (raw, json)
Hash identifier: f/wV9VPHN7XpxFnPwqOrUlZ+qR3U0lgtH0+TVBShK+M=
Subject key identifier: 15:DE:61:B3:0F:77:D4:A9:8C:F3:78:21:90:D1:0E:2E:8B:C8:D0:DD
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EEEB9A8B1EC68FA804AEF51CDDA42BEDD
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Fd5hsw931KmM83ghkNEOLovI0N0.roa
Signing time: Thu 18 Apr 2024 01:02:08 +0000
ROA not before: Thu 18 Apr 2024 01:02:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12668
IP address blocks: 5.141.234.0/23 maxlen: 23
31.192.171.0/24 maxlen: 24
31.192.180.0/24 maxlen: 24
46.229.96.0/20 maxlen: 20
90.157.5.0/24 maxlen: 24
90.157.16.0/24 maxlen: 24
90.157.30.0/24 maxlen: 24
90.157.34.0/24 maxlen: 24
90.157.58.0/24 maxlen: 24
90.157.68.0/23 maxlen: 23
90.157.80.0/23 maxlen: 23
90.157.109.0/24 maxlen: 24
90.157.115.0/24 maxlen: 24
92.54.69.0/24 maxlen: 24
92.54.90.0/24 maxlen: 24
92.54.117.0/24 maxlen: 24
94.31.134.0/24 maxlen: 24
94.31.135.0/24 maxlen: 24
94.31.136.0/24 maxlen: 24
94.31.147.0/24 maxlen: 24
94.31.158.0/24 maxlen: 24
94.31.159.0/24 maxlen: 24
94.31.176.0/24 maxlen: 24
94.31.193.0/24 maxlen: 24
94.31.194.0/24 maxlen: 24
94.31.195.0/24 maxlen: 24
94.31.196.0/24 maxlen: 24
94.31.202.0/24 maxlen: 24
94.31.206.0/23 maxlen: 23
94.31.207.0/24 maxlen: 24
94.31.210.0/24 maxlen: 24
94.31.212.0/24 maxlen: 24
94.31.221.0/24 maxlen: 24
94.31.229.0/24 maxlen: 24
94.31.240.0/24 maxlen: 24
94.31.241.0/24 maxlen: 24
94.31.243.0/24 maxlen: 24
94.31.246.0/23 maxlen: 23
94.31.250.0/24 maxlen: 24
94.31.253.0/24 maxlen: 24
94.31.255.0/24 maxlen: 24
188.17.116.0/23 maxlen: 23
188.18.112.0/24 maxlen: 24
188.18.113.0/24 maxlen: 24
188.18.116.0/24 maxlen: 24
188.73.139.0/24 maxlen: 24
188.73.141.0/24 maxlen: 24
188.73.144.0/23 maxlen: 23
188.73.144.0/24 maxlen: 24
188.73.147.0/24 maxlen: 24
188.73.151.0/24 maxlen: 24
188.73.154.0/24 maxlen: 24
188.73.158.0/24 maxlen: 24
188.73.168.0/24 maxlen: 24
188.73.170.0/23 maxlen: 23
188.73.183.0/24 maxlen: 24
213.142.34.0/24 maxlen: 24
213.142.40.0/24 maxlen: 24
213.142.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Apr 2024 10:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ee:b9:a8:b1:ec:68:fa:80:4a:ef:51:cd:da:42:be:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 18 01:02:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15de61b30f77d4a98cf3782190d10e2e8bc8d0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c7:dd:76:bf:31:98:3d:80:71:d6:1d:19:f7:
