Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/gN6n3ybsmmnfFduTll_lEVlu11w.roa
File: gN6n3ybsmmnfFduTll_lEVlu11w.roa (raw, json)
Hash identifier: VSctpJVv0u+H/En2pEC/gkWPaGaZq+8O6z9cv0owvt4=
Subject key identifier: 80:DE:A7:DF:26:EC:9A:69:DF:15:DB:93:96:5F:E5:11:59:6E:D7:5C
Certificate issuer: /CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Certificate serial: 0192379E381A50EC0B58E585DB1423DA1A4A
Authority key identifier: BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/gN6n3ybsmmnfFduTll_lEVlu11w.roa
Signing time: Sat 28 Sep 2024 07:52:48 +0000
ROA not before: Sat 28 Sep 2024 07:52:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.144.155.0/24 maxlen: 24
78.143.252.0/24 maxlen: 24
78.143.253.0/24 maxlen: 24
79.135.102.0/23 maxlen: 24
194.33.150.0/24 maxlen: 24
194.33.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 10:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:37:9e:38:1a:50:ec:0b:58:e5:85:db:14:23:da:1a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb0d4e85937b7a0f271054d28614f2934d4ea500
Validity
Not Before: Sep 28 07:52:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80dea7df26ec9a69df15db93965fe511596ed75c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:30:fe:55:9d:a2:06:34:aa:8c:79:35:27:93:
88:fb:8b:91:4f:b7:ff:4c:5d:9d:a1:43:da:3e:16:
f4:90:e9:e2:92:7e:9b:27:5c:23:83:0c:d1:ec:23:
d4:f5:88:16:cb:e0:49:bb:ca:18:32:b0:33:41:4e:
c4:a2:25:db:81:7c:dd:92:4e:4a:db:ac:dd:85:79:
d0:37:60:f4:38:05:ce:1e:0c:58:46:90:8e:a2:d9:
90:85:64:1a:ab:56:72:27:0b:19:11:3b:9e:68:65:
bc:f7:aa:35:a6:4e:23:ca:82:a7:04:f2:77:c0:31:
94:46:e7:4e:a9:e0:a5:43:07:05:70:97:35:4a:24:
13:48:6a:2b:6f:25:b5:80:8b:df:bd:9e:f9:54:f8:
78:9d:09:0b:60:c2:a9:e2:2d:11:89:91:1e:a7:35:
e2:b1:fc:6c:ab:2b:44:6e:d2:48:cb:01:e1:94:61:
d9:98:5b:01:8c:29:b8:5e:93:24:ef:3e:c5:42:da:
9e:71:a3:be:f8:4b:15:92:5c:0e:2d:c8:d1:3d:3e:
13:ba:d9:3e:13:7c:85:af:fa:b8:88:36:dd:11:dd:
85:53:09:3a:a5:60:f3:80:1d:0e:30:88:6b:16:99:
4a:e0:c7:e4:61:e8:96:22:84:e8:07:e3:10:60:e7:
23:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:DE:A7:DF:26:EC:9A:69:DF:15:DB:93:96:5F:E5:11:59:6E:D7:5C
X509v3 Authority Key Identifier:
keyid:BB:0D:4E:85:93:7B:7A:0F:27:10:54:D2:86:14:F2:93:4D:4E:A5:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uw1OhZN7eg8nEFTShhTyk01OpQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/gN6n3ybsmmnfFduTll_lEVlu11w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/d17527-cf98-4d37-866f-8e9b98a99cdb/1/uw1OhZN7eg8nEFTShhTyk01OpQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.155.0/24
