Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5fbft50gOt6RC9KmafSv91AG_Jo.roa
File: 5fbft50gOt6RC9KmafSv91AG_Jo.roa (raw, json)
Hash identifier: RpfvAul6547NNeLSbaE9gi0LjN9F3EDK5/izbXxB9To=
Subject key identifier: E5:F6:DF:B7:9D:20:3A:DE:91:0B:D2:A6:69:F4:AF:F7:50:06:FC:9A
Certificate issuer: /CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Certificate serial: 018CC42494C6CAACCE496594121F12D7798B
Authority key identifier: E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5fbft50gOt6RC9KmafSv91AG_Jo.roa
Signing time: Mon 01 Jan 2024 08:29:40 +0000
ROA not before: Mon 01 Jan 2024 08:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33993
IP address blocks: 46.160.192.0/21 maxlen: 21
46.160.200.0/21 maxlen: 21
46.160.208.0/21 maxlen: 21
217.194.240.0/20 maxlen: 20
46.160.216.0/21 maxlen: 21
217.194.240.0/21 maxlen: 21
217.194.248.0/21 maxlen: 21
Validation: Failed, certificate revoked on Sun 19 May 2024 23:55:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:94:c6:ca:ac:ce:49:65:94:12:1f:12:d7:79:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e520446f79ffc2d7c3a9ef340ce9de25723a719a
Validity
Not Before: Jan 1 08:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5f6dfb79d203ade910bd2a669f4aff75006fc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:7c:fa:37:f9:5a:4b:b1:f2:35:ae:00:e3:
89:d8:93:05:39:39:f4:97:03:20:f5:49:6f:c4:5b:
ab:0d:df:10:f3:b5:b1:5f:31:56:6d:0b:07:2f:fc:
5e:c3:73:45:0c:d3:54:38:50:4a:4b:de:a6:a1:76:
45:e3:06:97:30:e7:ec:31:ef:64:0f:2f:75:d6:ed:
ff:27:2a:af:f8:b0:9d:ba:d9:86:cc:62:72:92:c9:
f7:51:63:2a:75:60:bf:36:34:dc:e6:d4:28:38:4e:
ac:25:35:e4:73:98:47:50:7c:f6:0a:c8:ac:00:8c:
56:aa:27:32:f7:b0:2d:85:6c:96:33:2e:b4:1d:83:
52:5c:56:65:2c:09:de:5b:0b:59:51:ed:1e:b7:2d:
cc:c8:36:fc:50:bb:5e:63:67:fc:1e:69:b6:ad:e8:
0e:66:a0:7d:cc:6f:e4:b7:72:1f:c1:da:56:0f:86:
d9:40:74:fc:14:32:7e:44:06:d6:e7:e1:64:80:dd:
4c:f7:10:78:7c:3a:bd:91:74:30:e0:ce:79:bf:ed:
0c:b2:fd:45:77:60:d2:c8:22:c5:8e:03:85:1c:4a:
20:41:dc:37:31:ea:9c:59:80:54:66:ed:7f:6a:68:
e3:e4:b6:4e:47:b0:e7:24:6a:d1:32:d5:58:58:6a:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F6:DF:B7:9D:20:3A:DE:91:0B:D2:A6:69:F4:AF:F7:50:06:FC:9A
X509v3 Authority Key Identifier:
keyid:E5:20:44:6F:79:FF:C2:D7:C3:A9:EF:34:0C:E9:DE:25:72:3A:71:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5SBEb3n_wtfDqe80DOneJXI6cZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5fbft50gOt6RC9KmafSv91AG_Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/011ef2-7012-4a6e-8a1c-0e0e137e5591/1/5SBEb3n_wtfDqe80DOneJXI6cZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.160.192.0/19