61:99:14:4d:23:7d:94:cc:47:ee:88:7d:35:89:e0:
7b:a6:00:0c:d6:b9:0e:66:42:d7:39:52:d4:44:be:
37:01:2a:67:c9:25:df:6a:d3:73:16:4e:c0:58:9f:
7e:9b:1d:b0:ea:76:1f:33:f3:e3:60:89:d5:7b:9e:
6a:93:e8:5d:6a:40:e6:89:c5:e6:af:31:ef:0e:3b:
d5:03:b8:9d:83:c6:9c:6f:06:1b:6f:5a:51:c4:d7:
2a:10:65:72:da:9e:85:05:6d:ca:e0:fe:cd:25:cd:
ac:78:54:e8:34:72:6e:7c:e7:0b:8f:d9:68:e6:55:
c0:49:eb:58:b7:53:e8:bb:07:8d:25:8a:25:24:f7:
2b:a6:c9:ec:dd:8e:a2:d4:8f:90:8c:5f:03:d6:a8:
45:07:ea:af:7f:25:ec:05:1e:4d:e1:3c:e0:34:c0:
1b:2d:b6:2a:cf:9a:7c:49:5a:98:71:be:dd:4f:96:
da:e4:c4:fe:3e:4e:60:b3:a0:f1:05:78:a5:13:c8:
6b:37:97:ba:9e:ef:30:91:06:48:55:ce:d7:de:0a:
fd:77:48:52:fc:d8:2a:aa:16:5f:48:03:ba:f6:a3:
33:98:8a:c4:c2:50:f1:15:6e:a8:79:c7:43:4d:14:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DE:61:B3:0F:77:D4:A9:8C:F3:78:21:90:D1:0E:2E:8B:C8:D0:DD
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/Fd5hsw931KmM83ghkNEOLovI0N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.141.234.0/23
31.192.171.0/24
31.192.180.0/24
46.229.96.0/20
90.157.5.0/24
90.157.16.0/24
90.157.30.0/24
90.157.34.0/24
90.157.58.0/24
90.157.68.0/23
90.157.80.0/23
90.157.109.0/24
90.157.115.0/24
92.54.69.0/24
92.54.90.0/24
92.54.117.0/24
94.31.134.0-94.31.136.255
94.31.147.0/24
94.31.158.0/23
94.31.176.0/24
94.31.193.0-94.31.196.255
94.31.202.0/24
94.31.206.0/23
94.31.210.0/24
94.31.212.0/24
94.31.221.0/24
94.31.229.0/24
94.31.240.0/23
94.31.243.0/24
94.31.246.0/23
94.31.250.0/24
94.31.253.0/24
94.31.255.0/24
188.17.116.0/23
188.18.112.0/23
188.18.116.0/24
188.73.139.0/24
188.73.141.0/24
188.73.144.0/23
188.73.147.0/24
188.73.151.0/24
188.73.154.0/24
188.73.158.0/24
188.73.168.0/24
188.73.170.0/23
188.73.183.0/24
213.142.34.0/24
213.142.40.0/24
213.142.57.0/24
Signature Algorithm: sha256WithRSAEncryption
44:7b:3a:e5:f8:b0:ef:22:c2:50:40:6d:b7:33:93:4c:98:0e:
2a:84:8d:b6:93:cd:94:94:67:16:0d:68:0b:bb:a1:40:b3:e9:
a7:79:05:94:4a:04:c9:4c:51:e9:4f:8b:6b:14:e9:fe:ed:9a:
ba:88:f9:bb:f3:ae:76:64:2b:4b:05:d4:22:b4:59:37:be:81:
07:8a:f8:7d:ec:cc:7d:6e:99:a4:53:be:bb:de:c7:9b:c9:8e:
