Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/MT8HnOaRmGH3B8BxXvdmEWy4yeE.roa
File: MT8HnOaRmGH3B8BxXvdmEWy4yeE.roa (raw, json)
Hash identifier: uj8HlDltnRR/jKG4T2+vWmWZMlOXdJtbvdtRA1nns+o=
Subject key identifier: 31:3F:07:9C:E6:91:98:61:F7:07:C0:71:5E:F7:66:11:6C:B8:C9:E1
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0190D4C3C829C6E6D0B8BFFAEA17530B9A5B
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/MT8HnOaRmGH3B8BxXvdmEWy4yeE.roa
Signing time: Sun 21 Jul 2024 10:08:38 +0000
ROA not before: Sun 21 Jul 2024 10:08:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.144.154.0/24 maxlen: 24
5.144.155.0/24 maxlen: 24
78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 07:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d4:c3:c8:29:c6:e6:d0:b8:bf:fa:ea:17:53:0b:9a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Jul 21 10:08:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=313f079ce6919861f707c0715ef766116cb8c9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:a9:fc:f3:6f:54:c2:09:7d:1f:86:a6:41:15:
f4:d8:96:0d:04:23:c8:93:60:f0:83:93:e5:a1:38:
11:e8:95:d5:f1:1f:50:2c:c3:ea:20:f6:bb:c1:6c:
6f:35:26:cf:30:45:b0:fc:4f:32:34:d0:a1:89:e3:
2a:0a:02:48:30:d5:f2:a0:10:df:bc:a8:c7:bc:4c:
17:36:8d:da:36:50:e1:0e:4b:1e:fa:67:fa:e4:7a:
52:f2:00:2d:e0:39:6d:f3:7d:48:56:b1:7b:b8:4d:
85:42:2a:0d:f0:78:f4:40:0d:f8:37:06:65:96:9e:
c5:9f:1e:48:5d:7f:2a:c1:1a:3a:e1:38:75:14:5a:
12:7c:c4:fd:ae:e1:93:74:de:cf:b8:bc:01:aa:2f:
85:60:bc:96:91:1b:3a:05:db:6d:f9:9a:cd:0f:f5:
fd:c6:f7:b4:c7:48:de:d9:5b:1a:e4:90:b6:af:f9:
09:f9:5b:d1:d4:96:2a:05:b6:f5:52:8b:99:93:0f:
6c:1d:31:cb:42:dc:b6:87:9a:76:d6:71:7c:19:1a:
58:26:7b:c9:1f:f3:ea:67:80:76:25:fd:8c:42:4b:
4b:e6:ec:a0:93:93:78:de:34:8c:88:43:29:10:85:
b9:77:84:cc:d1:c6:d6:cd:0c:3f:89:11:6b:05:db:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:3F:07:9C:E6:91:98:61:F7:07:C0:71:5E:F7:66:11:6C:B8:C9:E1
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/MT8HnOaRmGH3B8BxXvdmEWy4yeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.154.0/23
78.143.252.0/23
79.135.102.0/23
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:80:f2:c9:b3:24:32:94:f4:5f:c7:e0:fd:de:0d:de:b6:a5:
8f:51:bb:3f:70:dc:9f:e4:dc:1d:89:70:54:41:0e:3f:cc:7d:
30:b6:70:7a:1e:7b:ec:de:7d:64:88:a1:f2:3d:2b:b8:c9:e2:
99:1e:b9:f3:12:83:5b:12:a9:83:89:24:06:53:4f:5f:78:4a:
48:82:bb:72:77:b2:25:fc:1c:57:cb:f2:f0:30:1f:54:f8:42:
3a:8c:e9:f2:6b:cf:56:a9:d6:d0:45:be:26:23:36:e9:62:91:
0d:a8:bc:b8:b9:82:1e:b1:ad:e3:1b:bc:ff:e7:ef:c9:92:46:
24:f0:ca:5b:63:98:69:02:6b:6a:64:0f:a2:82:4c:29:68:cf:
b0:d0:9e:f8:85:e1:2d:a8:58:78:2e:02:89:cd:76:b8:02:24:
a8:23:07:75:7c:26:70:a6:0e:e1:45:47:a3:f3:5e:da:41:15:
36:63:94:83:e4:a1:2d:bf:e0:6e:c6:8a:6d:64:8b:b3:93:97:
b8:a5:5f:15:96:ea:55:a4:3a:a2:81:8d:5b:c2:51:ea:7a:d3:
ee:23:78:a6:75:2b:fc:76:94:3a:52:75:90:42:34:0a:b1:ca:
1b:5c:cf:17:a3:d8:7d:ad:f2:ff:25:25:e4:50:05:6f:f2:2f:
83:e4:0a:37
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZDUw8gpxubQuL/66hdTC5pbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjQwNzIxMTAwODM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMTNmMDc5Y2U2OTE5ODYxZjcwN2MwNzE1ZWY3NjYxMTZjYjhjOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8qn8829Uwgl9H4amQRX02JYNBCPI
k2Dwg5PloTgR6JXV8R9QLMPqIPa7wWxvNSbPMEWw/E8yNNChieMqCgJIMNXyoBDf
vKjHvEwXNo3aNlDhDkse+mf65HpS8gAt4Dlt831IVrF7uE2FQioN8Hj0QA34NwZl
lp7Fnx5IXX8qwRo64Th1FFoSfMT9ruGTdN7PuLwBqi+FYLyWkRs6Bdtt+ZrND/X9
xve0x0je2Vsa5JC2r/kJ+VvR1JYqBbb1UouZkw9sHTHLQty2h5p21nF8GRpYJnvJ
H/PqZ4B2Jf2MQktL5uygk5N43jSMiEMpEIW5d4TM0cbWzQw/iRFrBdtvGQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDE/B5zmkZhh9wfAcV73ZhFsuMnhMB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvTVQ4SG5PYVJtR0gzQjhCeFh2ZG1FV3k0eWVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBBZCaAwQB
To/8AwQBT4dmAwQBwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQAfgPLJsyQylPRfx+D9
3g3etqWPUbs/cNyf5NwdiXBUQQ4/zH0wtnB6Hnvs3n1kiKHyPSu4yeKZHrnzEoNb
EqmDiSQGU09feEpIgrtyd7Il/BxXy/LwMB9U+EI6jOnya89WqdbQRb4mIzbpYpEN
qLy4uYIesa3jG7z/5+/JkkYk8MpbY5hpAmtqZA+igkwpaM+w0J74heEtqFh4LgKJ
zXa4AiSoIwd1fCZwpg7hRUej817aQRU2Y5SD5KEtv+BuxoptZIuzk5e4pV8VlupV
pDqigY1bwlHqetPuI3imdSv8dpQ6UnWQQjQKscobXM8Xo9h9rfL/JSXkUAVv8i+D
5Ao3
-----END CERTIFICATE-----
Generated at Thu Jul 25 10:10:07 2024 by rpki-client on console-fra.rpki-client.org