Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/A_f0aao9f0DRZDvJN2AySEl1bmc.roa
File: A_f0aao9f0DRZDvJN2AySEl1bmc.roa (raw, json)
Hash identifier: 8AtOnKD84EDnBz/k/G5Jwz7TxbJUo8BXslMPVr8nC4M=
Subject key identifier: 03:F7:F4:69:AA:3D:7F:40:D1:64:3B:C9:37:60:32:48:49:75:6E:67
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 019180084866261DCD1FF4DF2A3E5500E578
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/A_f0aao9f0DRZDvJN2AySEl1bmc.roa
Signing time: Fri 23 Aug 2024 16:18:32 +0000
ROA not before: Fri 23 Aug 2024 16:18:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 5.44.42.0/24 maxlen: 24
2a05:541:102::/48 maxlen: 48
2a05:541:103::/48 maxlen: 48
2a05:541:104::/48 maxlen: 48
2a05:541:105::/48 maxlen: 48
2a05:541:106::/48 maxlen: 48
2a05:541:107::/48 maxlen: 48
2a05:541:108::/48 maxlen: 48
2a05:541:109::/48 maxlen: 48
2a05:541:110::/48 maxlen: 48
2a05:541:111::/48 maxlen: 48
2a05:541:112::/48 maxlen: 48
2a05:541:113::/48 maxlen: 48
2a05:541:114::/48 maxlen: 48
2a05:541:115::/48 maxlen: 48
2a05:541:116::/48 maxlen: 48
2a05:541:117::/48 maxlen: 48
2a05:541:118::/48 maxlen: 48
2a05:541:119::/48 maxlen: 48
2a05:541:121::/48 maxlen: 48
2a05:541:122::/48 maxlen: 48
2a05:541:123::/48 maxlen: 48
2a05:541:124::/48 maxlen: 48
2a05:541:125::/48 maxlen: 48
2a05:541:126::/48 maxlen: 48
2a05:541:127::/48 maxlen: 48
2a05:541:129::/48 maxlen: 48
2a05:541:131::/48 maxlen: 48
2a05:541:133::/48 maxlen: 48
2a05:541:139::/48 maxlen: 48
2a05:541:141::/48 maxlen: 48
2a05:541:152::/48 maxlen: 48
2a05:541:153::/48 maxlen: 48
Validation: Failed, certificate revoked on Sat 14 Sep 2024 07:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:80:08:48:66:26:1d:cd:1f:f4:df:2a:3e:55:00:e5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Aug 23 16:18:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03f7f469aa3d7f40d1643bc93760324849756e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ad:a5:cd:10:0c:ee:10:9b:60:dc:aa:9c:53:
b6:17:5f:8a:82:b4:9a:2f:f0:98:a4:2a:15:ee:e2:
01:76:c0:0f:c8:c6:2b:bc:98:1b:88:05:c7:41:98:
f2:06:07:4b:3a:c0:3c:51:ee:31:77:29:db:18:00:
70:a7:f9:42:98:66:77:75:28:01:e2:7d:14:5e:a6:
75:b2:cd:35:e5:c2:d7:dc:af:cd:a1:3f:02:70:37:
46:ef:80:a9:e2:1a:b5:40:ad:b6:15:b8:dd:84:af:
a2:22:e8:ae:e0:00:57:0f:c3:10:d6:17:5a:98:58:
4b:f5:06:a1:70:cb:92:67:9d:25:94:16:aa:f6:01:
d9:96:07:d5:25:d8:e4:2a:21:4c:d2:7a:a5:72:1f:
80:45:b1:f5:af:b8:43:70:18:05:43:10:8f:02:1e:
30:6a:81:58:9b:80:08:8c:3a:82:7d:4e:0c:51:6a:
17:19:43:98:40:4a:a8:ec:4c:22:ce:23:0b:b5:b5:
d6:e2:1f:c7:29:be:4f:36:d7:e0:1a:0d:7a:2e:6d:
e3:8f:f4:c4:46:49:6e:ba:f8:20:04:90:3c:75:c5:
9c:e7:b8:86:fa:41:3f:7d:8b:77:e6:6e:4a:27:bf:
48:13:39:fd:cb:39:de:cd:91:f7:d6:e3:cf:9b:03:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F7:F4:69:AA:3D:7F:40:D1:64:3B:C9:37:60:32:48:49:75:6E:67