1c:d7:4e:2e:49:ef:3a:73:32:04:cc:58:0b:70:0e:7b:28:1b:
63:3e:2d:30:d1:9e:4b:65:f6:44:68:f7:6a:14:83:3a:3e:a4:
ba:ab:0e:5d:cd:7d:4e:73:1b:49:2e:cd:e6:22:86:d5:da:2b:
a7:f1:7e:be:98:f7:64:2a:7c:e7:67:9b:7d:aa:a1:56:dc:c8:
f7:f2:ee:25:3a:5b:9c:85:93:79:97:b4:2c:47:f7:47:33:6c:
35:13:63:26:b3:4b:56:d3:79:87:86:e9:3f:21:46:d0:da:22:
7d:84:23:cc:b8:7e:cb:c6:59:da:d0:d2:3c:e6:19:6f:46:b2:
d3:2c:b1:ca:35:9c:39:89:57:02:52:46:a4:5e:c5:ae:00:3c:
2e:90:c5:af:1f:2c:18:13:0e:e9:15:ec:f9:cf:5e:4f:4e:b0:
06:70:97:88
-----BEGIN CERTIFICATE-----
MIIGNzCCBR+gAwIBAgISAY7uuaix7Gj6gErvUc3aQr7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDE4MDEwMjA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWRlNjFiMzBmNzdkNGE5OGNmMzc4MjE5MGQxMGUyZThiYzhkMGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMfddr8xmD2AcdYdGfdhmRRNI32U
zEfuiH01ieB7pgAM1rkOZkLXOVLURL43ASpnySXfatNzFk7AWJ9+mx2w6nYfM/Pj
YInVe55qk+hdakDmicXmrzHvDjvVA7idg8acbwYbb1pRxNcqEGVy2p6FBW3K4P7N
Jc2seFToNHJufOcLj9lo5lXASetYt1PouweNJYolJPcrpsns3Y6i1I+QjF8D1qhF
B+qvfyXsBR5N4TzgNMAbLbYqz5p8SVqYcb7dT5ba5MT+Pk5gs6DxBXilE8hrN5e6
nu8wkQZIVc7X3gr9d0hS/NgqqhZfSAO69qMzmIrEwlDxFW6oecdDTRROYwIDAQAB
o4IDQzCCAz8wHQYDVR0OBBYEFBXeYbMPd9SpjPN4IZDRDi6LyNDdMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvRmQ1aHN3OTMxS21NODNnaGtORU9Mb3ZJME4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBVwYIKwYBBQUHAQcBAf8EggFGMIIBQjCCAT4EAgABMIIB
NgMEAQWN6gMEAB/AqwMEAB/AtAMEBC7lYAMEAFqdBQMEAFqdEAMEAFqdHgMEAFqd
IgMEAFqdOgMEAVqdRAMEAVqdUAMEAFqdbQMEAFqdcwMEAFw2RQMEAFw2WgMEAFw2
dTAMAwQBXh+GAwQAXh+IAwQAXh+TAwQBXh+eAwQAXh+wMAwDBABeH8EDBABeH8QD
BABeH8oDBAFeH84DBABeH9IDBABeH9QDBABeH90DBABeH+UDBAFeH/ADBABeH/MD
BAFeH/YDBABeH/oDBABeH/0DBABeH/8DBAG8EXQDBAG8EnADBAC8EnQDBAC8SYsD
BAC8SY0DBAG8SZADBAC8SZMDBAC8SZcDBAC8SZoDBAC8SZ4DBAC8SagDBAG8SaoD
BAC8SbcDBADVjiIDBADVjigDBADVjjkwDQYJKoZIhvcNAQELBQADggEBAER7OuX4
sO8iwlBAbbczk0yYDiqEjbaTzZSUZxYNaAu7oUCz6ad5BZRKBMlMUelPi2sU6f7t
mrqI+bvzrnZkK0sF1CK0WTe+gQeK+H3szH1umaRTvrvex5vJjhzXTi5J7zpzMgTM
WAtwDnsoG2M+LTDRnktl9kRo92oUgzo+pLqrDl3NfU5zG0kuzeYihtXaK6fxfr6Y
92QqfOdnm32qoVbcyPfy7iU6W5yFk3mXtCxH90czbDUTYyazS1bTeYeG6T8hRtDa
In2EI8y4fsvGWdrQ0jzmGW9GstMssco1nDmJVwJSRqRexa4APC6Qxa8fLBgTDukV
7PnPXk9OsAZwl4g=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:55 2024 by rpki-client on console-fra.rpki-client.org