Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/998pdOCYYwx48RrikGHQJJM2hlU.roa
File: 998pdOCYYwx48RrikGHQJJM2hlU.roa (raw, json)
Hash identifier: WK/7zYJcV2ZlUrvm+aqILf5ceha3Gv9HdTc1gIQjXpI=
Subject key identifier: F7:DF:29:74:E0:98:63:0C:78:F1:1A:E2:90:61:D0:24:93:36:86:55
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 0193263F1C38ADC4636EDF193BC06FB55040
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/998pdOCYYwx48RrikGHQJJM2hlU.roa
Signing time: Wed 13 Nov 2024 15:58:10 +0000
ROA not before: Wed 13 Nov 2024 15:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6939
IP address blocks: 5.133.124.0/22 maxlen: 22
31.40.196.0/22 maxlen: 22
83.171.244.0/22 maxlen: 22
84.54.0.0/22 maxlen: 22
85.8.144.0/22 maxlen: 22
85.235.72.0/22 maxlen: 22
139.28.48.0/22 maxlen: 22
139.28.212.0/22 maxlen: 22
193.32.204.0/22 maxlen: 22
212.87.196.0/22 maxlen: 22
212.115.100.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 18 Nov 2024 18:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:3f:1c:38:ad:c4:63:6e:df:19:3b:c0:6f:b5:50:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Nov 13 15:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7df2974e098630c78f11ae29061d02493368655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4c:a0:43:6d:f0:2f:d6:ae:97:e5:48:41:3f:
f2:76:0c:b5:dd:7d:0e:b8:ec:54:47:b5:d8:ff:5d:
ad:3c:45:cc:2b:76:d0:28:b0:dc:0d:11:de:14:ce:
f9:52:f9:51:a3:eb:c4:87:b9:3c:c5:33:c5:68:03:
e4:16:4e:25:2a:6a:6a:d7:11:f5:8e:01:6f:37:94:
8b:17:85:a4:0f:e8:4e:f4:e9:a5:b7:67:ad:1c:bb:
5e:c1:af:50:9c:f9:53:6f:d1:c1:1f:e1:f5:98:a0:
0b:c3:fe:cb:37:db:30:d1:6d:d1:72:f5:57:82:c3:
cb:6e:da:d0:b1:84:bd:c7:7d:12:b4:56:34:69:1d:
ba:02:c5:ca:06:18:8a:1c:f0:dc:31:a7:f2:fa:78:
af:f3:3b:3b:eb:a3:26:48:1b:6e:52:69:3e:3b:a3:
5d:6d:25:5d:be:de:fd:ea:8c:53:6a:12:ec:35:d5:
c7:46:95:4f:83:ac:e1:43:84:40:26:2d:1f:b7:cd:
41:f2:93:d5:00:e1:f5:e7:a9:d9:f0:6e:ce:a3:cc:
da:19:66:34:e1:b9:a9:57:40:00:51:c0:c0:b7:42:
7f:89:c9:a3:1f:1d:18:79:90:04:ee:f4:42:6c:75:
57:e5:6f:45:ce:2f:63:f3:41:e5:9b:9c:f6:71:24:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:29:74:E0:98:63:0C:78:F1:1A:E2:90:61:D0:24:93:36:86:55
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/998pdOCYYwx48RrikGHQJJM2hlU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.124.0/22
31.40.196.0/22
83.171.244.0/22
84.54.0.0/22
85.8.144.0/22
