Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5i7KUBrtjn04On57XZLJzmRlRLk.roa
File: 5i7KUBrtjn04On57XZLJzmRlRLk.roa (raw, json)
Hash identifier: c5vMBrp7W+WoQXLqQM2OrGvLpaA9MOqCmr9ytGJiU98=
Subject key identifier: E6:2E:CA:50:1A:ED:8E:7D:38:3A:7E:7B:5D:92:C9:CE:64:65:44:B9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E1A0CF7A890995A499826B892044D1BAF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5i7KUBrtjn04On57XZLJzmRlRLk.roa
Signing time: Thu 07 Mar 2024 17:54:01 +0000
ROA not before: Thu 07 Mar 2024 17:54:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203511
IP address blocks: 2.56.108.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.94.171.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 25 Mar 2024 15:52:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1a:0c:f7:a8:90:99:5a:49:98:26:b8:92:04:4d:1b:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 7 17:54:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e62eca501aed8e7d383a7e7b5d92c9ce646544b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:c5:4e:52:80:3e:07:13:0c:4c:c2:db:8e:
af:62:e5:b8:35:3d:88:71:61:43:e4:3d:a4:cf:14:
08:34:e4:e0:fd:6f:90:8e:26:ea:54:0a:55:97:6b:
71:b4:1d:73:07:cb:76:67:6d:5e:e4:62:6e:8d:45:
52:0e:02:7b:36:01:22:5f:8d:2f:e5:97:85:9a:53:
e7:21:11:6d:3e:de:29:d9:18:b6:16:c0:00:c1:78:
49:c4:ba:64:97:9f:82:b5:70:92:7c:a4:4e:57:5f:
92:7e:e8:a2:49:65:9d:08:8f:2b:43:f1:05:2e:17:
50:38:17:70:5c:e9:7d:b6:d8:d1:db:f4:70:4b:9f:
b6:30:26:70:25:f1:c2:fa:ce:30:93:f6:79:05:02:
94:b2:f6:1f:4b:ab:bb:31:d5:f4:79:13:b2:e3:4a:
e2:e2:53:f5:57:0c:35:26:6c:eb:36:54:1b:c9:99:
15:09:73:47:84:fe:4e:21:10:09:cb:6b:dc:05:de:
32:75:18:51:32:8b:58:7d:a6:98:72:be:85:8c:98:
e1:55:5d:95:95:15:38:83:b0:dc:03:67:fc:4c:e6:
62:25:64:40:94:16:f0:ce:b9:39:f4:de:92:bd:c7:
0f:8f:1d:f7:44:df:26:fe:4a:96:36:a1:a2:02:5a:
62:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:CA:50:1A:ED:8E:7D:38:3A:7E:7B:5D:92:C9:CE:64:65:44:B9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/5i7KUBrtjn04On57XZLJzmRlRLk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/24
45.88.138.0/24
45.94.171.0/24
45.151.2.0/24
77.83.37.0/24
194.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9f:0e:03:03:d0:44:80:db:9f:10:ea:08:69:bb:05:e6:d9:
86:f3:83:a8:c5:78:23:61:59:94:b6:7f:f8:cb:60:0f:1d:fb:
ee:81:a5:d2:03:a5:92:12:d8:fc:0d:2b:83:c9:3d:bd:d9:e3:
f8:23:06:ae:6a:17:28:10:c2:dd:b2:29:c7:71:c5:cf:83:5e:
13:86:ef:29:aa:4a:f8:b2:da:92:53:87:7f:c2:3f:ac:d6:7f:
cf:a8:cf:2b:d3:de:36:21:43:3d:cd:79:51:48:0e:63:fe:66:
d5:ae:aa:52:fb:4c:3f:e3:25:4c:3d:ac:fd:d5:5c:d4:17:fa:
bd:53:60:60:06:9f:ce:aa:ee:94:a5:db:6a:89:e0:ce:36:73:
78:4b:72:72:2b:1c:17:92:78:e9:d8:1f:63:13:fc:11:d2:21:
23:c2:39:23:03:32:14:1f:71:f1:a1:ac:6f:43:6c:e0:20:f8:
0e:7f:e7:8b:ba:cc:b3:c1:47:65:29:53:9d:e0:7d:6a:e8:5a:
4d:2d:b9:e2:25:bf:3a:39:54:ba:e8:8b:71:2d:e2:92:b8:ab:
aa:16:19:fe:a2:1a:09:33:36:d2:d4:cf:0c:61:de:ac:bc:52:
a2:c6:7b:40:86:35:28:39:af:ec:71:9a:bc:29:58:ae:46:0f:
d3:d7:60:d3
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAY4aDPeokJlaSZgmuJIETRuvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMzA3MTc1NDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjJlY2E1MDFhZWQ4ZTdkMzgzYTdlN2I1ZDkyYzljZTY0NjU0NGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC7FTlKAPgcTDEzC246vYuW4NT2I
cWFD5D2kzxQINOTg/W+QjibqVApVl2txtB1zB8t2Z21e5GJujUVSDgJ7NgEiX40v
5ZeFmlPnIRFtPt4p2Ri2FsAAwXhJxLpkl5+CtXCSfKROV1+SfuiiSWWdCI8rQ/EF
LhdQOBdwXOl9ttjR2/RwS5+2MCZwJfHC+s4wk/Z5BQKUsvYfS6u7MdX0eROy40ri
4lP1Vww1JmzrNlQbyZkVCXNHhP5OIRAJy2vcBd4ydRhRMotYfaaYcr6FjJjhVV2V
lRU4g7DcA2f8TOZiJWRAlBbwzrk59N6SvccPjx33RN8m/kqWNqGiAlpilwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOYuylAa7Y59ODp+e12Syc5kZUS5MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvNWk3S1VCcnRqbjA0T241N1haTEp6bVJsUkxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAAjhsAwQA
LViKAwQALV6rAwQALZcCAwQATVMlAwQAwg80MA0GCSqGSIb3DQEBCwUAA4IBAQBb
nw4DA9BEgNufEOoIabsF5tmG84OoxXgjYVmUtn/4y2APHfvugaXSA6WSEtj8DSuD
yT292eP4IwauahcoEMLdsinHccXPg14Thu8pqkr4stqSU4d/wj+s1n/PqM8r0942
IUM9zXlRSA5j/mbVrqpS+0w/4yVMPaz91VzUF/q9U2BgBp/Oqu6UpdtqieDONnN4
S3JyKxwXknjp2B9jE/wR0iEjwjkjAzIUH3HxoaxvQ2zgIPgOf+eLusyzwUdlKVOd
4H1q6FpNLbniJb86OVS66ItxLeKSuKuqFhn+ohoJMzbS1M8MYd6svFKixntAhjUo
Oa/scZq8KViuRg/T12DT
-----END CERTIFICATE-----
Generated at Mon Mar 25 19:53:15 2024 by rpki-client on console-fra.rpki-client.org