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/A_f0aao9f0DRZDvJN2AySEl1bmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.42.0/24
IPv6:
2a05:541:102::-2a05:541:109:ffff:ffff:ffff:ffff:ffff
2a05:541:110::-2a05:541:119:ffff:ffff:ffff:ffff:ffff
2a05:541:121::-2a05:541:127:ffff:ffff:ffff:ffff:ffff
2a05:541:129::/48
2a05:541:131::/48
2a05:541:133::/48
2a05:541:139::/48
2a05:541:141::/48
2a05:541:152::/47
Signature Algorithm: sha256WithRSAEncryption
22:e9:7e:6e:13:07:bb:3d:e0:41:00:91:38:83:3b:60:59:ca:
56:31:5a:1f:f6:96:49:37:32:52:81:98:1f:8a:54:42:c1:33:
88:cd:bc:18:52:d1:db:ff:d0:54:38:f5:83:b7:84:43:65:bf:
71:87:ab:f9:06:d1:db:e8:87:7d:a9:9a:4e:5d:65:40:7d:5d:
bb:dd:df:5d:05:a3:f0:7f:c9:d1:72:cd:9c:de:c5:f2:5a:9f:
30:ae:cd:52:54:f8:da:73:df:08:13:87:82:69:9c:d6:40:6e:
d6:8f:c9:54:68:62:58:95:f1:25:56:2d:8a:18:2b:51:92:21:
79:16:4f:ef:09:6a:e0:d4:90:eb:89:26:bd:2b:eb:94:83:9d:
ae:e4:9b:be:8d:a0:0c:a9:96:17:93:7c:e4:2b:67:d6:05:00:
33:d1:54:4d:51:22:be:14:2c:4e:9c:3d:d2:85:b7:f2:68:36:
59:8e:d2:23:ae:47:ea:e9:a9:1e:36:7c:cb:54:10:77:25:83:
66:d4:e8:90:75:97:0d:9c:88:e6:ef:b1:12:27:b9:f8:58:8b:
2a:f8:c1:23:e3:e8:1f:0f:9e:c2:7f:f6:6a:a0:5c:fc:c7:75:
ad:95:03:9a:71:37:47:c1:bb:c1:22:34:66:4b:63:42:ad:6d:
06:eb:c2:13
-----BEGIN CERTIFICATE-----
MIIFejCCBGKgAwIBAgISAZGACEhmJh3NH/TfKj5VAOV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjQwODIzMTYxODMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2Y3ZjQ2OWFhM2Q3ZjQwZDE2NDNiYzkzNzYwMzI0ODQ5NzU2ZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq2lzRAM7hCbYNyqnFO2F1+KgrSa
L/CYpCoV7uIBdsAPyMYrvJgbiAXHQZjyBgdLOsA8Ue4xdynbGABwp/lCmGZ3dSgB
4n0UXqZ1ss015cLX3K/NoT8CcDdG74Cp4hq1QK22FbjdhK+iIuiu4ABXD8MQ1hda
mFhL9QahcMuSZ50llBaq9gHZlgfVJdjkKiFM0nqlch+ARbH1r7hDcBgFQxCPAh4w
aoFYm4AIjDqCfU4MUWoXGUOYQEqo7EwiziMLtbXW4h/HKb5PNtfgGg16Lm3jj/TE
RkluuvggBJA8dcWc57iG+kE/fYt35m5KJ79IEzn9yznezZH31uPPmwNDTwIDAQAB
o4IChjCCAoIwHQYDVR0OBBYEFAP39GmqPX9A0WQ7yTdgMkhJdW5nMB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvQV9mMGFhbzlmMERSWkR2Sk4yQXlTRWwxYm1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGbBggrBgEFBQcBBwEB/wSBizCBiDAMBAIAATAGAwQABSwq
MHgEAgACMHIwEgMHASoFBUEBAgMHASoFBUEBCDASAwcEKgUFQQEQAwcBKgUFQQEY
MBIDBwAqBQVBASEDBwMqBQVBASADBwAqBQVBASkDBwAqBQVBATEDBwAqBQVBATMD
BwAqBQVBATkDBwAqBQVBAUEDBwEqBQVBAVIwDQYJKoZIhvcNAQELBQADggEBACLp
fm4TB7s94EEAkTiDO2BZylYxWh/2lkk3MlKBmB+KVELBM4jNvBhS0dv/0FQ49YO3
hENlv3GHq/kG0dvoh32pmk5dZUB9Xbvd310Fo/B/ydFyzZzexfJanzCuzVJU+Npz
3wgTh4JpnNZAbtaPyVRoYliV8SVWLYoYK1GSIXkWT+8JauDUkOuJJr0r65SDna7k
m76NoAyplheTfOQrZ9YFADPRVE1RIr4ULE6cPdKFt/JoNlmO0iOuR+rpqR42fMtU
EHclg2bU6JB1lw2ciObvsRInufhYiyr4wSPj6B8PnsJ/9mqgXPzHda2VA5pxN0fB
u8EiNGZLY0KtbQbrwhM=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:51 2025 by rpki-client