Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hWq_JuCU5p3Y-GZ-riJX6gz12Xs.roa
File: hWq_JuCU5p3Y-GZ-riJX6gz12Xs.roa (raw, json)
Hash identifier: 1AVHQsjcv+b+gk+n20apuwyruXtC9n79J1SgIUpjRQI=
Subject key identifier: 85:6A:BF:26:E0:94:E6:9D:D8:F8:66:7E:AE:22:57:EA:0C:F5:D9:7B
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0192600404ADEB550DAF1E14050B1FD2EEB5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hWq_JuCU5p3Y-GZ-riJX6gz12Xs.roa
Signing time: Sun 06 Oct 2024 04:08:49 +0000
ROA not before: Sun 06 Oct 2024 04:08:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 5.83.129.0/24 maxlen: 24
77.90.54.0/24 maxlen: 24
87.239.131.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 06 Oct 2024 20:41:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:60:04:04:ad:eb:55:0d:af:1e:14:05:0b:1f:d2:ee:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Oct 6 04:08:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=856abf26e094e69dd8f8667eae2257ea0cf5d97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8b:ba:e0:dc:76:47:ab:a2:e6:36:fc:07:fb:
3f:95:50:be:4b:4b:60:aa:4d:2b:28:cb:18:ad:69:
02:b1:66:2a:39:66:02:58:d0:87:7a:4f:06:b2:4d:
47:bf:14:94:0e:9f:eb:f1:bd:73:f4:19:11:ab:38:
a2:3c:04:25:47:94:9d:ad:0b:93:2f:b5:02:f0:11:
7a:3c:79:59:eb:24:71:85:c4:e2:ce:25:b2:7b:ea:
22:97:7a:43:b4:56:20:cb:aa:5d:56:6c:fd:03:06:
d2:6a:c6:5a:8f:1e:81:86:8a:60:f2:4e:08:57:a5:
aa:29:8d:68:4f:8e:70:99:d6:eb:fe:65:b8:01:60:
37:1e:57:d7:b6:db:6c:81:45:cf:3f:57:28:31:df:
83:e4:3a:b1:b5:00:af:3b:e1:49:15:f9:65:47:f8:
2b:67:dc:87:f0:2f:86:fd:b7:3b:6c:96:ae:65:85:
e3:0e:6a:00:88:b0:91:ee:e9:f5:44:3f:9a:f0:ce:
98:92:6b:65:0c:06:15:24:8c:86:b7:83:53:d0:55:
aa:62:32:44:b9:2a:73:27:0c:78:3d:a1:ac:a4:e1:
57:35:a1:fe:5d:56:8d:66:4b:27:29:bb:3f:e3:f9:
fc:2c:b2:1e:70:6c:ee:a1:dd:34:93:68:2d:ec:89:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6A:BF:26:E0:94:E6:9D:D8:F8:66:7E:AE:22:57:EA:0C:F5:D9:7B
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/hWq_JuCU5p3Y-GZ-riJX6gz12Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.129.0/24
77.90.54.0/24
87.239.131.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
48:76:66:31:61:41:e5:c2:d5:e3:3b:a6:c0:91:73:a0:69:21:
c9:98:53:02:18:c3:d0:c4:2a:91:7b:bd:13:8d:f8:a3:a1:8b:
98:59:b3:22:06:4e:be:29:90:06:61:d2:42:8f:61:50:5b:6b:
ea:92:ad:23:fa:00:09:2c:cc:ac:6c:18:cc:db:8c:ab:ac:24:
1f:86:ee:e0:70:6f:40:aa:b4:a1:a5:24:4a:25:65:e1:d7:16:
f4:f3:8b:2c:bc:80:92:f1:8f:95:e6:be:ac:ee:cd:80:88:d0:
bc:c8:3a:d6:cc:47:64:8b:07:99:9a:35:8e:7d:dc:fd:31:d5:
0b:5c:23:bd:07:42:ef:19:3a:9a:95:41:ae:7e:68:e5:56:0f:
f5:0f:eb:5f:e5:6b:52:e9:d6:dc:2d:bd:39:df:0e:2d:fb:f3:
f0:ff:ae:61:b4:cd:cc:2e:b7:40:34:14:1e:1c:35:79:00:7d:
8f:6f:e2:1a:6e:ba:9f:d2:0d:8f:5d:7c:b3:cb:c5:04:73:03:
6c:20:5c:21:5e:fd:97:93:79:9d:29:f4:e3:8a:77:2b:66:0e:
89:cf:e3:f0:e0:bb:97:21:e9:09:ae:7e:38:e9:f1:0b:e0:d3:
e6:07:b7:16:d3:c0:a6:a1:1e:30:cd:51:8d:83:12:19:4d:7a:
7c:f7:5c:66
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZJgBASt61UNrx4UBQsf0u61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5
YjIzNjIwHhcNMjQxMDA2MDQwODQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTZhYmYyNmUwOTRlNjlkZDhmODY2N2VhZTIyNTdlYTBjZjVkOTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ou64Nx2R6ui5jb8B/s/lVC+S0tg
qk0rKMsYrWkCsWYqOWYCWNCHek8Gsk1HvxSUDp/r8b1z9BkRqziiPAQlR5SdrQuT
L7UC8BF6PHlZ6yRxhcTiziWye+oil3pDtFYgy6pdVmz9AwbSasZajx6Bhopg8k4I
V6WqKY1oT45wmdbr/mW4AWA3HlfXtttsgUXPP1coMd+D5DqxtQCvO+FJFfllR/gr
Z9yH8C+G/bc7bJauZYXjDmoAiLCR7un1RD+a8M6YkmtlDAYVJIyGt4NT0FWqYjJE
uSpzJwx4PaGspOFXNaH+XVaNZksnKbs/4/n8LLIecGzuod00k2gt7ImQwwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIVqvybglOad2Phmfq4iV+oM9dl7MB8GA1UdIwQY
MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt
ZTFiZDg4ZDNmZDA3LzEvaFdxX0p1Q1U1cDNZLUdaLXJpSlg2Z3oxMlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3
LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABVOBAwQA
TVo2AwQAV++DAwQAXvmKMA0GCSqGSIb3DQEBCwUAA4IBAQBIdmYxYUHlwtXjO6bA
kXOgaSHJmFMCGMPQxCqRe70TjfijoYuYWbMiBk6+KZAGYdJCj2FQW2vqkq0j+gAJ
LMysbBjM24yrrCQfhu7gcG9AqrShpSRKJWXh1xb084ssvICS8Y+V5r6s7s2AiNC8
yDrWzEdkiweZmjWOfdz9MdULXCO9B0LvGTqalUGufmjlVg/1D+tf5WtS6dbcLb05
3w4t+/Pw/65htM3MLrdANBQeHDV5AH2Pb+Iabrqf0g2PXXyzy8UEcwNsIFwhXv2X
k3mdKfTjincrZg6Jz+Pw4LuXIekJrn446fEL4NPmB7cW08CmoR4wzVGNgxIZTXp8
91xm
-----END CERTIFICATE-----
Generated at Sun Oct 6 23:11:07 2024 by rpki-client on console-fra.rpki-client.org