Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/51KheGPxzbK4D1Nq3iv6bDhUsJc.roa
File: 51KheGPxzbK4D1Nq3iv6bDhUsJc.roa (raw, json)
Hash identifier: DIp1GAaIWYFr/aCqsz6JMJ5LiptNPmYwPeN0jQPviSc=
Subject key identifier: E7:52:A1:78:63:F1:CD:B2:B8:0F:53:6A:DE:2B:FA:6C:38:54:B0:97
Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial: 01878ED3DB3E3F4895D10B295FE565F198FB
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/51KheGPxzbK4D1Nq3iv6bDhUsJc.roa
Signing time: Mon 17 Apr 2023 10:47:41 +0000
ROA not before: Mon 17 Apr 2023 10:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59422
IP address blocks: 5.149.96.0/24 maxlen: 24
5.149.110.0/24 maxlen: 24
5.149.107.0/24 maxlen: 24
2a12:2340::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Apr 2023 11:28:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:d3:db:3e:3f:48:95:d1:0b:29:5f:e5:65:f1:98:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Validity
Not Before: Apr 17 10:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e752a17863f1cdb2b80f536ade2bfa6c3854b097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2b:1c:79:bc:e9:c1:58:cd:c2:b1:99:31:2b:
5b:44:51:65:57:75:ac:2c:41:94:66:7c:30:8d:a1:
2a:b4:1f:ea:62:7d:3e:a4:1d:9d:55:be:f4:12:2a:
cc:a5:55:5b:3c:36:20:7c:80:90:75:c6:76:a9:64:
9e:6b:25:4a:1b:fd:8f:bd:02:27:20:b7:02:e5:ca:
bd:83:a1:c1:e6:f4:f9:6f:c8:ea:90:de:0d:eb:48:
76:9c:03:ac:38:73:d0:66:eb:35:f1:01:b2:43:aa:
f3:fb:1f:58:66:58:6f:43:72:68:d0:8c:a2:d8:57:
aa:ff:63:79:94:77:3c:51:36:f5:87:17:a2:75:6e:
5d:08:d9:8e:f4:5a:6b:c8:17:58:2f:8b:83:84:e5:
da:18:72:2c:70:5e:8a:4d:87:0d:73:cd:a6:f7:f1:
eb:cd:bb:50:c9:96:9f:5a:22:38:6b:26:ee:1a:98:
89:97:d1:9c:25:d1:26:32:f1:14:92:76:e5:03:a0:
20:76:26:98:5e:bc:d1:d2:4f:15:0d:88:0f:71:1b:
f1:31:5b:71:85:32:dc:2e:b4:53:bd:a8:27:bc:bd:
8c:28:a8:40:a8:14:ad:4d:79:33:06:ea:4d:9e:95:
a9:2b:5b:ae:f0:6a:4f:b3:42:4f:42:df:a4:a3:5e:
57:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:52:A1:78:63:F1:CD:B2:B8:0F:53:6A:DE:2B:FA:6C:38:54:B0:97
X509v3 Authority Key Identifier:
keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/51KheGPxzbK4D1Nq3iv6bDhUsJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.149.96.0/24
5.149.107.0/24
5.149.110.0/24
IPv6:
2a12:2340::/48
Signature Algorithm: sha256WithRSAEncryption
09:83:6a:c2:4f:1b:3e:f7:ef:96:53:d7:9b:82:0a:a8:ae:d1:
aa:fe:36:e7:51:2f:dd:be:2d:fc:22:5e:e6:f7:9f:b9:ea:3b:
80:39:ee:a8:7f:6c:d7:63:be:e8:ce:9f:f3:07:1e:4b:5a:19:
2a:a1:4f:ca:58:23:8f:99:ce:56:9a:d7:95:45:32:33:2f:2e:
77:1f:35:04:f6:8f:3a:3c:cf:29:8a:75:31:f7:d9:d6:ab:9d:
6f:c6:2c:9b:a8:43:38:8e:9a:d9:8b:14:99:0b:b8:fd:8e:95:
67:4a:9b:21:1b:74:35:6c:ca:e6:6a:3c:44:1c:e2:3a:00:78:
60:1b:53:7a:88:be:9f:6f:58:cc:e7:4b:81:64:77:18:39:4b:
fd:58:d6:5f:81:4c:62:d3:da:72:dd:bf:40:cf:26:de:ab:3b:
d6:14:36:51:73:83:68:64:7e:e5:d5:86:49:ed:f3:02:6a:65:
e6:07:69:90:9c:c2:28:dc:80:c4:cc:d0:10:30:27:c2:bf:82:
2e:ee:38:03:5d:07:dc:d3:ff:eb:8c:f1:08:f3:fb:9c:31:c5:
33:a0:52:b0:73:cb:08:7a:a3:2f:72:58:6a:1f:90:99:77:fb:
1d:f4:a2:cb:47:97:83:5f:be:c1:dd:ff:84:11:cb:81:1a:f3:
13:b3:f3:28
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYeO09s+P0iV0QspX+Vl8Zj7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4
M2MzOWEwHhcNMjMwNDE3MTA0NzQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzUyYTE3ODYzZjFjZGIyYjgwZjUzNmFkZTJiZmE2YzM4NTRiMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iscebzpwVjNwrGZMStbRFFlV3Ws
LEGUZnwwjaEqtB/qYn0+pB2dVb70EirMpVVbPDYgfICQdcZ2qWSeayVKG/2PvQIn
ILcC5cq9g6HB5vT5b8jqkN4N60h2nAOsOHPQZus18QGyQ6rz+x9YZlhvQ3Jo0Iyi
2Feq/2N5lHc8UTb1hxeidW5dCNmO9FpryBdYL4uDhOXaGHIscF6KTYcNc82m9/Hr
zbtQyZafWiI4aybuGpiJl9GcJdEmMvEUknblA6AgdiaYXrzR0k8VDYgPcRvxMVtx
hTLcLrRTvagnvL2MKKhAqBStTXkzBupNnpWpK1uu8GpPs0JPQt+ko15XUwIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFOdSoXhj8c2yuA9Tat4r+mw4VLCXMB8GA1UdIwQY
MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt
NDk3YmVkZDcxZWI5LzEvNTFLaGVHUHh6Yks0RDFOcTNpdjZiRGhVc0pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5
LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQABZVgAwQA
BZVrAwQABZVuMA8EAgACMAkDBwAqEiNAAAAwDQYJKoZIhvcNAQELBQADggEBAAmD
asJPGz7375ZT15uCCqiu0ar+NudRL92+LfwiXub3n7nqO4A57qh/bNdjvujOn/MH
HktaGSqhT8pYI4+Zzlaa15VFMjMvLncfNQT2jzo8zymKdTH32darnW/GLJuoQziO
mtmLFJkLuP2OlWdKmyEbdDVsyuZqPEQc4joAeGAbU3qIvp9vWMznS4Fkdxg5S/1Y
1l+BTGLT2nLdv0DPJt6rO9YUNlFzg2hkfuXVhknt8wJqZeYHaZCcwijcgMTM0BAw
J8K/gi7uOANdB9zT/+uM8Qjz+5wxxTOgUrBzywh6oy9yWGofkJl3+x30ostHl4Nf
vsHd/4QRy4Ea8xOz8yg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:00 2024 by rpki-client on console-ams.rpki-client.org