Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eFdcwwBxT2c9onXkVnLJkY10AAo.roa
File: eFdcwwBxT2c9onXkVnLJkY10AAo.roa (raw, json)
Hash identifier: 65kWOOIRpK+LoHBApLoeP9NrTb3uZcrvMeyQHT/JgVA=
Subject key identifier: 78:57:5C:C3:00:71:4F:67:3D:A2:75:E4:56:72:C9:91:8D:74:00:0A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FA12A6B8C73DDE0F09A34F0D59D09942E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eFdcwwBxT2c9onXkVnLJkY10AAo.roa
Signing time: Wed 22 May 2024 16:37:42 +0000
ROA not before: Wed 22 May 2024 16:37:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47585
IP address blocks: 5.181.87.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a1:2a:6b:8c:73:dd:e0:f0:9a:34:f0:d5:9d:09:94:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 22 16:37:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78575cc300714f673da275e45672c9918d74000a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:78:16:d9:aa:59:4f:69:14:56:b6:89:cf:aa:
7c:bc:fb:6c:a3:be:f9:32:09:7e:f4:e4:04:f4:70:
1d:78:b9:82:5a:da:c1:f2:40:db:4f:fc:cd:d3:93:
f5:3a:82:40:f3:31:e5:c2:7f:f6:4e:4f:5e:44:d3:
92:3e:65:af:4c:53:c4:be:78:3f:fa:3e:8b:d6:fb:
1a:30:a0:d0:d5:e7:9e:a5:7f:71:f5:0d:17:52:e3:
ad:0e:52:82:94:25:7e:0d:96:10:0c:04:9c:1a:95:
5a:a3:e4:c1:a4:19:64:83:43:d8:40:c0:40:25:3c:
f1:79:21:0b:b6:aa:1a:e1:7b:42:02:40:76:79:6f:
6a:12:cb:fc:57:16:51:2e:96:5f:ca:80:36:48:b3:
86:03:56:a2:17:a8:fa:d5:1b:72:8b:33:b2:eb:65:
ca:a8:0d:01:b2:f4:07:26:e2:47:e7:99:80:e5:7d:
2c:38:cd:2c:89:6a:20:71:5b:bd:27:7b:2b:b3:53:
4b:ef:c1:84:e7:c1:bf:51:d5:53:d3:3b:d2:00:cc:
bd:7f:4f:f0:92:a4:bd:97:c7:30:b6:67:0f:a5:9c:
00:51:35:e7:0b:bc:80:a7:05:e3:9a:89:68:21:b0:
e7:01:6c:4e:1d:8d:7b:64:86:af:97:ac:99:da:b6:
71:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:57:5C:C3:00:71:4F:67:3D:A2:75:E4:56:72:C9:91:8D:74:00:0A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eFdcwwBxT2c9onXkVnLJkY10AAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.30.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3b:ee:4f:d1:0e:f9:87:f5:51:03:92:e9:45:14:08:fd:14:
24:c4:cd:b3:ec:b5:60:c9:e6:f7:f4:de:a3:fa:44:ee:a6:48:
01:67:c8:a1:ba:5a:ea:6c:d7:5f:a3:3a:19:36:61:d7:d9:d4:
a8:3c:5e:7d:1d:af:e1:0f:ef:cb:07:2d:a8:df:6a:33:89:b5:
f2:aa:89:f6:62:f0:ca:21:a8:cb:53:04:c6:af:32:63:85:47:
7b:b1:ae:a0:2f:c1:2a:3f:4d:fa:d7:39:05:ed:cd:20:31:29:
f6:41:32:0d:28:f2:12:d1:c6:da:39:94:d6:ac:ac:63:7e:c1:
cf:76:80:08:f3:96:a6:69:7c:18:ba:51:ec:3c:d1:39:0d:9e:
6c:d2:7e:0f:18:9d:17:73:af:47:98:1d:69:ea:96:f1:49:3a:
2a:a3:00:a9:22:7b:9e:52:83:9d:52:07:01:65:60:77:29:af:
31:cd:e0:b8:56:c9:1e:31:75:bc:82:2f:3c:27:33:2f:24:92:
19:f8:0b:26:81:47:3f:f2:b8:8c:14:77:23:c9:a2:c1:f7:14:
37:9a:d4:fa:87:d4:cd:bd:dd:e7:fd:5a:03:a0:a2:27:0e:42:
59:93:20:6b:d1:4e:17:22:53:4a:7f:b3:ed:d7:af:0d:4c:57:
18:fc:70:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+hKmuMc93g8Jo08NWdCZQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwNTIyMTYzNzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODU3NWNjMzAwNzE0ZjY3M2RhMjc1ZTQ1NjcyYzk5MThkNzQwMDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73gW2apZT2kUVraJz6p8vPtso775
Mgl+9OQE9HAdeLmCWtrB8kDbT/zN05P1OoJA8zHlwn/2Tk9eRNOSPmWvTFPEvng/
+j6L1vsaMKDQ1eeepX9x9Q0XUuOtDlKClCV+DZYQDAScGpVao+TBpBlkg0PYQMBA
JTzxeSELtqoa4XtCAkB2eW9qEsv8VxZRLpZfyoA2SLOGA1aiF6j61RtyizOy62XK
qA0BsvQHJuJH55mA5X0sOM0siWogcVu9J3srs1NL78GE58G/UdVT0zvSAMy9f0/w
kqS9l8cwtmcPpZwAUTXnC7yApwXjmoloIbDnAWxOHY17ZIavl6yZ2rZxjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHhXXMMAcU9nPaJ15FZyyZGNdAAKMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvZUZkY3d3QnhUMmM5b25Ya1ZuTEprWTEwQUFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbVXAwQA
LQkeMA0GCSqGSIb3DQEBCwUAA4IBAQCFO+5P0Q75h/VRA5LpRRQI/RQkxM2z7LVg
yeb39N6j+kTupkgBZ8ihulrqbNdfozoZNmHX2dSoPF59Ha/hD+/LBy2o32ozibXy
qon2YvDKIajLUwTGrzJjhUd7sa6gL8EqP0361zkF7c0gMSn2QTINKPIS0cbaOZTW
rKxjfsHPdoAI85amaXwYulHsPNE5DZ5s0n4PGJ0Xc69HmB1p6pbxSToqowCpInue
UoOdUgcBZWB3Ka8xzeC4VskeMXW8gi88JzMvJJIZ+AsmgUc/8riMFHcjyaLB9xQ3
mtT6h9TNvd3n/VoDoKInDkJZkyBr0U4XIlNKf7Pt168NTFcY/HCH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org