85.235.72.0/22
139.28.48.0/22
139.28.212.0/22
193.32.204.0/22
212.87.196.0/22
212.115.100.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0d:37:a5:dd:f4:ed:c5:9d:ed:20:29:8f:1e:7a:5c:5e:40:
90:bb:c5:e5:98:a4:d3:98:01:59:31:c5:05:bb:e1:ef:1f:bb:
06:3e:16:f3:a6:53:92:3d:e3:bc:b2:34:72:f6:b4:ef:db:ad:
d1:66:dc:9b:68:c5:f1:da:7d:fe:88:f0:d7:22:6e:97:1d:10:
4a:f0:22:c9:eb:d0:72:9f:fd:c7:87:d7:05:18:33:de:9a:e3:
e3:50:24:d6:61:1a:7e:93:aa:fe:dc:91:00:d5:74:0f:f1:c5:
c8:65:bd:91:35:68:e4:a5:60:91:bb:8a:7e:ec:ed:e0:ac:76:
80:cd:bd:8d:ab:d7:cf:a6:18:92:40:be:97:d1:34:0f:b8:c5:
69:97:8b:3a:79:2e:ae:c5:61:0d:e6:10:7a:e1:78:38:a2:cc:
4a:78:72:b3:b2:10:c7:4b:d3:02:fa:98:9e:bb:8c:da:c6:d3:
15:ed:34:63:9a:eb:16:89:c8:4b:f8:e4:23:dd:f9:3d:5b:21:
f1:de:6b:13:1a:8d:b4:b2:b6:cd:af:dd:90:df:e0:88:1b:4d:
f0:79:59:b7:95:8a:16:c2:f7:63:82:1c:ab:97:c3:aa:15:5c:
f7:4b:70:9b:8b:1d:96:d3:13:d0:15:5f:95:dc:f4:79:ce:67:
c9:d7:6d:e6
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZMmPxw4rcRjbt8ZO8BvtVBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQxMTEzMTU1ODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2RmMjk3NGUwOTg2MzBjNzhmMTFhZTI5MDYxZDAyNDkzMzY4NjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50ygQ23wL9aul+VIQT/ydgy13X0O
uOxUR7XY/12tPEXMK3bQKLDcDRHeFM75UvlRo+vEh7k8xTPFaAPkFk4lKmpq1xH1
jgFvN5SLF4WkD+hO9Omlt2etHLtewa9QnPlTb9HBH+H1mKALw/7LN9sw0W3RcvVX
gsPLbtrQsYS9x30StFY0aR26AsXKBhiKHPDcMafy+niv8zs766MmSBtuUmk+O6Nd
bSVdvt796oxTahLsNdXHRpVPg6zhQ4RAJi0ft81B8pPVAOH156nZ8G7Oo8zaGWY0
4bmpV0AAUcDAt0J/icmjHx0YeZAE7vRCbHVX5W9Fzi9j80Hlm5z2cSRUqQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFPffKXTgmGMMePEa4pBh0CSTNoZVMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvOTk4cGRPQ1lZd3g0OFJyaWtHSFFKSk0yaGxVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCBYV8AwQC
HyjEAwQCU6v0AwQCVDYAAwQCVQiQAwQCVetIAwQCixwwAwQCixzUAwQCwSDMAwQC
1FfEAwQC1HNkMA0GCSqGSIb3DQEBCwUAA4IBAQCGDTel3fTtxZ3tICmPHnpcXkCQ
u8XlmKTTmAFZMcUFu+HvH7sGPhbzplOSPeO8sjRy9rTv263RZtybaMXx2n3+iPDX
Im6XHRBK8CLJ69Byn/3Hh9cFGDPemuPjUCTWYRp+k6r+3JEA1XQP8cXIZb2RNWjk
pWCRu4p+7O3grHaAzb2Nq9fPphiSQL6X0TQPuMVpl4s6eS6uxWEN5hB64Xg4osxK
eHKzshDHS9MC+pieu4zaxtMV7TRjmusWichL+OQj3fk9WyHx3msTGo20srbNr92Q
3+CIG03weVm3lYoWwvdjghyrl8OqFVz3S3Cbix2W0xPQFV+V3PR5zmfJ123m
-----END CERTIFICATE-----
Generated at Mon Nov 18 21:55:55 2024 by rpki-client on console-ams.rpki-client.org