Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/JgwSokC7qtHibYqvlPVke-QsuRg.roa
File: JgwSokC7qtHibYqvlPVke-QsuRg.roa (raw, json)
Hash identifier: bRMnMV64G7NOE9XtM43mPXMW/RscKHuwP4OCof994k0=
Subject key identifier: 26:0C:12:A2:40:BB:AA:D1:E2:6D:8A:AF:94:F5:64:7B:E4:2C:B9:18
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 0190C6DEE45E5A77A696831AF59976376359
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/JgwSokC7qtHibYqvlPVke-QsuRg.roa
Signing time: Thu 18 Jul 2024 17:23:34 +0000
ROA not before: Thu 18 Jul 2024 17:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 5.181.13.0/24 maxlen: 24
5.181.14.0/24 maxlen: 24
5.181.15.0/24 maxlen: 24
45.150.48.0/24 maxlen: 24
45.150.49.0/24 maxlen: 24
45.150.50.0/24 maxlen: 24
45.150.51.0/24 maxlen: 24
45.159.180.0/24 maxlen: 24
45.159.181.0/24 maxlen: 24
45.159.182.0/24 maxlen: 24
45.159.183.0/24 maxlen: 24
94.199.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 18:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c6:de:e4:5e:5a:77:a6:96:83:1a:f5:99:76:37:63:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jul 18 17:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=260c12a240bbaad1e26d8aaf94f5647be42cb918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b5:5d:8c:73:32:51:b5:69:8b:97:ff:36:8f:
35:07:e1:d7:6e:06:f8:38:41:27:76:ee:0b:2b:8c:
ed:2e:90:14:c4:e0:60:52:cd:38:14:06:ec:58:d7:
3b:c7:ef:87:4b:52:67:af:b8:4c:35:56:3e:ae:3c:
b5:57:e2:16:42:c8:ea:49:ff:d4:b8:8b:56:aa:3f:
6e:40:15:28:25:a3:ab:5b:53:df:ee:74:6f:51:1f:
96:d3:84:29:d7:4d:ac:5c:7c:44:52:02:15:81:c7:
79:f2:73:b1:aa:f3:60:b7:e9:76:56:69:54:0a:f6:
32:ca:d6:49:41:0c:20:49:f6:3e:39:55:d1:93:70:
ce:a4:4d:ed:c7:8c:a0:31:7d:cc:8c:1b:a4:e0:0f:
07:96:19:a4:aa:17:87:72:e3:61:de:46:2d:48:cb:
5b:cd:c5:71:83:c2:38:e2:be:7f:b1:6d:86:28:d6:
de:47:6a:fa:eb:02:54:af:6f:36:31:b8:ca:a7:de:
9e:31:21:7a:99:f0:fa:76:e4:a4:8a:49:ca:03:a2:
01:14:27:7e:40:3d:c3:41:e1:4f:8a:7e:ae:43:54:
84:0d:17:b5:bd:e8:ad:ba:6b:3a:2a:94:af:74:e6:
33:16:92:16:2e:38:16:29:ed:8b:44:4c:83:c1:38:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0C:12:A2:40:BB:AA:D1:E2:6D:8A:AF:94:F5:64:7B:E4:2C:B9:18
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/JgwSokC7qtHibYqvlPVke-QsuRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.13.0-5.181.15.255
45.150.48.0/22
45.159.180.0/22
94.199.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:48:a0:28:86:2a:c3:5b:20:56:10:cc:5a:d5:10:67:c8:c8:
1b:05:02:71:71:6a:cd:9f:31:59:32:9c:dc:3e:a8:a7:0d:b8:
04:0d:15:5d:a1:7d:cc:fa:fb:98:70:8f:91:5b:19:5c:44:71:
17:42:d7:8a:06:30:3b:e1:9e:c5:1f:e7:e9:33:1e:5b:f1:24:
f9:ba:c0:1e:44:de:68:71:a9:fc:62:b6:95:4f:be:dc:fd:4b:
37:fc:c5:b5:17:d2:5b:4c:c2:62:07:61:33:02:66:e1:9e:a5:
7a:ce:78:2e:96:f8:0f:16:2e:c5:1d:3d:e9:5a:a2:bd:6c:ad:
a4:19:11:fd:ca:55:24:a8:dc:45:95:b0:60:53:76:d5:74:0f:
d2:9d:24:9a:41:bf:0b:0f:03:e9:32:0f:c8:53:f7:7a:49:22:
74:11:39:0f:60:f2:b4:0e:21:0d:62:db:98:22:75:47:97:9c:
ca:7b:68:7f:bb:c0:10:8e:e4:23:23:97:6a:4e:1f:2f:ac:4c:
cd:6c:98:6e:c0:f1:ea:bc:b0:7b:55:92:3a:1a:7d:e2:d4:5e:
91:91:a3:8b:30:88:8b:73:28:32:af:f3:92:48:e7:75:dd:a9:
08:9c:a3:0b:7b:1f:d5:4b:9d:64:56:41:da:c0:cd:a4:9d:ef:
c9:d1:26:68
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZDG3uReWnemloMa9Zl2N2NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjQwNzE4MTcyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjBjMTJhMjQwYmJhYWQxZTI2ZDhhYWY5NGY1NjQ3YmU0MmNiOTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrVdjHMyUbVpi5f/No81B+HXbgb4
OEEndu4LK4ztLpAUxOBgUs04FAbsWNc7x++HS1Jnr7hMNVY+rjy1V+IWQsjqSf/U
uItWqj9uQBUoJaOrW1Pf7nRvUR+W04Qp102sXHxEUgIVgcd58nOxqvNgt+l2VmlU
CvYyytZJQQwgSfY+OVXRk3DOpE3tx4ygMX3MjBuk4A8HlhmkqheHcuNh3kYtSMtb
zcVxg8I44r5/sW2GKNbeR2r66wJUr282MbjKp96eMSF6mfD6duSkiknKA6IBFCd+
QD3DQeFPin6uQ1SEDRe1veitums6KpSvdOYzFpIWLjgWKe2LREyDwTg9dQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFCYMEqJAu6rR4m2Kr5T1ZHvkLLkYMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEvSmd3U29rQzdxdEhpYllxdmxQVmtlLVFzdVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAFtQ0D
BAQFtQADBAItljADBAItn7QDBABexwcwDQYJKoZIhvcNAQELBQADggEBAB5IoCiG
KsNbIFYQzFrVEGfIyBsFAnFxas2fMVkynNw+qKcNuAQNFV2hfcz6+5hwj5FbGVxE
cRdC14oGMDvhnsUf5+kzHlvxJPm6wB5E3mhxqfxitpVPvtz9Szf8xbUX0ltMwmIH
YTMCZuGepXrOeC6W+A8WLsUdPelaor1sraQZEf3KVSSo3EWVsGBTdtV0D9KdJJpB
vwsPA+kyD8hT93pJInQROQ9g8rQOIQ1i25gidUeXnMp7aH+7wBCO5CMjl2pOHy+s
TM1smG7A8eq8sHtVkjoafeLUXpGRo4swiItzKDKv85JI53XdqQicowt7H9VLnWRW
QdrAzaSd78nRJmg=
-----END CERTIFICATE-----
Generated at Mon Aug 19 20:43:45 2024 by rpki-client on console-fra.rpki-client.org