Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5oMAhhQxsw2wN6-hpFpqmywbuys.roa
File: 5oMAhhQxsw2wN6-hpFpqmywbuys.roa (raw, json)
Hash identifier: iK2et40L5emh4m3O+7oynzhe/JYe++bR5nVaLjZlDGk=
Subject key identifier: E6:83:00:86:14:31:B3:0D:B0:37:AF:A1:A4:5A:6A:9B:2C:1B:BB:2B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0185CA0F6347FB4D4C2FC73255C807129C46
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5oMAhhQxsw2wN6-hpFpqmywbuys.roa
Signing time: Thu 19 Jan 2023 12:44:44 +0000
ROA not before: Thu 19 Jan 2023 12:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 188.241.136.0/24 maxlen: 24
188.241.137.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
185.112.249.0/24 maxlen: 24
62.192.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 31 Jan 2023 10:43:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ca:0f:63:47:fb:4d:4c:2f:c7:32:55:c8:07:12:9c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 19 12:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e68300861431b30db037afa1a45a6a9b2c1bbb2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:59:13:62:b4:7d:40:79:8f:af:0f:d9:65:ac:
fc:4d:34:52:e6:6d:e8:41:84:3d:92:b5:25:51:79:
ac:ef:2b:35:8a:85:3a:85:fd:d7:92:bd:23:d1:6b:
b7:0b:6a:ac:d1:37:dd:d8:bf:c2:71:0b:d6:e4:1e:
9b:f6:d6:44:f0:ec:c9:68:1e:08:a7:04:ba:40:60:
84:99:d8:ba:7b:01:bc:b1:31:19:85:81:d9:a1:7c:
60:f6:9d:5a:cc:59:73:a8:ea:bc:74:a4:63:3a:b8:
5f:61:d9:dc:ce:da:71:42:01:c2:ce:2a:62:b8:d3:
e8:5c:55:d3:4d:d9:fb:a2:01:53:5f:50:8f:d5:13:
43:fc:c4:cb:cc:6a:a3:2b:5d:e3:a0:67:a1:6b:fa:
80:c3:e3:77:bf:9e:30:c8:9a:09:f4:b9:86:06:5b:
19:c7:60:89:71:86:f9:ee:77:b6:79:66:20:4a:63:
ec:9e:f7:7c:de:04:88:d4:3a:be:ec:aa:a5:17:97:
ce:99:4d:ab:a8:57:b5:96:a6:cc:b9:ff:47:74:3d:
df:42:a5:17:a3:e1:6f:fe:58:6d:76:5b:6f:33:2d:
15:36:4a:bd:60:21:90:08:b0:1a:39:30:46:08:6b:
a8:96:b8:7c:9b:d1:26:ab:e9:49:21:a2:af:7b:a7:
b3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:83:00:86:14:31:B3:0D:B0:37:AF:A1:A4:5A:6A:9B:2C:1B:BB:2B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5oMAhhQxsw2wN6-hpFpqmywbuys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.192.152.0/24
93.114.244.0/24
185.112.249.0/24
188.241.136.0/23
Signature Algorithm: sha256WithRSAEncryption
08:eb:ed:58:92:5a:e8:fb:78:18:ea:ba:05:db:91:64:51:ac:
91:20:f5:9f:af:79:11:7e:45:c6:dd:c5:99:b6:30:86:ef:35:
f5:19:dd:06:1a:81:67:b7:df:f7:bb:10:b1:a1:12:93:f2:27:
44:44:ab:4c:ae:7a:4c:59:84:cb:24:14:52:3f:1b:b0:ed:5b:
d3:3a:4c:cd:82:00:de:41:74:cf:03:bd:d8:8c:1e:ff:23:c3:
da:16:8c:b9:f2:e7:74:8d:36:9e:48:97:99:08:b6:05:49:15:
f4:27:aa:02:63:ab:1b:34:fa:64:bc:70:81:d8:a3:c1:db:ca:
0e:1f:3d:4d:c6:5f:59:fb:dd:56:a9:48:5c:cd:ac:54:3a:f4:
b6:7e:db:37:cc:06:a6:7b:cd:d8:ef:27:74:34:a2:c1:e0:72:
9c:c1:c1:d0:b3:f1:9a:dd:41:03:ae:a1:09:f1:4b:6a:b6:e5:
02:cc:57:af:c5:f7:e6:e6:a4:01:c1:ed:0f:44:98:03:c3:92:
f2:b6:58:91:d5:bd:13:60:73:0a:b7:78:e7:29:98:f6:08:cd:
96:dc:68:9d:6c:68:17:37:93:4e:03:37:24:d5:96:54:c7:ad:
d3:e7:70:42:3c:af:4c:81:23:fb:97:34:24:6b:30:71:d9:51:
6a:0c:ed:0a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYXKD2NH+01ML8cyVcgHEpxGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMwMTE5MTI0NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjgzMDA4NjE0MzFiMzBkYjAzN2FmYTFhNDVhNmE5YjJjMWJiYjJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lkTYrR9QHmPrw/ZZaz8TTRS5m3o
QYQ9krUlUXms7ys1ioU6hf3Xkr0j0Wu3C2qs0Tfd2L/CcQvW5B6b9tZE8OzJaB4I
pwS6QGCEmdi6ewG8sTEZhYHZoXxg9p1azFlzqOq8dKRjOrhfYdncztpxQgHCzipi
uNPoXFXTTdn7ogFTX1CP1RND/MTLzGqjK13joGeha/qAw+N3v54wyJoJ9LmGBlsZ
x2CJcYb57ne2eWYgSmPsnvd83gSI1Dq+7KqlF5fOmU2rqFe1lqbMuf9HdD3fQqUX
o+Fv/lhtdltvMy0VNkq9YCGQCLAaOTBGCGuolrh8m9Emq+lJIaKve6ezKwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOaDAIYUMbMNsDevoaRaapssG7srMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNW9NQWhoUXhzdzJ3TjYtaHBGcHFteXdidXlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAPsCYAwQA
XXL0AwQAuXD5AwQBvPGIMA0GCSqGSIb3DQEBCwUAA4IBAQAI6+1Yklro+3gY6roF
25FkUayRIPWfr3kRfkXG3cWZtjCG7zX1Gd0GGoFnt9/3uxCxoRKT8idERKtMrnpM
WYTLJBRSPxuw7VvTOkzNggDeQXTPA73YjB7/I8PaFoy58ud0jTaeSJeZCLYFSRX0
J6oCY6sbNPpkvHCB2KPB28oOHz1Nxl9Z+91WqUhczaxUOvS2fts3zAame83Y7yd0
NKLB4HKcwcHQs/Ga3UEDrqEJ8UtqtuUCzFevxffm5qQBwe0PRJgDw5LytliR1b0T
YHMKt3jnKZj2CM2W3GidbGgXN5NOAzck1ZZUx63T53BCPK9MgSP7lzQkazBx2VFq
DO0K
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org