Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O1xv2ydZ4chS-6YEm5_xFh1FUDQ.roa
File: O1xv2ydZ4chS-6YEm5_xFh1FUDQ.roa (raw, json)
Hash identifier: OkTacshTofcoNKse0uimmAw5yBF6kM7fdWWifnMFlEU=
Subject key identifier: 3B:5C:6F:DB:27:59:E1:C8:52:FB:A6:04:9B:9F:F1:16:1D:45:50:34
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01929268C35985EF35128BB6C3F7A1649B5B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O1xv2ydZ4chS-6YEm5_xFh1FUDQ.roa
Signing time: Tue 15 Oct 2024 22:59:52 +0000
ROA not before: Tue 15 Oct 2024 22:59:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214537
IP address blocks: 5.175.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 11:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:92:68:c3:59:85:ef:35:12:8b:b6:c3:f7:a1:64:9b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 15 22:59:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b5c6fdb2759e1c852fba6049b9ff1161d455034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:c5:df:51:52:d0:d0:9f:ac:49:7d:02:24:16:
8f:7a:69:7f:b9:89:a7:8d:3f:7a:97:44:89:9c:e7:
48:f2:5e:cf:4e:dc:96:56:3c:ed:c4:e0:5c:1c:4a:
86:1c:3c:9d:32:12:59:c9:44:dd:16:eb:0d:2d:68:
40:99:ce:19:69:7a:42:49:f5:90:5c:7f:31:f1:b3:
6e:d1:ce:20:9f:f6:96:98:8e:b6:ed:e1:9e:53:cf:
c9:40:96:07:a4:05:0e:8d:26:ab:e8:cb:de:4a:11:
3a:8c:cf:ec:64:f6:52:95:47:7e:4a:2f:2e:ee:5f:
6c:d4:87:50:90:c1:82:1b:df:c7:ac:af:b1:e4:6f:
7e:30:75:a7:82:36:54:bf:73:15:6e:14:79:6c:fd:
53:06:38:ff:56:45:cb:91:79:28:a4:85:e9:d9:78:
8b:d9:e1:3c:70:ab:7a:e7:41:d8:25:f6:07:12:e2:
84:39:ae:ca:b3:19:00:29:2a:54:0e:75:39:41:5d:
ce:2a:ba:ff:f8:aa:8d:55:4e:9c:c7:13:95:c2:70:
60:5d:87:e6:33:98:fb:62:ff:b0:a3:ae:3d:ac:de:
0e:6f:78:f9:0f:68:a9:1a:08:56:ee:52:ca:b1:59:
ff:ae:76:19:0b:cd:39:39:08:b7:95:8e:2a:0b:80:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:5C:6F:DB:27:59:E1:C8:52:FB:A6:04:9B:9F:F1:16:1D:45:50:34
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/O1xv2ydZ4chS-6YEm5_xFh1FUDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.134.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ba:06:06:24:00:c7:be:f1:45:50:12:c9:b3:76:91:61:f1:
88:5e:77:54:dd:76:8b:fa:6a:9a:ce:3a:c9:16:79:54:ce:e9:
d1:0f:d0:49:ae:29:29:4f:7a:7d:3d:17:1b:67:dd:ba:61:00:
55:56:af:df:f8:8a:41:8b:33:69:a2:d8:dd:58:56:9e:46:61:
fa:b3:98:fa:cc:de:62:d5:be:8a:94:8d:56:11:0e:97:7d:30:
64:d6:e1:5e:61:f1:03:55:1d:63:f4:b4:b1:1c:3b:d0:27:e3:
c5:27:a7:0d:c9:73:49:36:6b:a0:59:4a:88:64:35:a0:b9:9e:
5f:3c:dc:8b:45:8a:d6:45:23:14:6b:92:f0:6f:56:c4:6a:3c:
04:a1:6a:43:e5:d8:7c:7d:6b:6c:18:b6:86:cc:18:b2:c5:aa:
6a:02:b9:0e:99:93:84:f4:1c:3d:41:08:ec:d5:95:c3:ec:3b:
90:0e:0e:af:be:56:98:3e:03:ca:6e:f9:52:6b:a8:31:23:2c:
2b:78:71:3c:b7:6a:ec:a3:90:53:b8:90:da:96:b0:bf:5b:e5:
82:67:76:d5:81:92:b6:ec:88:91:9f:2d:b9:85:d0:6e:23:0c:
e2:9e:73:0f:ff:ae:61:3f:45:cc:98:ee:b7:34:45:92:f2:02:
63:7c:19:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKSaMNZhe81Eou2w/ehZJtbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDE1MjI1OTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjVjNmZkYjI3NTllMWM4NTJmYmE2MDQ5YjlmZjExNjFkNDU1MDM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38XfUVLQ0J+sSX0CJBaPeml/uYmn
jT96l0SJnOdI8l7PTtyWVjztxOBcHEqGHDydMhJZyUTdFusNLWhAmc4ZaXpCSfWQ
XH8x8bNu0c4gn/aWmI627eGeU8/JQJYHpAUOjSar6MveShE6jM/sZPZSlUd+Si8u
7l9s1IdQkMGCG9/HrK+x5G9+MHWngjZUv3MVbhR5bP1TBjj/VkXLkXkopIXp2XiL
2eE8cKt650HYJfYHEuKEOa7KsxkAKSpUDnU5QV3OKrr/+KqNVU6cxxOVwnBgXYfm
M5j7Yv+wo649rN4Ob3j5D2ipGghW7lLKsVn/rnYZC805OQi3lY4qC4BV6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDtcb9snWeHIUvumBJuf8RYdRVA0MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvTzF4djJ5ZFo0Y2hTLTZZRW01X3hGaDFGVURRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABa+GMA0G
CSqGSIb3DQEBCwUAA4IBAQBZugYGJADHvvFFUBLJs3aRYfGIXndU3XaL+mqazjrJ
FnlUzunRD9BJrikpT3p9PRcbZ926YQBVVq/f+IpBizNpotjdWFaeRmH6s5j6zN5i
1b6KlI1WEQ6XfTBk1uFeYfEDVR1j9LSxHDvQJ+PFJ6cNyXNJNmugWUqIZDWguZ5f
PNyLRYrWRSMUa5Lwb1bEajwEoWpD5dh8fWtsGLaGzBiyxapqArkOmZOE9Bw9QQjs
1ZXD7DuQDg6vvlaYPgPKbvlSa6gxIywreHE8t2rso5BTuJDalrC/W+WCZ3bVgZK2
7IiRny25hdBuIwzinnMP/65hP0XMmO63NEWS8gJjfBmv
-----END CERTIFICATE-----
Generated at Wed Nov 13 14:36:38 2024 by rpki-client on console-fra.rpki-client.org