Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/5TTld024Hlfw9DbnmpKy16Q4YEs.roa
File: 5TTld024Hlfw9DbnmpKy16Q4YEs.roa (raw, json)
Hash identifier: 3D8DTiDSXscZAGb1zbq1/a3peiNFMB9Depa7g1EmARY=
Subject key identifier: E5:34:E5:77:4D:B8:1E:57:F0:F4:36:E7:9A:92:B2:D7:A4:38:60:4B
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 018573560A42E320F5959A1AC6C5F4B258A0
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/5TTld024Hlfw9DbnmpKy16Q4YEs.roa
Signing time: Mon 02 Jan 2023 16:34:56 +0000
ROA not before: Mon 02 Jan 2023 16:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:0a:42:e3:20:f5:95:9a:1a:c6:c5:f4:b2:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 2 16:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e534e5774db81e57f0f436e79a92b2d7a438604b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e9:da:e4:69:c5:62:c8:2f:47:ac:be:c9:c8:
5a:a0:16:5a:4a:29:69:11:42:dd:32:4f:c8:c2:03:
54:dd:4e:84:d7:44:ef:5f:a9:ac:83:d1:65:14:62:
a6:db:93:a9:24:16:04:00:28:7c:51:04:29:3d:45:
d0:d6:3d:88:f4:a4:11:36:67:03:6f:e9:33:03:84:
8f:e4:3d:39:9e:7b:45:a9:72:59:28:68:eb:db:b1:
87:ba:2f:97:fb:d1:fa:b7:1f:a7:98:53:58:e0:ef:
f1:9f:1c:90:69:de:3b:33:17:02:c4:b7:ee:8b:24:
bb:15:0f:a0:23:7f:78:0a:da:cb:1e:93:62:df:eb:
cb:04:8c:df:47:e4:9a:d7:47:56:7a:46:ad:ab:1e:
f4:77:2a:58:fd:dc:e5:95:60:d9:28:25:74:13:32:
a4:9b:99:b6:4d:38:7d:c2:83:d5:63:7b:cf:be:8a:
5e:82:82:83:81:a4:e6:c8:fb:5b:76:bd:79:03:4e:
25:af:4b:aa:d0:f6:c9:0b:12:00:8f:32:13:7e:27:
7d:bf:24:ec:85:d4:5f:ee:24:93:d7:bd:5c:0a:1e:
ab:f4:dd:ff:97:48:f4:c4:ad:3f:bd:b6:2b:70:29:
8d:d4:19:71:55:35:cd:b9:5c:3e:39:2c:e6:8e:a9:
11:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:34:E5:77:4D:B8:1E:57:F0:F4:36:E7:9A:92:B2:D7:A4:38:60:4B
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/5TTld024Hlfw9DbnmpKy16Q4YEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
27:50:10:ce:ca:57:28:0e:de:67:ed:cb:43:65:c7:7a:3b:39:
3b:92:6f:0b:40:59:b8:e8:15:d5:e4:48:30:33:99:6e:78:75:
bb:43:fa:a0:13:8d:f2:c0:9f:40:05:97:aa:55:b1:5a:1d:a2:
ba:d4:58:65:3e:81:13:9f:85:67:b4:13:e1:bd:7e:86:43:90:
0b:59:d7:12:e4:6a:7f:5c:fe:04:7d:fe:19:e5:63:81:f8:57:
cf:11:35:7b:94:28:22:45:22:e3:41:b2:64:30:ce:51:bb:92:
24:fe:16:44:f9:0d:f3:8e:71:80:ed:b5:05:6c:04:73:61:2c:
68:93:7c:5a:ad:ed:6c:28:62:de:79:4f:fc:22:f1:dc:bd:76:
4c:29:a0:89:b9:71:3e:2b:68:71:b5:9c:87:fa:7d:ea:97:5a:
85:e6:34:42:28:8c:5b:68:3f:b0:22:00:47:0d:d1:7c:3d:a8:
8a:90:b7:de:73:97:b5:f8:34:31:fd:5e:fa:34:c6:5e:64:0f:
8d:97:98:06:9f:8a:b9:30:e7:36:bf:ab:82:53:4a:30:d0:f7:
2a:b1:04:e5:af:61:4a:9d:90:51:49:01:d6:71:33:23:1a:51:
51:13:97:f0:09:a0:6e:02:ab:8a:81:dc:16:7d:fe:46:1f:5f:
f3:88:ae:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzVgpC4yD1lZoaxsX0sligMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh
ZWYxZmYwHhcNMjMwMTAyMTYzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTM0ZTU3NzRkYjgxZTU3ZjBmNDM2ZTc5YTkyYjJkN2E0Mzg2MDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+na5GnFYsgvR6y+ychaoBZaSilp
EULdMk/IwgNU3U6E10TvX6msg9FlFGKm25OpJBYEACh8UQQpPUXQ1j2I9KQRNmcD
b+kzA4SP5D05nntFqXJZKGjr27GHui+X+9H6tx+nmFNY4O/xnxyQad47MxcCxLfu
iyS7FQ+gI394CtrLHpNi3+vLBIzfR+Sa10dWekatqx70dypY/dzllWDZKCV0EzKk
m5m2TTh9woPVY3vPvopegoKDgaTmyPtbdr15A04lr0uq0PbJCxIAjzITfid9vyTs
hdRf7iST171cCh6r9N3/l0j0xK0/vbYrcCmN1BlxVTXNuVw+OSzmjqkRTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOU05XdNuB5X8PQ255qSstekOGBLMB8GA1UdIwQY
MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt
M2ZiYzk3NTllYjZhLzEvNVRUbGQwMjRIbGZ3OURibm1wS3kxNlE0WUVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh
LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXV3gMA0G
CSqGSIb3DQEBCwUAA4IBAQAnUBDOylcoDt5n7ctDZcd6Ozk7km8LQFm46BXV5Egw
M5lueHW7Q/qgE43ywJ9ABZeqVbFaHaK61FhlPoETn4VntBPhvX6GQ5ALWdcS5Gp/
XP4Eff4Z5WOB+FfPETV7lCgiRSLjQbJkMM5Ru5Ik/hZE+Q3zjnGA7bUFbARzYSxo
k3xare1sKGLeeU/8IvHcvXZMKaCJuXE+K2hxtZyH+n3ql1qF5jRCKIxbaD+wIgBH
DdF8PaiKkLfec5e1+DQx/V76NMZeZA+Nl5gGn4q5MOc2v6uCU0ow0PcqsQTlr2FK
nZBRSQHWcTMjGlFRE5fwCaBuAquKgdwWff5GH1/ziK6b
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:44 2024 by rpki-client on console-ams.rpki-client.org