217.194.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a7:26:ee:43:ce:60:a5:6b:d3:de:4a:2e:4c:d8:7b:fa:7e:48:
11:34:0a:09:2b:46:d8:1f:96:e8:36:5e:f5:bb:25:9e:04:63:
57:b5:d9:6a:94:4e:84:51:10:92:cb:b3:cb:57:eb:47:5c:f1:
a2:b0:a9:b0:ab:28:b2:de:3a:0d:ba:8f:0d:63:3c:f8:9d:4f:
94:fa:c5:f9:f6:b6:20:e9:29:d6:6c:8a:28:79:c5:21:eb:6c:
f1:03:c1:14:d1:17:6d:90:7d:4a:d0:58:70:bd:71:98:4b:c8:
02:d5:ce:4e:b1:70:2c:0a:d6:80:bb:a7:2d:f1:44:d5:fc:26:
d5:15:b7:fa:43:8d:d4:bd:ae:5b:57:71:70:27:3f:8d:f8:0e:
c6:69:45:b8:11:cc:4b:19:23:90:83:4b:07:3a:85:d3:5f:69:
b4:91:a8:72:c3:ba:4b:5e:cb:ac:09:e9:a9:10:71:8d:43:10:
eb:41:9b:e2:86:93:0b:37:b4:82:db:5b:61:6f:06:47:21:75:
69:5a:c4:03:21:9b:04:56:dd:2b:84:14:b4:60:46:c9:b9:b8:
d0:20:a4:37:5e:16:cd:a6:ae:d2:40:c8:0d:66:b2:85:5b:cc:
b6:23:e0:71:ed:54:e5:a4:1e:ac:e0:4c:53:51:55:2f:06:e9:
0a:c7:4d:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJJTGyqzOSWWUEh8S13mLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MjA0NDZmNzlmZmMyZDdjM2E5ZWYzNDBjZTlkZTI1NzIz
YTcxOWEwHhcNMjQwMTAxMDgyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWY2ZGZiNzlkMjAzYWRlOTEwYmQyYTY2OWY0YWZmNzUwMDZmYzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryx8+jf5Wkux8jWuAOOJ2JMFOTn0
lwMg9UlvxFurDd8Q87WxXzFWbQsHL/xew3NFDNNUOFBKS96moXZF4waXMOfsMe9k
Dy911u3/Jyqv+LCdutmGzGJyksn3UWMqdWC/NjTc5tQoOE6sJTXkc5hHUHz2Csis
AIxWqicy97AthWyWMy60HYNSXFZlLAneWwtZUe0ety3MyDb8ULteY2f8Hmm2regO
ZqB9zG/kt3IfwdpWD4bZQHT8FDJ+RAbW5+FkgN1M9xB4fDq9kXQw4M55v+0Msv1F
d2DSyCLFjgOFHEogQdw3MeqcWYBUZu1/amjj5LZOR7DnJGrRMtVYWGrZ/wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOX237edIDrekQvSpmn0r/dQBvyaMB8GA1UdIwQY
MBaAFOUgRG95/8LXw6nvNAzp3iVyOnGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMt
MGUwZTEzN2U1NTkxLzEvNWZiZnQ1MGdPdDZSQzlLbWFmU3Y5MUFHX0pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTFlZjItNzAxMi00YTZlLThhMWMtMGUwZTEzN2U1NTkx
LzEvNVNCRWIzbl93dGZEcWU4MERPbmVKWEk2Y1pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLqDAAwQE
2cLwMA0GCSqGSIb3DQEBCwUAA4IBAQCnJu5DzmCla9PeSi5M2Hv6fkgRNAoJK0bY
H5boNl71uyWeBGNXtdlqlE6EURCSy7PLV+tHXPGisKmwqyiy3joNuo8NYzz4nU+U
+sX59rYg6SnWbIooecUh62zxA8EU0RdtkH1K0FhwvXGYS8gC1c5OsXAsCtaAu6ct
8UTV/CbVFbf6Q43Uva5bV3FwJz+N+A7GaUW4EcxLGSOQg0sHOoXTX2m0kahyw7pL
XsusCempEHGNQxDrQZvihpMLN7SC21thbwZHIXVpWsQDIZsEVt0rhBS0YEbJubjQ
IKQ3XhbNpq7SQMgNZrKFW8y2I+Bx7VTlpB6s4ExTUVUvBukKx02x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:47 2024 by rpki-client on console-fra.rpki-client.org