Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GA5JMNqJz4oKZfb7JtFZdKNyEy4.roa
File: GA5JMNqJz4oKZfb7JtFZdKNyEy4.roa (raw, json)
Hash identifier: zqvWAxUq5IGEQUqDWtuJpzIXp1v9xJ7KdBjL5XefyZA=
Subject key identifier: 18:0E:49:30:DA:89:CF:8A:0A:65:F6:FB:26:D1:59:74:A3:72:13:2E
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B75A6F9BC75D40FD4CE8F1E89C102F64
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GA5JMNqJz4oKZfb7JtFZdKNyEy4.roa
Signing time: Tue 03 Sep 2024 10:07:22 +0000
ROA not before: Tue 03 Sep 2024 10:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57433
IP address blocks: 5.83.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 10:09:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b7:5a:6f:9b:c7:5d:40:fd:4c:e8:f1:e8:9c:10:2f:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 10:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=180e4930da89cf8a0a65f6fb26d15974a372132e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5d:65:3a:4e:14:2b:8d:6b:d0:ae:da:a9:c8:
05:4d:2e:78:73:f7:1d:c3:2a:2d:f6:17:42:33:64:
9b:fd:33:64:14:81:2b:1d:24:ce:75:14:37:d9:40:
e6:58:77:14:6c:c8:6c:d6:57:2b:bf:52:e5:78:bd:
51:26:39:0e:fb:de:5b:41:69:03:91:8f:89:e5:d3:
7f:1f:b3:9a:3f:f1:3e:ba:42:a5:da:d5:6f:ce:08:
1f:2c:37:48:a8:8e:71:f1:9a:a7:43:7e:02:bb:3d:
61:d5:72:7d:33:0a:6e:63:0d:0f:17:7b:94:ec:15:
33:dd:ee:9c:00:3a:37:40:46:6b:a5:08:45:45:d8:
f7:96:0a:58:64:cf:53:b1:a5:60:b9:cc:05:48:03:
af:c1:44:b4:a9:7d:52:c7:16:cc:35:3c:a5:88:c8:
3b:4a:74:32:ec:6c:f3:af:69:41:6c:d3:14:60:3d:
24:3b:a8:19:e1:7b:f1:74:36:e2:06:18:5f:9f:1a:
04:10:ec:8c:b0:7a:5f:0a:0d:bc:6c:ae:f7:d4:32:
4b:28:77:fa:a6:7f:7f:4c:33:26:25:fa:3f:48:4a:
51:4b:ae:8d:f7:e3:32:4e:f3:9c:95:7e:e0:da:dc:
f5:3b:06:58:34:44:34:60:79:b5:a2:43:b9:81:51:
57:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0E:49:30:DA:89:CF:8A:0A:65:F6:FB:26:D1:59:74:A3:72:13:2E
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/GA5JMNqJz4oKZfb7JtFZdKNyEy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.157.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e1:2d:19:8f:9a:9d:62:ee:00:b2:42:e2:08:fb:75:f4:b6:
09:25:23:f2:ff:da:e6:e4:a9:e9:4b:fd:69:e6:1c:e5:5f:0d:
95:56:40:52:33:0b:a6:ac:f2:5b:39:04:c5:4a:e1:d1:79:d3:
dc:47:6b:e8:7d:97:2c:21:6d:36:10:ea:d2:e0:bb:dd:89:fb:
da:b3:da:35:2d:1a:10:76:1f:78:81:4b:64:5d:13:ef:5c:f8:
49:3e:8a:be:15:63:c5:d2:02:b2:e3:68:79:75:ac:a4:98:3c:
4c:d5:b1:4e:21:19:9e:8b:cc:02:2b:57:49:2f:71:56:48:32:
79:5d:14:88:39:2d:7e:f3:65:0e:1d:41:32:e7:f9:53:35:02:
ab:6e:eb:7f:41:17:c4:0c:96:01:8f:a8:67:ea:64:60:c4:48:
ae:14:43:21:66:ad:f0:c8:ef:4e:6e:cf:ff:57:c2:6c:0f:e5:
b8:fd:3e:98:6e:2a:44:96:9b:0d:30:79:e4:e4:47:ca:d9:64:
a0:22:8d:9b:87:3b:b0:b8:a9:93:92:7c:68:92:ad:15:82:30:
b4:b8:65:59:2a:2a:ac:6a:0e:15:6b:85:1f:c7:22:61:8d:db:
e8:1b:07:cc:bd:5c:12:b9:03:0b:a1:38:b9:0f:13:80:ca:98:
6f:cb:f8:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZG3Wm+bx11A/Uzo8eicEC9kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQwOTAzMTAwNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxODBlNDkzMGRhODljZjhhMGE2NWY2ZmIyNmQxNTk3NGEzNzIxMzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF1lOk4UK41r0K7aqcgFTS54c/cd
wyot9hdCM2Sb/TNkFIErHSTOdRQ32UDmWHcUbMhs1lcrv1LleL1RJjkO+95bQWkD
kY+J5dN/H7OaP/E+ukKl2tVvzggfLDdIqI5x8ZqnQ34Cuz1h1XJ9MwpuYw0PF3uU
7BUz3e6cADo3QEZrpQhFRdj3lgpYZM9TsaVgucwFSAOvwUS0qX1SxxbMNTyliMg7
SnQy7Gzzr2lBbNMUYD0kO6gZ4XvxdDbiBhhfnxoEEOyMsHpfCg28bK731DJLKHf6
pn9/TDMmJfo/SEpRS66N9+MyTvOclX7g2tz1OwZYNEQ0YHm1okO5gVFX4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBgOSTDaic+KCmX2+ybRWXSjchMuMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvR0E1Sk1OcUp6NG9LWmZiN0p0RlpkS055RXk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOdMA0G
CSqGSIb3DQEBCwUAA4IBAQA04S0Zj5qdYu4AskLiCPt19LYJJSPy/9rm5KnpS/1p
5hzlXw2VVkBSMwumrPJbOQTFSuHRedPcR2vofZcsIW02EOrS4Lvdifvas9o1LRoQ
dh94gUtkXRPvXPhJPoq+FWPF0gKy42h5daykmDxM1bFOIRmei8wCK1dJL3FWSDJ5
XRSIOS1+82UOHUEy5/lTNQKrbut/QRfEDJYBj6hn6mRgxEiuFEMhZq3wyO9Obs//
V8JsD+W4/T6YbipElpsNMHnk5EfK2WSgIo2bhzuwuKmTknxokq0VgjC0uGVZKiqs
ag4Va4UfxyJhjdvoGwfMvVwSuQMLoTi5DxOAyphvy/h2
-----END CERTIFICATE-----
Generated at Tue Sep 3 13:04:12 2024 by rpki-client on console-fra.rpki-client.org