Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1jm2Vs4qW_qgr_Rlw2f3CubhjYc.roa
File: 1jm2Vs4qW_qgr_Rlw2f3CubhjYc.roa (raw, json)
Hash identifier: jiNXfEbsc2sYexCFhISKqQf+WwZK7tVwS8hKdSYacjQ=
Subject key identifier: D6:39:B6:56:CE:2A:5B:FA:A0:AF:F4:65:C3:67:F7:0A:E6:E1:8D:87
Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Certificate serial: 018D4267BE321FBE5813D4F97A6CD3ED8243
Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1jm2Vs4qW_qgr_Rlw2f3CubhjYc.roa
Signing time: Thu 25 Jan 2024 20:55:11 +0000
ROA not before: Thu 25 Jan 2024 20:55:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211020
IP address blocks: 5.201.162.0/24 maxlen: 24
89.37.12.0/24 maxlen: 24
185.135.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 13:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:42:67:be:32:1f:be:58:13:d4:f9:7a:6c:d3:ed:82:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab
Validity
Not Before: Jan 25 20:55:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d639b656ce2a5bfaa0aff465c367f70ae6e18d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c4:4b:4e:95:f5:b9:15:04:fe:c3:2b:cb:f3:
e7:fe:4e:11:d5:0c:af:6b:96:68:2b:9a:db:88:83:
a9:df:fa:02:06:07:8e:aa:5c:73:81:7c:e0:c9:31:
13:ab:d8:86:2b:52:8c:93:da:cf:cb:62:69:37:be:
53:7f:2d:7b:f6:c0:7b:2c:c6:51:95:18:a2:f5:a7:
66:36:3d:6d:8e:31:33:a2:8b:8f:61:87:c8:3a:94:
ce:dc:31:5d:7e:64:fb:c4:54:bc:88:b9:52:f0:7e:
9f:0b:4f:84:75:ca:f6:ea:50:18:af:4e:66:8e:82:
31:22:08:66:86:79:be:b2:0c:f5:28:4a:ef:33:ed:
06:e9:60:ea:c4:46:79:3d:6e:0b:d8:29:af:d5:a6:
43:79:61:a0:a3:d3:a4:16:31:2e:26:34:22:c4:d8:
7f:bc:b6:7b:84:75:45:d7:38:08:1d:e0:de:df:13:
1e:71:3d:8c:7d:57:c5:8b:53:14:2e:4c:b6:6a:36:
81:c8:b4:e7:dd:d0:90:15:f1:79:77:39:a1:bb:36:
2b:cf:b8:aa:1d:bf:3d:83:ce:3d:24:3f:94:ca:38:
7d:aa:35:39:b5:ed:69:45:98:0a:36:56:fc:3f:15:
64:5d:57:4e:69:0a:b9:bc:a4:f3:10:6f:b1:ae:61:
97:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:39:B6:56:CE:2A:5B:FA:A0:AF:F4:65:C3:67:F7:0A:E6:E1:8D:87
X509v3 Authority Key Identifier:
keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/1jm2Vs4qW_qgr_Rlw2f3CubhjYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.201.162.0/24
89.37.12.0/24
185.135.228.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:22:de:4a:f3:57:48:9b:b7:ca:b4:b9:d5:06:28:28:a0:2d:
db:c4:87:e6:76:fd:e3:18:6b:aa:41:d6:4a:2a:bc:00:4e:25:
ba:83:b1:b3:0d:3c:03:d6:ab:ad:73:23:2d:2b:39:57:68:35:
12:cc:3c:73:d2:ea:b8:36:4c:af:5b:36:a5:56:c4:30:80:da:
ff:29:92:41:49:06:4c:13:25:5b:da:5a:23:d9:87:31:51:49:
96:43:c5:ff:a3:b1:3a:66:e2:3f:90:47:bc:6a:c8:93:3d:54:
20:53:83:80:8b:71:9b:40:85:bc:40:a4:4a:ab:98:2d:ec:44:
f2:57:46:9d:af:44:8e:af:a2:ac:67:6c:a5:c6:8a:f4:44:10:
1f:d9:64:4e:24:8a:77:1f:99:f9:5f:ec:1d:e5:f6:07:58:86:
1e:42:91:80:dc:4e:3b:fa:22:90:f1:d9:c6:6e:13:b6:fc:d4:
72:80:8d:30:dd:11:6b:96:f6:09:2a:be:3c:42:ee:b6:15:3e:
ad:a1:d3:d7:e2:21:d8:af:8a:52:5a:5c:1a:58:92:4b:3f:60:
74:e7:07:30:77:69:e6:3a:83:7e:2d:8f:b0:9d:1e:cb:ac:41:
d5:02:e4:94:24:e9:a8:09:9d:74:08:85:90:56:64:ab:56:3e:
4c:70:d9:23
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY1CZ74yH75YE9T5emzT7YJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4
OTk1YWIwHhcNMjQwMTI1MjA1NTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjM5YjY1NmNlMmE1YmZhYTBhZmY0NjVjMzY3ZjcwYWU2ZTE4ZDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisRLTpX1uRUE/sMry/Pn/k4R1Qyv
a5ZoK5rbiIOp3/oCBgeOqlxzgXzgyTETq9iGK1KMk9rPy2JpN75Tfy179sB7LMZR
lRii9admNj1tjjEzoouPYYfIOpTO3DFdfmT7xFS8iLlS8H6fC0+Edcr26lAYr05m
joIxIghmhnm+sgz1KErvM+0G6WDqxEZ5PW4L2Cmv1aZDeWGgo9OkFjEuJjQixNh/
vLZ7hHVF1zgIHeDe3xMecT2MfVfFi1MULky2ajaByLTn3dCQFfF5dzmhuzYrz7iq
Hb89g849JD+Uyjh9qjU5te1pRZgKNlb8PxVkXVdOaQq5vKTzEG+xrmGXIwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNY5tlbOKlv6oK/0ZcNn9wrm4Y2HMB8GA1UdIwQY
MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt
NDBiNmQ2N2ZjZDk0LzEvMWptMlZzNHFXX3Fncl9SbHcyZjNDdWJoalljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0
LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABcmiAwQA
WSUMAwQCuYfkMA0GCSqGSIb3DQEBCwUAA4IBAQBuIt5K81dIm7fKtLnVBigooC3b
xIfmdv3jGGuqQdZKKrwATiW6g7GzDTwD1qutcyMtKzlXaDUSzDxz0uq4NkyvWzal
VsQwgNr/KZJBSQZMEyVb2loj2YcxUUmWQ8X/o7E6ZuI/kEe8asiTPVQgU4OAi3Gb
QIW8QKRKq5gt7ETyV0adr0SOr6KsZ2ylxor0RBAf2WROJIp3H5n5X+wd5fYHWIYe
QpGA3E47+iKQ8dnGbhO2/NRygI0w3RFrlvYJKr48Qu62FT6todPX4iHYr4pSWlwa
WJJLP2B05wcwd2nmOoN+LY+wnR7LrEHVAuSUJOmoCZ10CIWQVmSrVj5McNkj
-----END CERTIFICATE-----
Generated at Fri Jan 26 15:52:02 2024 by rpki-client on console-ams.rpki-client.org