Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/5jASNoG7fzpHAAhL-u565Gc-izo.roa
File: 5jASNoG7fzpHAAhL-u565Gc-izo.roa (raw, json)
Hash identifier: dW16R07OeFkGgfCbKGVP8Zn3/HsiDe4EkfgDhlflcxo=
Subject key identifier: E6:30:12:36:81:BB:7F:3A:47:00:08:4B:FA:EE:7A:E4:67:3E:8B:3A
Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial: 018CC801C4842666142F132C13A61F28DB92
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/5jASNoG7fzpHAAhL-u565Gc-izo.roa
Signing time: Tue 02 Jan 2024 02:30:08 +0000
ROA not before: Tue 02 Jan 2024 02:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12679
IP address blocks: 109.203.164.0/22 maxlen: 24
109.203.160.0/22 maxlen: 24
37.49.146.0/24 maxlen: 24
37.49.151.0/24 maxlen: 24
94.74.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 07:38:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:c4:84:26:66:14:2f:13:2c:13:a6:1f:28:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Validity
Not Before: Jan 2 02:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e630123681bb7f3a4700084bfaee7ae4673e8b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:63:83:83:d2:3b:5a:63:9a:af:37:62:1c:
42:3f:8a:8c:8a:64:36:40:89:31:cd:b7:f8:df:05:
69:a6:d0:6e:cf:03:21:85:46:34:68:ca:8a:08:63:
45:e4:83:f8:50:e5:a6:c5:2e:81:7d:1b:72:73:3a:
a4:85:d5:7f:9c:4c:4b:02:7b:97:51:4b:9c:8c:0e:
e2:f3:ae:e9:a8:dd:df:8b:dc:83:44:b7:83:84:d2:
1a:11:14:83:52:4c:be:6e:ad:99:a0:ca:b8:77:0a:
fd:6e:47:50:c3:29:5a:08:ed:15:53:11:09:9c:9b:
3b:d6:2e:a1:24:0f:4c:d0:4c:0c:31:eb:d6:1e:a8:
6f:0d:15:ff:7b:c4:fd:07:99:c8:2d:a8:e2:1a:8e:
89:1e:cd:d9:a9:86:fa:58:9b:57:5c:5b:22:32:ea:
7a:8b:fd:e3:95:fd:4a:86:e6:ff:d7:d1:96:7b:9b:
23:f1:d6:7c:88:05:92:d9:60:0a:75:92:34:e5:30:
e5:84:0b:4c:8f:03:b2:9c:42:ee:1a:a9:79:f3:76:
b0:22:a9:2b:5d:0a:b4:fd:8d:63:b8:bf:cb:2c:51:
07:df:01:dd:bf:13:52:44:e9:45:03:93:cb:9a:f1:
04:27:ca:0f:d4:dd:a4:70:6e:8b:e3:0e:17:92:7c:
e9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:12:36:81:BB:7F:3A:47:00:08:4B:FA:EE:7A:E4:67:3E:8B:3A
X509v3 Authority Key Identifier:
keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/5jASNoG7fzpHAAhL-u565Gc-izo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.146.0/24
37.49.151.0/24
94.74.173.0/24
109.203.160.0/21
Signature Algorithm: sha256WithRSAEncryption
96:ff:fb:b9:4a:96:4a:20:a4:d1:1b:47:be:0a:b9:8f:ba:c0:
f4:eb:ff:dc:f3:0f:18:e4:5c:0a:3a:4a:20:38:94:9d:2d:41:
df:56:da:49:b8:fc:ae:08:67:1f:5e:91:fe:20:57:47:97:5b:
a8:d8:6d:20:95:83:32:81:cf:cd:95:3c:bd:3c:29:5b:16:05:
69:23:51:af:4d:3d:08:1f:c6:f7:5c:40:52:cd:0e:94:a1:18:
d1:a4:40:d1:4a:3c:1f:04:9f:6c:8a:4e:c9:89:91:79:ac:13:
a1:2e:cf:5e:6d:8a:ae:6e:97:4e:8e:40:4a:95:73:f2:85:fb:
a2:13:0d:f3:3c:f7:43:99:75:d2:ca:a4:e9:0f:36:eb:6e:9b:
63:78:e3:c0:5e:48:dc:e5:5b:47:0e:15:80:95:6f:e2:7b:f6:
fa:65:80:5c:0e:39:10:81:fb:ef:c0:5a:b9:85:cf:bc:d2:ee:
58:7b:80:42:dd:c1:df:9b:89:24:af:97:c2:73:f7:73:5c:66:
88:a0:11:5c:c2:bc:ae:de:b3:93:16:fe:6f:07:9f:c0:39:cf:
3c:a4:4b:e6:8d:ed:70:67:13:20:12:59:07:fe:d9:4c:a2:ca:
31:65:0b:73:8e:80:e7:d5:d0:50:0e:3e:05:bc:64:01:8c:63:
29:4e:f2:3b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzIAcSEJmYULxMsE6YfKNuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx
ZjQ1ZjcwHhcNMjQwMTAyMDIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjMwMTIzNjgxYmI3ZjNhNDcwMDA4NGJmYWVlN2FlNDY3M2U4YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphdjg4PSO1pjmq83YhxCP4qMimQ2
QIkxzbf43wVpptBuzwMhhUY0aMqKCGNF5IP4UOWmxS6BfRtyczqkhdV/nExLAnuX
UUucjA7i867pqN3fi9yDRLeDhNIaERSDUky+bq2ZoMq4dwr9bkdQwylaCO0VUxEJ
nJs71i6hJA9M0EwMMevWHqhvDRX/e8T9B5nILajiGo6JHs3ZqYb6WJtXXFsiMup6
i/3jlf1Khub/19GWe5sj8dZ8iAWS2WAKdZI05TDlhAtMjwOynELuGql583awIqkr
XQq0/Y1juL/LLFEH3wHdvxNSROlFA5PLmvEEJ8oP1N2kcG6L4w4XknzpjQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOYwEjaBu386RwAIS/rueuRnPos6MB8GA1UdIwQY
MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt
NDk2ZjhlYmIyZDYxLzEvNWpBU05vRzdmenBIQUFoTC11NTY1R2MtaXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx
LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJTGSAwQA
JTGXAwQAXkqtAwQDbcugMA0GCSqGSIb3DQEBCwUAA4IBAQCW//u5SpZKIKTRG0e+
CrmPusD06//c8w8Y5FwKOkogOJSdLUHfVtpJuPyuCGcfXpH+IFdHl1uo2G0glYMy
gc/NlTy9PClbFgVpI1GvTT0IH8b3XEBSzQ6UoRjRpEDRSjwfBJ9sik7JiZF5rBOh
Ls9ebYqubpdOjkBKlXPyhfuiEw3zPPdDmXXSyqTpDzbrbptjeOPAXkjc5VtHDhWA
lW/ie/b6ZYBcDjkQgfvvwFq5hc+80u5Ye4BC3cHfm4kkr5fCc/dzXGaIoBFcwryu
3rOTFv5vB5/AOc88pEvmje1wZxMgElkH/tlMosoxZQtzjoDn1dBQDj4FvGQBjGMp
TvI7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:42 2025 by rpki-client