Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/360LJQok9jolfMIHGleYmJ_8ICw.roa
File: 360LJQok9jolfMIHGleYmJ_8ICw.roa (raw, json)
Hash identifier: duTLH2/ZwjKCvbRxDXg6iKwIUhni5wG8uLz2jLFswXM=
Subject key identifier: DF:AD:0B:25:0A:24:F6:3A:25:7C:C2:07:1A:57:98:98:9F:FC:20:2C
Certificate issuer: /CN=4e42466070ff8c3cc967da48e14da12df71b2671
Certificate serial: 018571957F8405DB023F6087F3869D91D8EC
Authority key identifier: 4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/360LJQok9jolfMIHGleYmJ_8ICw.roa
Signing time: Mon 02 Jan 2023 08:25:00 +0000
ROA not before: Mon 02 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15600
IP address blocks: 5.153.240.0/21 maxlen: 21
185.74.152.0/22 maxlen: 22
2a00:d560::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:7f:84:05:db:02:3f:60:87:f3:86:9d:91:d8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e42466070ff8c3cc967da48e14da12df71b2671
Validity
Not Before: Jan 2 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfad0b250a24f63a257cc2071a5798989ffc202c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:9a:b4:c3:d4:3d:1d:db:4b:78:42:24:ca:
b1:23:3e:22:7a:52:40:d9:01:09:18:6a:b5:e4:32:
6f:77:fa:da:97:ed:6b:e9:d4:8c:b9:78:a1:56:81:
7f:39:61:06:48:c8:ed:00:e0:34:18:38:b7:eb:05:
07:98:98:4f:87:d1:66:d1:0d:9c:9b:dc:8e:12:7c:
0f:23:ab:30:a5:0e:cd:6a:02:8c:f9:17:a8:e0:0b:
a0:05:07:05:ac:b6:82:c0:e7:9d:35:5e:0f:87:b7:
ab:d0:86:c6:b2:49:47:f5:37:55:78:ab:0c:87:c6:
16:02:62:38:51:83:55:85:4a:52:85:c0:65:d6:f0:
44:d6:32:3e:65:23:37:72:68:9f:60:f9:89:8d:5c:
1d:74:42:d7:86:b6:e8:8a:18:8d:d0:7a:9e:17:a3:
44:69:aa:8f:a0:50:84:81:32:d6:cc:38:f2:a3:67:
00:df:f3:94:e8:d5:8f:1d:c0:8e:55:cd:1a:e3:28:
1e:1c:64:19:d7:99:aa:1a:b2:a8:1b:27:b4:ae:20:
7e:50:3a:5a:b8:93:cf:e1:4a:51:2a:ca:0e:2d:a4:
9a:56:0f:e4:f8:90:a3:94:a4:e6:e6:54:f1:cb:48:
99:f3:23:93:5b:0f:a3:96:1c:bd:ca:d8:bd:aa:f1:
df:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AD:0B:25:0A:24:F6:3A:25:7C:C2:07:1A:57:98:98:9F:FC:20:2C
X509v3 Authority Key Identifier:
keyid:4E:42:46:60:70:FF:8C:3C:C9:67:DA:48:E1:4D:A1:2D:F7:1B:26:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/360LJQok9jolfMIHGleYmJ_8ICw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/26b619-55cf-4489-a9b3-58a20f34f2ec/1/TkJGYHD_jDzJZ9pI4U2hLfcbJnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.240.0/21
185.74.152.0/22
IPv6:
2a00:d560::/29
Signature Algorithm: sha256WithRSAEncryption
25:ce:74:63:82:52:8a:04:68:95:e2:96:8b:45:2b:3f:67:46:
