Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/1-jtzuy5v7amqDkjETa3o0pdklNw.roa
File: 1-jtzuy5v7amqDkjETa3o0pdklNw.roa (raw, json)
Hash identifier: C8oEWLWWmmg3NEV1DohBDTK/v8TOCzAKZMM7tSRoRY8=
Subject key identifier: FA:3B:73:BB:2E:6F:ED:A9:AA:0E:48:C4:4D:AD:E8:D2:97:64:94:DC
Certificate issuer: /CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Certificate serial: 018F04C40DE2F680BDC186EAD9040E894535
Authority key identifier: E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/1-jtzuy5v7amqDkjETa3o0pdklNw.roa
Signing time: Mon 22 Apr 2024 07:45:08 +0000
ROA not before: Mon 22 Apr 2024 07:45:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29436
IP address blocks: 94.240.144.0/20 maxlen: 20
Validation: Failed, certificate revoked on Fri 26 Apr 2024 11:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:04:c4:0d:e2:f6:80:bd:c1:86:ea:d9:04:0e:89:45:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5825fbee7c43a29838eabe4fc87d794349c0c80
Validity
Not Before: Apr 22 07:45:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa3b73bb2e6feda9aa0e48c44dade8d2976494dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:a8:61:dd:e2:7b:0f:42:2b:12:a0:ad:76:
dd:ab:f6:d4:c5:21:19:3a:70:42:7f:3a:6a:19:ec:
2f:9e:3e:a7:4e:00:5d:81:a8:c8:48:4f:dd:c6:73:
92:12:bf:75:7e:0b:8d:5d:8a:98:2c:80:6b:9a:bb:
53:b7:f9:6e:a0:d1:47:8b:1e:35:36:aa:53:f4:b9:
91:95:c4:3c:21:6f:77:0f:bd:72:04:4e:b5:b0:ff:
aa:02:3e:53:c8:bb:c2:f6:9d:be:81:5a:48:cb:0d:
47:21:05:9f:c7:e2:df:22:56:42:c2:81:50:08:95:
b8:0d:7e:c0:ce:b2:26:b8:8e:09:54:99:ab:e5:0b:
01:7d:77:7e:5b:93:e9:63:dc:36:a5:08:f8:d1:fa:
60:1e:3a:0d:ec:d7:27:1e:97:f1:cb:ec:69:de:b9:
4c:0f:12:03:ba:ca:3e:63:bd:36:2d:7a:14:d5:31:
72:3d:4f:19:e1:e4:4a:2f:38:88:79:61:2c:b3:2e:
20:df:25:15:22:9c:1b:2b:5e:6d:56:cb:da:5d:69:
3c:84:44:d5:08:b1:b6:b7:ca:66:a1:84:f3:2f:ad:
03:e5:22:da:3e:6d:36:1b:61:84:32:e6:4e:92:8e:
b9:28:98:b8:f0:3a:35:73:2a:62:6f:57:53:15:e7:
96:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3B:73:BB:2E:6F:ED:A9:AA:0E:48:C4:4D:AD:E8:D2:97:64:94:DC
X509v3 Authority Key Identifier:
keyid:E5:82:5F:BE:E7:C4:3A:29:83:8E:AB:E4:FC:87:D7:94:34:9C:0C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YJfvufEOimDjqvk_IfXlDScDIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/1-jtzuy5v7amqDkjETa3o0pdklNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/758c96-611d-4167-80cd-041ab302c2f9/1/5YJfvufEOimDjqvk_IfXlDScDIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.144.0/20
Signature Algorithm: sha256WithRSAEncryption
