Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/MdP0CA6T8ik-eZZU-q4yyxr2OLs.roa
File: MdP0CA6T8ik-eZZU-q4yyxr2OLs.roa (raw, json)
Hash identifier: 7H0AdUikscwZIgMsZ66BzxTs1Aq3Ol2RKY38mSjloZQ=
Subject key identifier: 31:D3:F4:08:0E:93:F2:29:3E:79:96:54:FA:AE:32:CB:1A:F6:38:BB
Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b
Certificate serial: 018E8CA322E932AE642A150029552E9C0245
Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/MdP0CA6T8ik-eZZU-q4yyxr2OLs.roa
Signing time: Fri 29 Mar 2024 23:54:45 +0000
ROA not before: Fri 29 Mar 2024 23:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26383
IP address blocks: 5.39.250.0/24 maxlen: 24
5.39.252.0/24 maxlen: 24
5.144.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 30 Mar 2024 14:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8c:a3:22:e9:32:ae:64:2a:15:00:29:55:2e:9c:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b
Validity
Not Before: Mar 29 23:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31d3f4080e93f2293e799654faae32cb1af638bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:98:fe:e5:e9:b4:04:a6:8f:55:c4:31:ab:4c:
ba:30:d7:45:f4:2d:8c:af:34:07:ae:c9:e4:48:bb:
2a:bf:73:c5:1c:e0:1e:77:ad:88:68:32:ba:b7:5f:
de:ed:20:8c:1e:b1:27:1b:29:1a:e2:49:06:16:7a:
b7:4d:92:52:88:c5:60:69:4c:73:c0:61:c0:a6:3f:
ef:3b:c4:53:1c:85:d9:81:5f:95:ae:9b:7b:45:92:
3d:f9:b3:bc:49:19:50:0d:5e:49:65:f1:04:d2:6a:
0b:af:17:35:57:04:33:7c:3e:98:5d:6f:9c:d2:0b:
ac:14:4b:54:d0:ba:46:69:a4:ac:5f:95:56:dd:65:
37:be:72:78:4a:3b:8d:10:4c:54:bb:9d:63:e1:c3:
1f:3b:15:a6:11:f1:d3:20:1f:40:81:09:de:f8:be:
d5:f9:d7:a3:5b:e8:31:4b:9d:8c:6c:32:9c:16:ec:
44:f9:ad:39:fb:1f:1f:60:7a:f3:35:f7:c5:ca:d5:
9e:1a:75:9b:bf:d2:09:ca:54:b2:54:18:85:2b:bd:
48:eb:70:0e:22:3f:c0:d7:76:f6:fe:00:65:cc:14:
0d:57:cb:dd:f2:b8:3b:7b:b2:e1:d7:31:4a:94:f5:
78:57:c8:4b:82:b7:da:7d:f1:49:51:3a:7c:42:4f:
2d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D3:F4:08:0E:93:F2:29:3E:79:96:54:FA:AE:32:CB:1A:F6:38:BB
X509v3 Authority Key Identifier:
keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/MdP0CA6T8ik-eZZU-q4yyxr2OLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.39.250.0/24
5.39.252.0/24
5.144.178.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:91:d7:c0:f9:1a:6b:30:ef:19:36:f1:37:35:44:44:a5:71:
16:ef:24:06:4e:d3:92:d4:f1:da:5b:ef:53:e8:63:2e:e5:1b:
da:b1:e5:c6:37:a8:12:0c:b1:86:3f:a3:a9:8a:ec:c5:cf:1c:
b2:f9:1a:77:27:21:b1:e8:db:8e:08:c4:25:2d:9a:14:80:01:
47:9c:d4:a9:fd:fc:c4:dc:f4:62:fc:b3:ec:fc:c0:31:c5:55:
60:33:8e:fc:80:24:3c:59:ca:a6:5f:92:e4:33:56:18:8e:3a:
44:57:5c:42:fe:b9:36:0a:ae:af:e8:0d:da:e2:f9:82:2f:ba:
4d:b2:31:0d:0c:e2:ef:cf:4c:21:c7:26:a0:ef:44:b9:ce:b3:
cd:e7:22:86:0a:86:75:d5:e8:66:27:b1:6c:f2:94:ee:95:c2:
02:0c:2d:64:15:30:ee:a4:48:6f:e3:56:5b:a6:90:ce:92:49:
84:c5:1b:83:08:22:3d:97:9c:fe:9f:1f:02:85:96:29:4a:e3:
d9:b6:4f:2b:27:bc:01:4d:1e:60:57:7e:da:81:3b:c2:8d:9e:
c4:02:85:9e:f8:08:80:c9:24:54:29:0b:fa:68:5e:cc:51:bd:
4b:86:fd:cb:4f:2a:a2:e1:9f:c6:33:87:1d:82:8c:6f:18:76:
42:97:2b:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY6MoyLpMq5kKhUAKVUunAJFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5
M2U0NmIwHhcNMjQwMzI5MjM1NDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWQzZjQwODBlOTNmMjI5M2U3OTk2NTRmYWFlMzJjYjFhZjYzOGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJj+5em0BKaPVcQxq0y6MNdF9C2M
rzQHrsnkSLsqv3PFHOAed62IaDK6t1/e7SCMHrEnGyka4kkGFnq3TZJSiMVgaUxz
wGHApj/vO8RTHIXZgV+Vrpt7RZI9+bO8SRlQDV5JZfEE0moLrxc1VwQzfD6YXW+c
0gusFEtU0LpGaaSsX5VW3WU3vnJ4SjuNEExUu51j4cMfOxWmEfHTIB9AgQne+L7V
+dejW+gxS52MbDKcFuxE+a05+x8fYHrzNffFytWeGnWbv9IJylSyVBiFK71I63AO
Ij/A13b2/gBlzBQNV8vd8rg7e7Lh1zFKlPV4V8hLgrfaffFJUTp8Qk8t9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDHT9AgOk/IpPnmWVPquMssa9ji7MB8GA1UdIwQY
MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt
Y2Q2MTUyMjYxYzZmLzEvTWRQMENBNlQ4aWstZVpaVS1xNHl5eHIyT0xzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm
LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABSf6AwQA
BSf8AwQABZCyMA0GCSqGSIb3DQEBCwUAA4IBAQCskdfA+RprMO8ZNvE3NUREpXEW
7yQGTtOS1PHaW+9T6GMu5RvaseXGN6gSDLGGP6OpiuzFzxyy+Rp3JyGx6NuOCMQl
LZoUgAFHnNSp/fzE3PRi/LPs/MAxxVVgM478gCQ8WcqmX5LkM1YYjjpEV1xC/rk2
Cq6v6A3a4vmCL7pNsjENDOLvz0whxyag70S5zrPN5yKGCoZ11ehmJ7Fs8pTulcIC
DC1kFTDupEhv41ZbppDOkkmExRuDCCI9l5z+nx8ChZYpSuPZtk8rJ7wBTR5gV37a
gTvCjZ7EAoWe+AiAySRUKQv6aF7MUb1Lhv3LTyqi4Z/GM4cdgoxvGHZClysH
-----END CERTIFICATE-----
Generated at Sat Mar 30 15:46:29 2024 by rpki-client on console-fra.rpki-client.org