Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/j5-K1JBWew2ne7al_608Ef1O7QA.roa
File: j5-K1JBWew2ne7al_608Ef1O7QA.roa (raw, json)
Hash identifier: /WKamzvps8MtyNYpqaS+PSDylGzOZY0PNRzbUe/TxLw=
Subject key identifier: 8F:9F:8A:D4:90:56:7B:0D:A7:7B:B6:A5:FF:AD:3C:11:FD:4E:ED:00
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 019232551122447493EC0E2C659677BD764F
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/j5-K1JBWew2ne7al_608Ef1O7QA.roa
Signing time: Fri 27 Sep 2024 07:14:48 +0000
ROA not before: Fri 27 Sep 2024 07:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 37.58.48.0/20 maxlen: 20
46.165.192.0/18 maxlen: 18
78.159.96.0/19 maxlen: 19
84.16.224.0/19 maxlen: 19
91.109.16.0/20 maxlen: 20
178.162.192.0/18 maxlen: 18
185.17.144.0/22 maxlen: 22
212.95.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 30 Sep 2024 07:40:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:55:11:22:44:74:93:ec:0e:2c:65:96:77:bd:76:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Sep 27 07:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f9f8ad490567b0da77bb6a5ffad3c11fd4eed00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:0d:10:83:b3:fa:07:75:f0:21:0f:d9:72:09:
7c:9e:2f:64:07:42:38:83:96:c9:a8:c6:f4:3a:d0:
41:0d:a1:37:1b:b3:95:c8:9a:be:05:7d:56:80:84:
1d:52:41:9c:5e:b4:1b:6b:51:ec:64:81:27:d9:8b:
ae:62:99:35:ab:1a:d2:b3:e3:18:05:ab:de:37:1c:
6f:70:7b:6f:d1:2a:36:d0:59:71:21:c1:61:d7:91:
aa:54:a0:ee:1e:53:a9:e1:c3:93:d1:3c:26:22:50:
d1:28:94:f0:54:51:56:e2:27:57:65:5c:b5:a6:ed:
89:b3:05:2f:b4:0f:50:b7:79:f7:93:a4:a9:9d:c2:
ae:ab:fe:88:b0:90:d9:f1:60:d9:ea:68:b8:e2:ae:
40:e5:bf:eb:7f:63:5a:7d:76:0c:49:96:44:3e:c3:
e7:8e:22:11:10:52:ab:63:fc:25:8a:78:78:cc:d5:
56:9c:fb:b0:a6:0c:42:04:28:23:2e:15:8f:3a:a7:
1c:5a:04:81:36:8a:92:48:e0:0d:e7:d9:ef:9e:64:
db:2a:a0:85:b0:df:3e:c7:19:cc:e5:1a:f7:9d:d4:
75:cf:36:86:fd:e2:d7:f9:3f:8a:24:59:93:b6:95:
8d:08:f0:a7:cf:9d:7d:79:6a:5a:bb:c6:1a:72:14:
4f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:8A:D4:90:56:7B:0D:A7:7B:B6:A5:FF:AD:3C:11:FD:4E:ED:00
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/j5-K1JBWew2ne7al_608Ef1O7QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.58.48.0/20
46.165.192.0/18
78.159.96.0/19
84.16.224.0/19
91.109.16.0/20
178.162.192.0/18
185.17.144.0/22
212.95.32.0/19
Signature Algorithm: sha256WithRSAEncryption
19:67:40:c9:35:58:f2:43:db:03:0b:28:ed:7b:00:41:1e:8c:
