Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T3AdgqihO1Xs7UeJUDwlolOjCBU.roa
File: T3AdgqihO1Xs7UeJUDwlolOjCBU.roa (raw, json)
Hash identifier: 3VrMVS1Z3fBOwmVeAXtFlc99bx+mMqAi9mBovXrJRys=
Subject key identifier: 4F:70:1D:82:A8:A1:3B:55:EC:ED:47:89:50:3C:25:A2:53:A3:08:15
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192C2E5DCD990B9F914FE49E19ADDA41567
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T3AdgqihO1Xs7UeJUDwlolOjCBU.roa
Signing time: Fri 25 Oct 2024 08:58:17 +0000
ROA not before: Fri 25 Oct 2024 08:58:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214347
IP address blocks: 5.83.138.0/24 maxlen: 24
5.83.153.0/24 maxlen: 24
5.83.154.0/24 maxlen: 24
77.90.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Oct 2024 04:12:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c2:e5:dc:d9:90:b9:f9:14:fe:49:e1:9a:dd:a4:15:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 25 08:58:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f701d82a8a13b55eced4789503c25a253a30815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6d:13:76:ca:f1:28:e9:6f:4c:ef:b7:53:94:
00:c3:7b:3b:ab:f4:e3:39:0a:d6:2f:69:be:da:d2:
5d:03:ed:19:e7:a8:6c:0d:aa:d0:f4:2c:92:61:ae:
c8:80:3e:b7:ad:6f:22:4b:f5:c1:7e:d2:47:8d:df:
44:29:2e:3e:89:fb:d3:75:2d:da:3b:e0:01:81:00:
6c:a8:0f:3d:96:c9:1d:df:60:7c:10:73:03:30:c0:
28:1f:41:34:3c:9b:91:4f:3c:66:54:48:20:90:65:
b3:d4:6c:a5:b3:96:99:36:23:f6:65:50:91:cc:ee:
66:7b:99:1b:4b:67:0a:20:e8:ec:ba:0e:65:2e:f6:
c6:01:bc:59:59:1c:ed:93:37:39:a9:52:de:5c:48:
58:c8:fb:65:9e:a7:05:35:fa:63:64:d1:66:6d:9c:
be:ac:88:18:f9:43:fa:75:4d:8d:cc:c6:ec:0a:19:
c6:ab:69:a5:fb:a1:48:10:e2:95:7f:63:60:de:86:
87:3d:d2:4b:72:b7:18:ad:a7:73:b6:1c:d7:9d:f5:
83:5e:c4:d3:c7:b2:22:4c:80:c2:33:b2:52:6a:50:
b5:4b:d1:bd:01:30:39:37:b3:df:ce:ed:d7:ad:55:
6b:0c:4b:02:46:85:c3:b6:4b:68:8b:eb:a4:e7:d6:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:70:1D:82:A8:A1:3B:55:EC:ED:47:89:50:3C:25:A2:53:A3:08:15
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/T3AdgqihO1Xs7UeJUDwlolOjCBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.138.0/24
5.83.153.0-5.83.154.255
77.90.44.0/24
Signature Algorithm: sha256WithRSAEncryption
67:f9:a7:74:fd:46:4c:7d:26:09:c7:ff:90:3c:84:ac:8c:bd:
7d:20:42:33:27:39:47:38:23:5f:06:fc:0b:07:92:f6:2a:9e:
12:94:55:55:39:a0:65:84:f6:38:08:f0:ed:6e:28:00:b4:9d:
96:d8:c4:5b:38:46:5c:8d:71:2d:65:b8:45:21:ba:81:da:20:
0f:64:59:ca:28:43:2a:cc:fc:2b:db:3f:c5:1d:2c:82:65:88:
5c:ae:f9:0a:94:d3:80:bb:ea:3b:49:4b:8a:46:bc:27:c0:4d:
0b:4b:63:93:36:05:3c:af:53:e7:4e:eb:7d:7c:be:d8:23:06:
96:1d:10:4f:1a:ce:56:87:24:1c:48:53:f4:7c:31:1f:cd:53:
7f:21:1e:cc:18:e7:dc:ac:65:2d:6b:85:5d:25:95:18:6b:1f:
8c:72:9a:fb:c4:e0:c1:3b:7f:ed:27:fa:93:03:97:1a:7a:d2:
55:dd:10:55:fe:ed:7d:1d:06:ec:d1:31:83:ad:9d:8d:64:16:
a4:2f:0f:2b:24:e8:d7:b5:7b:27:73:27:02:08:68:48:f7:01:
dc:e9:80:96:85:91:6c:70:c3:08:8e:f9:95:69:c7:5f:81:02:
51:0e:b8:3a:8e:9b:54:e7:30:43:66:6c:f9:53:70:9c:85:b6:
16:cb:ee:93
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZLC5dzZkLn5FP5J4ZrdpBVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDI1MDg1ODE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjcwMWQ4MmE4YTEzYjU1ZWNlZDQ3ODk1MDNjMjVhMjUzYTMwODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm0TdsrxKOlvTO+3U5QAw3s7q/Tj
OQrWL2m+2tJdA+0Z56hsDarQ9CySYa7IgD63rW8iS/XBftJHjd9EKS4+ifvTdS3a
O+ABgQBsqA89lskd32B8EHMDMMAoH0E0PJuRTzxmVEggkGWz1Gyls5aZNiP2ZVCR
zO5me5kbS2cKIOjsug5lLvbGAbxZWRztkzc5qVLeXEhYyPtlnqcFNfpjZNFmbZy+
rIgY+UP6dU2NzMbsChnGq2ml+6FIEOKVf2Ng3oaHPdJLcrcYradzthzXnfWDXsTT
x7IiTIDCM7JSalC1S9G9ATA5N7Pfzu3XrVVrDEsCRoXDtktoi+uk59ZjjQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFE9wHYKooTtV7O1HiVA8JaJTowgVMB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvVDNBZGdxaWhPMVhzN1VlSlVEd2xvbE9qQ0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQABVOKMAwD
BAAFU5kDBAAFU5oDBABNWiwwDQYJKoZIhvcNAQELBQADggEBAGf5p3T9Rkx9JgnH
/5A8hKyMvX0gQjMnOUc4I18G/AsHkvYqnhKUVVU5oGWE9jgI8O1uKAC0nZbYxFs4
RlyNcS1luEUhuoHaIA9kWcooQyrM/CvbP8UdLIJliFyu+QqU04C76jtJS4pGvCfA
TQtLY5M2BTyvU+dO6318vtgjBpYdEE8azlaHJBxIU/R8MR/NU38hHswY59ysZS1r
hV0llRhrH4xymvvE4ME7f+0n+pMDlxp60lXdEFX+7X0dBuzRMYOtnY1kFqQvDysk
6Ne1eydzJwIIaEj3AdzpgJaFkWxwwwiO+ZVpx1+BAlEOuDqOm1TnMENmbPlTcJyF
thbL7pM=
-----END CERTIFICATE-----
Generated at Sat Oct 26 05:41:47 2024 by rpki-client on console-fra.rpki-client.org