Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/CJpfm-sYu5pj8JgYfebfonOfdIw.roa
File: CJpfm-sYu5pj8JgYfebfonOfdIw.roa (raw, json)
Hash identifier: edYvngmVsOEx1HvSX0724ViqombeFHJ7gYMbR+W/iQc=
Subject key identifier: 08:9A:5F:9B:EB:18:BB:9A:63:F0:98:18:7D:E6:DF:A2:73:9F:74:8C
Certificate issuer: /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial: 018EA39352F8E3F59A5283CB39B120CA8969
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/CJpfm-sYu5pj8JgYfebfonOfdIw.roa
Signing time: Wed 03 Apr 2024 10:48:44 +0000
ROA not before: Wed 03 Apr 2024 10:48:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202766
IP address blocks: 5.61.204.0/24 maxlen: 24
5.61.205.0/24 maxlen: 24
5.61.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 08:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:93:52:f8:e3:f5:9a:52:83:cb:39:b1:20:ca:89:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
Validity
Not Before: Apr 3 10:48:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=089a5f9beb18bb9a63f098187de6dfa2739f748c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:39:10:98:98:52:ae:84:53:a7:92:a2:99:ce:
6b:0e:e5:89:47:59:d2:75:da:75:d7:e3:8e:36:f8:
8c:f4:fc:36:b9:d9:c3:08:6b:5d:dc:a2:d1:c5:a2:
c6:02:9a:06:52:e5:5e:61:00:5c:14:15:1f:d4:e8:
a5:46:90:85:6b:55:5f:0e:81:f4:17:e0:f8:33:a2:
86:e6:f5:be:3a:45:93:5a:bd:7d:74:6b:28:2f:28:
5f:cb:9c:5e:bd:e5:36:15:a3:7a:8c:62:24:f6:79:
6c:23:f8:09:fa:ce:7b:62:63:82:31:20:4d:d8:ac:
17:88:bf:04:b3:72:d8:6b:2c:89:c6:94:f3:f2:6a:
4d:29:62:49:c1:c4:c1:92:4f:8b:b5:3a:82:a3:dd:
3b:f9:0f:b5:81:59:6f:59:f2:91:ff:86:06:5a:3d:
b5:79:fe:16:b2:25:80:51:b3:c8:bc:34:c2:6c:26:
58:12:9e:86:c6:13:46:03:cc:94:0c:e7:79:30:2f:
0d:33:9f:9c:67:f1:4d:8e:52:58:bc:59:cc:7a:67:
32:73:78:1e:f7:4e:79:7c:71:9f:84:53:c1:cf:a3:
54:31:c1:a5:8d:bb:ac:b7:ef:d4:e9:53:18:0d:7b:
45:44:9b:36:63:cf:95:c2:01:21:a0:fc:ac:94:09:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:9A:5F:9B:EB:18:BB:9A:63:F0:98:18:7D:E6:DF:A2:73:9F:74:8C
X509v3 Authority Key Identifier:
keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/CJpfm-sYu5pj8JgYfebfonOfdIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.204.0-5.61.206.255
Signature Algorithm: sha256WithRSAEncryption
7b:4d:23:a6:a9:34:bd:f4:4e:e8:57:d0:e5:1a:3c:2b:ca:f0:
8b:d0:81:c8:d6:4e:b5:34:8a:08:83:16:90:d1:71:06:9d:d8:
06:7b:79:e2:0b:17:39:93:a6:1c:d2:ea:23:c6:c0:7d:85:17:
43:ac:f8:f8:82:eb:31:59:34:1e:53:e0:f1:94:71:9d:10:7f:
0a:66:cf:b1:21:ec:cb:42:6c:1a:a9:c7:7a:81:a2:da:ff:3b:
ec:d5:74:be:c0:83:a2:45:c6:b2:2e:9f:cd:42:f1:36:2a:4d:
3d:33:68:d9:12:8e:19:39:1f:aa:9d:4f:ca:d5:18:34:56:49:
60:3b:3d:df:b2:b0:d6:d4:17:f0:93:43:0e:5c:b4:de:ee:8c:
e9:74:ae:4c:68:85:ab:2d:16:3b:c5:e9:bc:94:db:54:33:c2:
af:31:fb:3f:30:fe:34:d5:06:70:45:5c:86:5f:29:57:21:4a:
8c:39:d3:e3:dd:c1:a5:d9:30:04:3e:b2:2e:ea:75:ef:3b:4e:
d3:da:cf:f8:bd:c9:42:d6:a8:82:d8:55:35:fb:44:3d:0e:dd:
c1:7b:0c:24:5c:5c:19:b3:11:1b:06:33:33:31:cb:27:40:7c:
2d:08:e0:ec:60:cb:2f:a7:9c:39:f1:f5:a8:0a:4d:83:b3:a3:
14:0b:de:81
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY6jk1L44/WaUoPLObEgyolpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmE0NDA5ZWE5MWY1MDZkNjMzODcxYzZjMzU1NDBkNDYw
MzM3ZDEwHhcNMjQwNDAzMTA0ODQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODlhNWY5YmViMThiYjlhNjNmMDk4MTg3ZGU2ZGZhMjczOWY3NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjkQmJhSroRTp5Kimc5rDuWJR1nS
ddp11+OONviM9Pw2udnDCGtd3KLRxaLGApoGUuVeYQBcFBUf1OilRpCFa1VfDoH0
F+D4M6KG5vW+OkWTWr19dGsoLyhfy5xeveU2FaN6jGIk9nlsI/gJ+s57YmOCMSBN
2KwXiL8Es3LYayyJxpTz8mpNKWJJwcTBkk+LtTqCo907+Q+1gVlvWfKR/4YGWj21
ef4WsiWAUbPIvDTCbCZYEp6GxhNGA8yUDOd5MC8NM5+cZ/FNjlJYvFnMemcyc3ge
9055fHGfhFPBz6NUMcGljbust+/U6VMYDXtFRJs2Y8+VwgEhoPyslAkTYQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAiaX5vrGLuaY/CYGH3m36Jzn3SMMB8GA1UdIwQY
MBaAFNJqRAnqkfUG1jOHHGw1VA1GAzfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYt
Y2ZlZmRmZGZiZTZiLzEvQ0pwZm0tc1l1NXBqOEpnWWZlYmZvbk9mZEl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9mNDEwNTEtMDgxMC00M2ZmLWIxOTYtY2ZlZmRmZGZiZTZi
LzEvMG1wRUNlcVI5UWJXTTRjY2JEVlVEVVlETjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFPcwD
BAAFPc4wDQYJKoZIhvcNAQELBQADggEBAHtNI6apNL30TuhX0OUaPCvK8IvQgcjW
TrU0igiDFpDRcQad2AZ7eeILFzmTphzS6iPGwH2FF0Os+PiC6zFZNB5T4PGUcZ0Q
fwpmz7Eh7MtCbBqpx3qBotr/O+zVdL7Ag6JFxrIun81C8TYqTT0zaNkSjhk5H6qd
T8rVGDRWSWA7Pd+ysNbUF/CTQw5ctN7ujOl0rkxohastFjvF6byU21Qzwq8x+z8w
/jTVBnBFXIZfKVchSow50+PdwaXZMAQ+si7qde87TtPaz/i9yULWqILYVTX7RD0O
3cF7DCRcXBmzERsGMzMxyydAfC0I4Oxgyy+nnDnx9agKTYOzoxQL3oE=
-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:00 2025 by rpki-client