40:61:1a:fd:13:d0:b1:45:90:35:3e:af:25:a0:d7:00:f8:00:
4f:c1:33:11:8b:f9:80:ac:9f:93:d7:0d:8b:0f:1b:ab:e5:3a:
c1:c5:2b:4c:43:1d:5a:89:97:a6:e9:d2:3d:37:30:1f:a9:19:
77:a6:3b:31:7e:39:2c:20:c3:20:bd:2d:7a:b9:ce:ac:62:d5:
70:04:e5:90:ef:2a:da:3b:82:6c:cd:dd:06:af:a2:b5:b7:fd:
59:38:58:ff:1b:db:ce:56:9a:86:82:4d:a4:61:e4:6e:39:35:
da:fe:f9:0c:1f:25:b4:95:0c:72:19:a5:a6:ca:ac:48:df:c6:
26:be:d3:b7:9c:6a:63:e3:00:84:77:98:1f:9f:86:81:24:42:
7f:33:f3:12:04:f2:bf:03:00:26:c2:5d:8b:e5:e7:60:3d:90:
26:9a:1e:59:0b:25:7e:f2:ab:d6:02:7b:88:29:5b:a6:cb:5a:
1f:5d:ce:79:af:de:9c:5f:2a:b2:5d:5d:31:95:2a:d6:51:f4:
fe:71:ac:21:6f:96:00:47:05:6c:cb:54:00:d6:1a:e3:08:44:
4a:c8:63:24:44:47:8c:7d:ff:17:6e:bd:14:5b:26:87:9f:19:
98:f1:86:d0
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZIyVREiRHST7A4sZZZ3vXZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NTQ0MzZlZDMyNDJiZGRiOTZmZGYxMzlhMTI1M2RlYjk4
NmRmZDAwHhcNMjQwOTI3MDcxNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjlmOGFkNDkwNTY3YjBkYTc3YmI2YTVmZmFkM2MxMWZkNGVlZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w0Qg7P6B3XwIQ/Zcgl8ni9kB0I4
g5bJqMb0OtBBDaE3G7OVyJq+BX1WgIQdUkGcXrQba1HsZIEn2YuuYpk1qxrSs+MY
BaveNxxvcHtv0So20FlxIcFh15GqVKDuHlOp4cOT0TwmIlDRKJTwVFFW4idXZVy1
pu2JswUvtA9Qt3n3k6SpncKuq/6IsJDZ8WDZ6mi44q5A5b/rf2NafXYMSZZEPsPn
jiIREFKrY/wlinh4zNVWnPuwpgxCBCgjLhWPOqccWgSBNoqSSOAN59nvnmTbKqCF
sN8+xxnM5Rr3ndR1zzaG/eLX+T+KJFmTtpWNCPCnz519eWpau8YachRPVwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFI+fitSQVnsNp3u2pf+tPBH9Tu0AMB8GA1UdIwQY
MBaAFNZUQ27TJCvduW/fE5oSU965ht/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUt
YTE0MjA4N2NlODkwLzEvajUtSzFKQldldzJuZTdhbF82MDhFZjFPN1FBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZGU5NGEtMWU2MC00ZWI4LTlhNWUtYTE0MjA4N2NlODkw
LzEvMWxSRGJ0TWtLOTI1Yjk4VG1oSlQzcm1HMzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQEJTowAwQG
LqXAAwQFTp9gAwQFVBDgAwQEW20QAwQGsqLAAwQCuRGQAwQF1F8gMA0GCSqGSIb3
DQEBCwUAA4IBAQAZZ0DJNVjyQ9sDCyjtewBBHoxAYRr9E9CxRZA1Pq8loNcA+ABP
wTMRi/mArJ+T1w2LDxur5TrBxStMQx1aiZem6dI9NzAfqRl3pjsxfjksIMMgvS16
uc6sYtVwBOWQ7yraO4Jszd0Gr6K1t/1ZOFj/G9vOVpqGgk2kYeRuOTXa/vkMHyW0
lQxyGaWmyqxI38YmvtO3nGpj4wCEd5gfn4aBJEJ/M/MSBPK/AwAmwl2L5edgPZAm
mh5ZCyV+8qvWAnuIKVumy1ofXc55r96cXyqyXV0xlSrWUfT+cawhb5YARwVsy1QA
1hrjCERKyGMkREeMff8Xbr0UWyaHnxmY8YbQ
-----END CERTIFICATE-----
Generated at Sun Apr 20 18:17:31 2025 by rpki-client