78.143.252.0/23
79.135.102.0/23
194.33.150.0/23
Signature Algorithm: sha256WithRSAEncryption
21:4a:a7:41:1b:ee:e8:1c:1e:2e:02:e7:a0:cf:16:4c:65:e2:
1b:88:53:6a:92:fb:e6:67:f3:1a:27:53:be:5d:a1:ac:a0:4a:
c3:52:23:3a:dd:eb:99:3c:bd:29:85:d7:b6:dc:ac:3c:7b:2a:
67:bf:43:54:47:17:ef:9a:dc:41:bc:d8:43:cd:8b:54:2b:24:
3b:a1:dd:dc:87:27:66:72:36:de:19:0d:4c:3c:83:4a:97:d6:
58:80:6c:5b:41:f1:9f:87:55:54:24:12:32:64:fd:2a:e9:01:
20:52:59:bd:4d:b3:fd:2b:37:f1:2f:19:06:a8:d2:f4:ad:75:
d5:ba:33:dc:b7:f1:a0:e0:c2:cf:3d:cc:8e:a2:86:eb:94:75:
77:eb:e9:d4:15:64:11:01:be:19:7c:d8:f5:2c:08:de:46:6c:
07:4f:54:fd:69:31:e3:7c:99:32:54:ce:29:27:6b:f3:0e:5f:
af:c4:d9:d2:b4:f4:3a:6f:99:36:6a:e2:22:e5:03:6c:71:5f:
c2:39:f8:4d:48:c8:0e:26:eb:2a:a0:79:3c:83:7a:0d:5b:dd:
b1:cb:0d:5d:79:7a:76:c2:8c:11:4d:46:92:bd:f5:f4:e0:71:
88:ca:44:a2:f6:12:bb:f4:17:d0:5e:ff:09:24:6f:1c:77:77:
2a:43:6a:c3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZI3njgaUOwLWOWF2xQj2hpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMGQ0ZTg1OTM3YjdhMGYyNzEwNTRkMjg2MTRmMjkzNGQ0
ZWE1MDAwHhcNMjQwOTI4MDc1MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGRlYTdkZjI2ZWM5YTY5ZGYxNWRiOTM5NjVmZTUxMTU5NmVkNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTD+VZ2iBjSqjHk1J5OI+4uRT7f/
TF2doUPaPhb0kOnikn6bJ1wjgwzR7CPU9YgWy+BJu8oYMrAzQU7EoiXbgXzdkk5K
26zdhXnQN2D0OAXOHgxYRpCOotmQhWQaq1ZyJwsZETueaGW896o1pk4jyoKnBPJ3
wDGURudOqeClQwcFcJc1SiQTSGorbyW1gIvfvZ75VPh4nQkLYMKp4i0RiZEepzXi
sfxsqytEbtJIywHhlGHZmFsBjCm4XpMk7z7FQtqecaO++EsVklwOLcjRPT4Tutk+
E3yFr/q4iDbdEd2FUwk6pWDzgB0OMIhrFplK4MfkYeiWIoToB+MQYOcjxQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIDep98m7Jpp3xXbk5Zf5RFZbtdcMB8GA1UdIwQY
MBaAFLsNToWTe3oPJxBU0oYU8pNNTqUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYt
OGU5Yjk4YTk5Y2RiLzEvZ042bjN5YnNtbW5mRmR1VGxsX2xFVmx1MTF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9kMTc1MjctY2Y5OC00ZDM3LTg2NmYtOGU5Yjk4YTk5Y2Ri
LzEvdXcxT2haTjdlZzhuRUZUU2hoVHlrMDFPcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQABZCbAwQB
To/8AwQBT4dmAwQBwiGWMA0GCSqGSIb3DQEBCwUAA4IBAQAhSqdBG+7oHB4uAueg
zxZMZeIbiFNqkvvmZ/MaJ1O+XaGsoErDUiM63euZPL0phde23Kw8eypnv0NURxfv
mtxBvNhDzYtUKyQ7od3chydmcjbeGQ1MPINKl9ZYgGxbQfGfh1VUJBIyZP0q6QEg
Ulm9TbP9KzfxLxkGqNL0rXXVujPct/Gg4MLPPcyOoobrlHV36+nUFWQRAb4ZfNj1
LAjeRmwHT1T9aTHjfJkyVM4pJ2vzDl+vxNnStPQ6b5k2auIi5QNscV/COfhNSMgO
JusqoHk8g3oNW92xyw1deXp2wowRTUaSvfX04HGIykSi9hK79BfQXv8JJG8cd3cq
Q2rD
-----END CERTIFICATE-----
Generated at Tue Nov 12 13:34:13 2024 by rpki-client on console-ams.rpki-client.org