Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EooSlxDNNO6Z8n-zdbQCFbn8HJ8.roa
File: EooSlxDNNO6Z8n-zdbQCFbn8HJ8.roa (raw, json)
Hash identifier: uK9sN9c/uebLDiwBoufRWaSTfeb8EkXIM2f4FWd3Ln0=
Subject key identifier: 12:8A:12:97:10:CD:34:EE:99:F2:7F:B3:75:B4:02:15:B9:FC:1C:9F
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0191A80CE40561EBFA4837C73CA7F24B4D59
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EooSlxDNNO6Z8n-zdbQCFbn8HJ8.roa
Signing time: Sat 31 Aug 2024 10:48:22 +0000
ROA not before: Sat 31 Aug 2024 10:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 5.172.179.0/24 maxlen: 24
31.41.253.0/24 maxlen: 24
45.10.248.0/22 maxlen: 22
45.87.255.0/24 maxlen: 24
45.94.228.0/22 maxlen: 22
45.95.28.0/24 maxlen: 24
45.95.148.0/22 maxlen: 22
45.128.129.0/24 maxlen: 24
45.129.4.0/22 maxlen: 22
45.142.254.0/24 maxlen: 24
88.151.11.0/24 maxlen: 24
91.190.158.0/24 maxlen: 24
93.190.123.0/24 maxlen: 24
94.154.188.0/24 maxlen: 24
94.154.189.0/24 maxlen: 24
94.154.191.0/24 maxlen: 24
176.116.17.0/24 maxlen: 24
176.126.98.0/24 maxlen: 24
176.126.102.0/24 maxlen: 24
185.222.214.0/24 maxlen: 24
193.187.106.0/24 maxlen: 24
193.201.9.0/24 maxlen: 24
194.50.73.0/24 maxlen: 24
194.104.232.0/24 maxlen: 24
212.60.7.0/24 maxlen: 24
217.8.117.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 10:33:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a8:0c:e4:05:61:eb:fa:48:37:c7:3c:a7:f2:4b:4d:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 31 10:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=128a129710cd34ee99f27fb375b40215b9fc1c9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:bf:96:c2:66:fc:45:b2:73:18:3e:98:35:
3f:1c:cd:01:10:90:0b:8a:c5:3c:a2:2b:6c:97:b5:
38:0b:1c:10:ec:43:c5:56:e7:b9:ed:b2:a3:5a:ef:
10:15:33:3c:d8:98:12:15:df:c9:31:6b:3e:c1:a5:
e8:b9:59:cc:5f:af:91:df:61:fd:28:12:f3:f9:2a:
35:45:7a:79:eb:eb:56:4a:b5:0d:2a:b7:38:90:5c:
63:82:b9:3c:13:00:52:92:a2:17:0a:7c:c4:a2:8a:
fc:57:71:d2:cf:78:f3:45:d7:3c:5b:7f:86:cb:5c:
e4:af:4e:37:00:73:12:a9:94:21:06:34:17:60:f7:
38:56:ef:2b:eb:2f:89:f7:3a:cf:fd:97:5a:31:07:
fe:20:68:f3:db:ad:59:34:46:90:b5:6b:c2:3e:f9:
5a:8a:ae:6b:8e:ae:9c:66:ad:08:02:8b:7b:83:2e:
27:21:ba:f1:3e:9c:9c:37:7f:26:ce:41:52:84:69:
d3:a0:b6:cd:6e:43:97:48:4b:83:01:f7:65:3f:de:
98:12:19:a9:8a:80:69:38:11:5d:e6:50:80:7e:8f:
6a:88:ff:05:5f:8b:dd:fc:56:83:cf:c3:e3:71:25:
11:75:5b:bc:04:8d:e7:60:0e:d1:04:02:0f:3b:ce:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:8A:12:97:10:CD:34:EE:99:F2:7F:B3:75:B4:02:15:B9:FC:1C:9F
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/EooSlxDNNO6Z8n-zdbQCFbn8HJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.179.0/24
31.41.253.0/24
45.10.248.0/22
45.87.255.0/24
45.94.228.0/22
