Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/71ZnqROSc66-zQniQtBAy5xjQhU.roa
File: 71ZnqROSc66-zQniQtBAy5xjQhU.roa (raw, json)
Hash identifier: e6LLC1yPgEumYzoVf0N8MJht7usXMmKR8pgftsy0vEw=
Subject key identifier: EF:56:67:A9:13:92:73:AE:BE:CD:09:E2:42:D0:40:CB:9C:63:42:15
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 01871E81F9654EDCAF0448107A1CADFBE0FA
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/71ZnqROSc66-zQniQtBAy5xjQhU.roa
Signing time: Sun 26 Mar 2023 15:20:47 +0000
ROA not before: Sun 26 Mar 2023 15:20:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 5.133.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 13:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:1e:81:f9:65:4e:dc:af:04:48:10:7a:1c:ad:fb:e0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Mar 26 15:20:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef5667a9139273aebecd09e242d040cb9c634215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c1:9b:aa:3b:c6:d0:ef:56:95:1e:f5:1c:15:
55:9c:ab:c5:b9:ec:a0:d1:d1:3c:1d:0b:a9:8d:a3:
66:9a:ef:97:e9:fb:33:d6:ab:78:ff:3e:d0:a6:2c:
85:20:df:80:97:18:8c:81:c7:15:aa:83:f6:d0:8e:
0d:35:de:27:ee:45:08:27:ed:39:f0:33:93:80:f5:
23:21:1e:35:4b:16:bf:46:71:c9:a3:06:5b:a8:5c:
1d:b8:cb:0c:f8:3e:99:99:c7:24:4d:f6:73:a9:af:
59:6e:68:5d:01:4c:34:a3:e3:21:6e:b8:95:ac:90:
0c:cf:0f:8e:6d:2a:98:29:3d:87:e1:63:50:ef:1e:
1f:a9:3f:c0:8b:79:21:bd:ca:5a:3e:09:ad:52:53:
6b:84:d3:ab:d7:ad:8c:89:00:71:0c:40:08:a5:64:
22:34:c9:e9:2c:9f:cf:22:44:e0:07:82:35:35:36:
67:a3:67:73:0d:27:83:63:75:13:e9:24:40:05:31:
e7:77:b6:45:86:84:e7:5b:b3:0a:ce:df:5f:5d:72:
8d:f6:d5:b9:6b:97:e7:d0:d2:aa:3e:b9:3a:8e:ce:
c9:17:94:34:08:44:cd:7e:5a:fe:b3:56:1a:98:0d:
1b:2d:bb:d4:ff:9b:a5:9c:5f:e8:09:a7:9c:1a:e0:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:56:67:A9:13:92:73:AE:BE:CD:09:E2:42:D0:40:CB:9C:63:42:15
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/71ZnqROSc66-zQniQtBAy5xjQhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.125.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:14:14:7d:c9:ad:9b:1d:79:f8:92:87:b6:e5:fb:ca:38:fb:
0a:89:fa:a5:0a:dc:48:ca:8c:b0:55:f8:8c:e6:66:79:ef:d9:
c5:0d:6c:38:ca:5a:94:e2:21:d2:aa:37:c2:4b:e9:db:be:c3:
f6:5d:fa:7b:ce:2e:ae:d4:74:bf:40:56:bf:62:5e:75:9e:31:
45:58:46:92:8c:ac:5a:5a:61:19:80:c6:72:ec:f1:68:25:d9:
84:53:28:91:c6:69:11:c1:a5:c6:07:97:f0:79:33:0d:ca:d7:
7e:de:8f:0d:7f:25:cc:d9:de:56:8b:53:28:86:05:9d:8d:4a:
5e:42:ba:86:f7:db:e0:66:4e:6c:be:df:26:fd:21:de:4a:97:
07:29:8a:09:34:00:40:b7:4c:26:79:7b:ca:74:79:81:a6:e5:
79:33:0f:dc:20:00:49:cc:60:4d:52:d6:03:65:b5:e7:d7:9a:
7a:01:7d:05:4f:c1:6b:60:fc:71:df:a0:d3:75:08:da:84:5b:
39:3c:2b:8e:93:c7:30:03:35:e3:fb:c4:a2:a7:89:66:3f:01:
94:da:f1:7a:7c:48:f1:6c:2c:a0:d5:59:9f:22:71:f8:54:f7:
bb:55:2a:da:d2:f9:66:1b:2e:9d:1b:c4:da:49:b0:30:52:97:
d1:a1:35:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcegfllTtyvBEgQehyt++D6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjMwMzI2MTUyMDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjU2NjdhOTEzOTI3M2FlYmVjZDA5ZTI0MmQwNDBjYjljNjM0MjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcGbqjvG0O9WlR71HBVVnKvFueyg
0dE8HQupjaNmmu+X6fsz1qt4/z7QpiyFIN+AlxiMgccVqoP20I4NNd4n7kUIJ+05
8DOTgPUjIR41Sxa/RnHJowZbqFwduMsM+D6ZmcckTfZzqa9ZbmhdAUw0o+MhbriV
rJAMzw+ObSqYKT2H4WNQ7x4fqT/Ai3khvcpaPgmtUlNrhNOr162MiQBxDEAIpWQi
NMnpLJ/PIkTgB4I1NTZno2dzDSeDY3UT6SRABTHnd7ZFhoTnW7MKzt9fXXKN9tW5
a5fn0NKqPrk6js7JF5Q0CETNflr+s1YamA0bLbvU/5ulnF/oCaecGuAb6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO9WZ6kTknOuvs0J4kLQQMucY0IVMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvNzFabnFST1NjNjYtelFuaVF0QkF5NXhqUWhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABYV9MA0G
CSqGSIb3DQEBCwUAA4IBAQB8FBR9ya2bHXn4koe25fvKOPsKifqlCtxIyoywVfiM
5mZ579nFDWw4ylqU4iHSqjfCS+nbvsP2Xfp7zi6u1HS/QFa/Yl51njFFWEaSjKxa
WmEZgMZy7PFoJdmEUyiRxmkRwaXGB5fweTMNytd+3o8NfyXM2d5Wi1MohgWdjUpe
QrqG99vgZk5svt8m/SHeSpcHKYoJNABAt0wmeXvKdHmBpuV5Mw/cIABJzGBNUtYD
ZbXn15p6AX0FT8FrYPxx36DTdQjahFs5PCuOk8cwAzXj+8Sip4lmPwGU2vF6fEjx
bCyg1VmfInH4VPe7VSra0vlmGy6dG8TaSbAwUpfRoTXT
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:49 2024 by rpki-client on console-fra.rpki-client.org