57:da:26:24:04:f5:c6:75:6c:b4:8c:ed:cb:75:7e:7f:fe:c4:
a8:e0:3d:0f:b0:4d:e3:d6:96:26:e5:32:99:af:71:c7:03:8d:
ea:24:70:fa:ae:af:81:e7:d1:0e:3a:dd:45:37:0d:1a:70:be:
ca:48:f2:fc:32:62:2a:48:d8:d6:51:07:f2:82:1d:88:6f:94:
b6:69:46:21:77:71:6a:b1:f9:aa:2d:cb:c9:be:5b:e3:4d:9b:
a8:ee:dd:42:2d:b5:ab:d6:7d:f9:11:73:b0:b7:c3:bb:b4:a3:
c1:92:76:71:9a:cc:16:d2:4a:4e:80:df:84:a8:ec:06:31:42:
38:4b:d9:aa:eb:c9:2c:5a:81:ad:35:70:10:47:67:cf:e2:67:
57:23:c5:ad:ad:16:f1:b9:8e:25:b7:0f:89:6d:0c:4b:ed:bc:
f4:3d:6a:83:d1:0f:15:22:b5:b9:a2:83:f7:46:55:7f:4c:86:
f0:7b:d2:02:3e:90:60:47:ca:57:fb:5b:8c:2f:89:8d:fb:3d:
e7:60:78:72:54:39:49:ce:2a:90:69:7c:33:73:c9:0d:58:00:
87:a5:fd:59:9a:50:c6:db:d5:76:d5:3f:eb:d2:27:a7:93:fe:
2e:be:e8:f9:ac:01:14:87:4d:4d:c7:03:b2:e3:92:09:3c:04:
07:20:25:03
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY8ExA3i9oC9wYbq2QQOiUU1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODI1ZmJlZTdjNDNhMjk4MzhlYWJlNGZjODdkNzk0MzQ5
YzBjODAwHhcNMjQwNDIyMDc0NTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTNiNzNiYjJlNmZlZGE5YWEwZTQ4YzQ0ZGFkZThkMjk3NjQ5NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGuoYd3iew9CKxKgrXbdq/bUxSEZ
OnBCfzpqGewvnj6nTgBdgajISE/dxnOSEr91fguNXYqYLIBrmrtTt/luoNFHix41
NqpT9LmRlcQ8IW93D71yBE61sP+qAj5TyLvC9p2+gVpIyw1HIQWfx+LfIlZCwoFQ
CJW4DX7AzrImuI4JVJmr5QsBfXd+W5PpY9w2pQj40fpgHjoN7NcnHpfxy+xp3rlM
DxIDuso+Y702LXoU1TFyPU8Z4eRKLziIeWEssy4g3yUVIpwbK15tVsvaXWk8hETV
CLG2t8pmoYTzL60D5SLaPm02G2GEMuZOko65KJi48Do1cypib1dTFeeWPQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPo7c7sub+2pqg5IxE2t6NKXZJTcMB8GA1UdIwQY
MBaAFOWCX77nxDopg46r5PyH15Q0nAyAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlKZnZ1ZkVPaW1EanF2a19JZlhsRFNjRElBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS83NThjOTYtNjExZC00MTY3LTgwY2Qt
MDQxYWIzMDJjMmY5LzEvMS1qdHp1eTV2N2FtcURrakVUYTNvMHBka2xOdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDkvNzU4Yzk2LTYxMWQtNDE2Ny04MGNkLTA0MWFiMzAyYzJm
OS8xLzVZSmZ2dWZFT2ltRGpxdmtfSWZYbERTY0RJQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBF7wkDAN
BgkqhkiG9w0BAQsFAAOCAQEAV9omJAT1xnVstIzty3V+f/7EqOA9D7BN49aWJuUy
ma9xxwON6iRw+q6vgefRDjrdRTcNGnC+ykjy/DJiKkjY1lEH8oIdiG+UtmlGIXdx
arH5qi3Lyb5b402bqO7dQi21q9Z9+RFzsLfDu7SjwZJ2cZrMFtJKToDfhKjsBjFC
OEvZquvJLFqBrTVwEEdnz+JnVyPFra0W8bmOJbcPiW0MS+289D1qg9EPFSK1uaKD
90ZVf0yG8HvSAj6QYEfKV/tbjC+Jjfs952B4clQ5Sc4qkGl8M3PJDVgAh6X9WZpQ
xtvVdtU/69Inp5P+Lr7o+awBFIdNTccDsuOSCTwEByAlAw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:11:49 2025 by rpki-client