45.95.28.0/24
45.95.148.0/22
45.128.129.0/24
45.129.4.0/22
45.142.254.0/24
88.151.11.0/24
91.190.158.0/24
93.190.123.0/24
94.154.188.0/23
94.154.191.0/24
176.116.17.0/24
176.126.98.0/24
176.126.102.0/24
185.222.214.0/24
193.187.106.0/24
193.201.9.0/24
194.50.73.0/24
194.104.232.0/24
212.60.7.0/24
217.8.117.0/24
Signature Algorithm: sha256WithRSAEncryption
91:73:41:c4:6f:42:51:ee:ae:30:06:8d:08:5c:75:85:c1:49:
6c:02:fe:ae:bc:5e:c6:01:e3:be:a5:cc:f7:63:ae:b8:ce:73:
81:ae:d3:bf:11:52:22:35:35:07:c6:6d:dc:c9:c5:18:46:ab:
a1:7f:c4:42:83:4e:ca:ed:78:61:7b:d2:40:98:f6:6b:b4:3a:
67:e6:a7:28:36:18:2d:df:15:d8:08:bf:d6:b2:c9:19:3e:7f:
0c:78:c6:0d:a8:0c:8d:8c:f4:13:bf:39:87:f4:22:b5:1c:6f:
6a:b1:0d:d8:83:f3:ec:64:ae:13:44:b6:41:c9:5a:08:e4:c7:
45:4a:ba:54:12:cf:45:fb:ed:66:7b:e7:3f:46:38:0f:6d:14:
02:e6:76:ed:eb:ff:41:8d:12:ec:65:19:e8:93:db:d8:8f:6f:
30:c7:46:eb:3d:15:19:66:d0:aa:42:35:c1:f5:6e:81:bc:ae:
bf:b5:d2:8f:7f:9a:4a:e6:aa:ab:37:03:99:e6:21:30:a8:0a:
18:d7:82:97:da:fb:3b:56:33:13:13:89:f4:ee:eb:2d:b2:9d:
5d:61:b3:e3:69:d8:86:01:ba:59:56:25:86:3c:bb:44:b6:e8:
bc:dc:41:37:10:c2:86:7c:af:bc:fb:44:e7:22:c5:ea:0f:00:
4f:85:a5:c5
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgISAZGoDOQFYev6SDfHPKfyS01ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwODMxMTA0ODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjhhMTI5NzEwY2QzNGVlOTlmMjdmYjM3NWI0MDIxNWI5ZmMxYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv6/lsJm/EWycxg+mDU/HM0BEJAL
isU8oitsl7U4CxwQ7EPFVue57bKjWu8QFTM82JgSFd/JMWs+waXouVnMX6+R32H9
KBLz+So1RXp56+tWSrUNKrc4kFxjgrk8EwBSkqIXCnzEoor8V3HSz3jzRdc8W3+G
y1zkr043AHMSqZQhBjQXYPc4Vu8r6y+J9zrP/ZdaMQf+IGjz261ZNEaQtWvCPvla
iq5rjq6cZq0IAot7gy4nIbrxPpycN38mzkFShGnToLbNbkOXSEuDAfdlP96YEhmp
ioBpOBFd5lCAfo9qiP8FX4vd/FaDz8PjcSURdVu8BI3nYA7RBAIPO87luwIDAQAB
o4ICnjCCApowHQYDVR0OBBYEFBKKEpcQzTTumfJ/s3W0AhW5/ByfMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvRW9vU2x4RE5OTzZaOG4temRiUUNGYm44SEo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGzBggrBgEFBQcBBwEB/wSBozCBoDCBnQQCAAEwgZYDBAAF
rLMDBAAfKf0DBAItCvgDBAAtV/8DBAItXuQDBAAtXxwDBAItX5QDBAAtgIEDBAIt
gQQDBAAtjv4DBABYlwsDBABbvp4DBABdvnsDBAFemrwDBABemr8DBACwdBEDBACw
fmIDBACwfmYDBAC53tYDBADBu2oDBADByQkDBADCMkkDBADCaOgDBADUPAcDBADZ
CHUwDQYJKoZIhvcNAQELBQADggEBAJFzQcRvQlHurjAGjQhcdYXBSWwC/q68XsYB
476lzPdjrrjOc4Gu078RUiI1NQfGbdzJxRhGq6F/xEKDTsrteGF70kCY9mu0Omfm
pyg2GC3fFdgIv9ayyRk+fwx4xg2oDI2M9BO/OYf0IrUcb2qxDdiD8+xkrhNEtkHJ
Wgjkx0VKulQSz0X77WZ75z9GOA9tFALmdu3r/0GNEuxlGeiT29iPbzDHRus9FRlm
0KpCNcH1boG8rr+10o9/mkrmqqs3A5nmITCoChjXgpfa+ztWMxMTifTu6y2ynV1h
s+Np2IYBullWJYY8u0S26LzcQTcQwoZ8r7z7ROcixeoPAE+FpcU=
-----END CERTIFICATE-----
Generated at Mon Sep 9 12:50:08 2024 by rpki-client on console-fra.rpki-client.org