Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4OQwfZkcyXDbRe4W-gsjkc_695A.roa
File: 4OQwfZkcyXDbRe4W-gsjkc_695A.roa (raw, json)
Hash identifier: fS26Joswg/ibsJhnrygBxNQc7gapBemMJ4N8mTF5dC0=
Subject key identifier: E0:E4:30:7D:99:1C:C9:70:DB:45:EE:16:FA:0B:23:91:CF:FA:F7:90
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019367EE98B95A11027B06AD4DA2A032AF6C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4OQwfZkcyXDbRe4W-gsjkc_695A.roa
Signing time: Tue 26 Nov 2024 10:05:10 +0000
ROA not before: Tue 26 Nov 2024 10:05:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60461
IP address blocks: 5.83.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 10:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:ee:98:b9:5a:11:02:7b:06:ad:4d:a2:a0:32:af:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Nov 26 10:05:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0e4307d991cc970db45ee16fa0b2391cffaf790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:73:7f:71:bb:0f:aa:d7:b4:21:dc:90:e4:be:
9f:dc:98:b4:f2:5e:36:f7:11:f3:ee:3f:47:a2:45:
bd:77:ec:1c:55:19:a0:e5:b7:3f:68:a8:cd:47:68:
68:67:c3:7d:17:66:b5:ba:11:e9:31:f9:07:4b:df:
40:0f:db:bb:a4:e5:32:70:60:19:f0:2a:d1:0b:db:
4c:ed:25:eb:49:81:fa:97:45:e7:fc:63:dc:72:9d:
f5:a1:dd:c6:1e:6f:1c:e1:c4:a7:90:1e:f3:5f:23:
7e:61:cc:f7:4f:e3:75:ed:6a:fb:75:7b:52:ec:8f:
ce:24:d6:fd:a0:8f:86:73:ee:f4:c9:35:ea:99:1e:
5c:5d:97:a5:c4:eb:f5:69:18:17:10:59:9c:6e:29:
a9:4d:ef:1c:ee:93:a4:b3:19:5b:c4:5a:b7:e5:08:
3d:88:66:6b:61:91:12:04:82:d6:25:22:16:17:20:
34:63:9d:2d:85:bd:56:81:62:67:ac:28:2d:f5:88:
ab:d1:a7:ac:8e:56:d2:ea:c8:e3:ef:af:07:e7:ff:
35:69:bd:8c:ba:9f:d9:41:4a:3a:29:82:7e:43:f3:
09:a8:bc:2d:cd:b2:75:0c:bd:a4:cc:35:40:4d:bb:
39:7a:87:c0:e9:2c:af:1e:14:d7:94:a8:fd:de:78:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E4:30:7D:99:1C:C9:70:DB:45:EE:16:FA:0B:23:91:CF:FA:F7:90
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/4OQwfZkcyXDbRe4W-gsjkc_695A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:42:d8:3f:39:26:e0:bf:3c:eb:83:9f:d1:7a:d4:fa:02:32:
14:4c:c8:b6:dd:1f:b2:e1:5a:40:26:87:40:3d:ab:af:a0:d9:
f3:c5:14:c7:52:77:70:be:7a:42:18:31:f9:e4:97:59:23:b7:
6e:0b:35:43:a1:a1:e5:b3:02:68:9d:4d:0c:0d:0c:f5:2d:be:
52:d2:27:87:5a:bf:b9:e8:28:c2:dd:9c:92:07:bc:b7:15:b8:
7e:a6:48:5b:11:18:eb:c4:6d:70:6d:4f:76:d7:cd:87:cf:b8:
c9:fa:dc:47:06:16:dc:d2:72:ae:3d:e4:6f:09:9f:4d:f5:ec:
de:9d:2e:44:54:a9:63:7d:d4:27:9d:25:47:d8:3f:1f:0b:b2:
d2:34:e9:03:11:63:5a:be:8e:20:e5:08:9e:55:de:e3:29:79:
00:d3:c3:52:a2:b5:7c:ce:0c:5d:ba:fa:66:32:06:cd:40:87:
a2:6c:c5:9f:ba:ea:46:04:3c:2c:3d:3a:0a:3b:8f:8d:27:62:
f5:47:36:63:03:5b:83:6a:21:60:a6:52:67:1c:a4:3d:10:a7:
31:d4:f0:64:66:01:de:9e:dc:a4:7a:4a:9b:e2:b3:be:46:1a:
72:b6:43:2b:ef:f3:b0:39:96:62:90:7a:3c:0a:77:f6:db:2b:
5d:49:0c:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNn7pi5WhECewatTaKgMq9sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMTI2MTAwNTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGU0MzA3ZDk5MWNjOTcwZGI0NWVlMTZmYTBiMjM5MWNmZmFmNzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnN/cbsPqte0IdyQ5L6f3Ji08l42
9xHz7j9HokW9d+wcVRmg5bc/aKjNR2hoZ8N9F2a1uhHpMfkHS99AD9u7pOUycGAZ
8CrRC9tM7SXrSYH6l0Xn/GPccp31od3GHm8c4cSnkB7zXyN+Ycz3T+N17Wr7dXtS
7I/OJNb9oI+Gc+70yTXqmR5cXZelxOv1aRgXEFmcbimpTe8c7pOksxlbxFq35Qg9
iGZrYZESBILWJSIWFyA0Y50thb1WgWJnrCgt9Yir0aesjlbS6sjj768H5/81ab2M
up/ZQUo6KYJ+Q/MJqLwtzbJ1DL2kzDVATbs5eofA6SyvHhTXlKj93nh64QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODkMH2ZHMlw20XuFvoLI5HP+veQMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvNE9Rd2Zaa2N5WERiUmU0Vy1nc2prY182OTVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOdMA0G
CSqGSIb3DQEBCwUAA4IBAQCWQtg/OSbgvzzrg5/RetT6AjIUTMi23R+y4VpAJodA
PauvoNnzxRTHUndwvnpCGDH55JdZI7duCzVDoaHlswJonU0MDQz1Lb5S0ieHWr+5
6CjC3ZySB7y3Fbh+pkhbERjrxG1wbU92182Hz7jJ+txHBhbc0nKuPeRvCZ9N9eze
nS5EVKljfdQnnSVH2D8fC7LSNOkDEWNavo4g5QieVd7jKXkA08NSorV8zgxduvpm
MgbNQIeibMWfuupGBDwsPToKO4+NJ2L1RzZjA1uDaiFgplJnHKQ9EKcx1PBkZgHe
ntykekqb4rO+RhpytkMr7/OwOZZikHo8Cnf22ytdSQy4
-----END CERTIFICATE-----
Generated at Sat Apr 12 03:22:47 2025 by rpki-client