0e:76:5e:90:c4:eb:2c:f2:ec:4c:ca:f6:50:ee:bc:e6:7f:00:
f7:71:0d:bc:43:92:0d:6c:5a:28:89:c0:09:ff:a2:81:e7:e0:
81:81:c6:de:7c:c6:bc:4f:fa:36:48:0c:a5:58:0c:f1:91:00:
70:23:8e:7c:8b:8d:12:9d:8e:35:f2:c1:0c:28:9a:c6:e4:e7:
ae:04:c7:57:c4:db:d3:e1:44:46:7d:c3:25:0e:d4:e8:9e:4f:
4e:33:83:48:fa:06:a8:38:98:ab:e7:95:d1:46:85:d5:5d:a6:
b1:9f:ef:f4:cc:10:f6:51:4b:e3:56:59:49:90:45:ec:d5:db:
b6:48:8f:99:4a:b7:22:bf:f0:0e:b3:e8:c5:a6:5e:31:11:91:
a2:43:5c:26:99:66:5b:7e:f9:49:14:c3:5a:9d:15:72:8a:52:
18:2a:48:74:19:44:7d:be:fe:4c:78:45:81:01:ae:71:96:69:
b5:71:34:16:96:d5:b8:52:d9:22:77:6f:f2:9c:bd:4c:d3:48:
f1:c5:8e:34:cb:47:90:15:e8:08:cf:e2:9b:44:37:12:a7:44:
25:b5:4f:38:95:da:62:3b:1a:61:0d:43:24:3f:32:b5:d4:70:
48:69:87:8d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVxlX+EBdsCP2CH84adkdjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI0NjYwNzBmZjhjM2NjOTY3ZGE0OGUxNGRhMTJkZjcx
YjI2NzEwHhcNMjMwMTAyMDgyNTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmFkMGIyNTBhMjRmNjNhMjU3Y2MyMDcxYTU3OTg5ODlmZmMyMDJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxqatMPUPR3bS3hCJMqxIz4ielJA
2QEJGGq15DJvd/ral+1r6dSMuXihVoF/OWEGSMjtAOA0GDi36wUHmJhPh9Fm0Q2c
m9yOEnwPI6swpQ7NagKM+Reo4AugBQcFrLaCwOedNV4Ph7er0IbGsklH9TdVeKsM
h8YWAmI4UYNVhUpShcBl1vBE1jI+ZSM3cmifYPmJjVwddELXhrboihiN0HqeF6NE
aaqPoFCEgTLWzDjyo2cA3/OU6NWPHcCOVc0a4ygeHGQZ15mqGrKoGye0riB+UDpa
uJPP4UpRKsoOLaSaVg/k+JCjlKTm5lTxy0iZ8yOTWw+jlhy9yti9qvHf5wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFN+tCyUKJPY6JXzCBxpXmJif/CAsMB8GA1UdIwQY
MBaAFE5CRmBw/4w8yWfaSOFNoS33GyZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKR1lIRF9qRHpKWjlwSTRVMmhMZmNiSm5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yNmI2MTktNTVjZi00NDg5LWE5YjMt
NThhMjBmMzRmMmVjLzEvMzYwTEpRb2s5am9sZk1JSEdsZVltSl84SUN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8yNmI2MTktNTVjZi00NDg5LWE5YjMtNThhMjBmMzRmMmVj
LzEvVGtKR1lIRF9qRHpKWjlwSTRVMmhMZmNiSm5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZnwAwQC
uUqYMA0EAgACMAcDBQMqANVgMA0GCSqGSIb3DQEBCwUAA4IBAQAlznRjglKKBGiV
4paLRSs/Z0YOdl6QxOss8uxMyvZQ7rzmfwD3cQ28Q5INbFooicAJ/6KB5+CBgcbe
fMa8T/o2SAylWAzxkQBwI458i40SnY418sEMKJrG5OeuBMdXxNvT4URGfcMlDtTo
nk9OM4NI+gaoOJir55XRRoXVXaaxn+/0zBD2UUvjVllJkEXs1du2SI+ZSrciv/AO
s+jFpl4xEZGiQ1wmmWZbfvlJFMNanRVyilIYKkh0GUR9vv5MeEWBAa5xlmm1cTQW
ltW4Utkid2/ynL1M00jxxY40y0eQFegIz+KbRDcSp0QltU84ldpiOxphDUMkPzK1
1HBIaYeN
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org