Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/CfTJPjer6akfPmRTpDToAPRknu8.roa
File: CfTJPjer6akfPmRTpDToAPRknu8.roa (raw, json)
Hash identifier: uQoPl+Di1sxx5qmyFjKIPfAkER2C8+X00m6jnUwpOUc=
Subject key identifier: 09:F4:C9:3E:37:AB:E9:A9:1F:3E:64:53:A4:34:E8:00:F4:64:9E:EF
Certificate issuer: /CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Certificate serial: 01907C83EB30AD1B8B3F9A9EB2197B1ACC71
Authority key identifier: 39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/CfTJPjer6akfPmRTpDToAPRknu8.roa
Signing time: Thu 04 Jul 2024 06:52:18 +0000
ROA not before: Thu 04 Jul 2024 06:52:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202207
IP address blocks: 5.56.160.0/21 maxlen: 21
5.181.44.0/22 maxlen: 22
5.181.44.0/24 maxlen: 24
5.181.45.0/24 maxlen: 24
5.181.46.0/24 maxlen: 24
5.181.47.0/24 maxlen: 24
185.5.124.0/22 maxlen: 22
185.5.124.0/24 maxlen: 24
185.5.125.0/24 maxlen: 24
185.5.126.0/24 maxlen: 24
185.5.127.0/24 maxlen: 24
2a03:1c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 05 Jul 2024 09:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7c:83:eb:30:ad:1b:8b:3f:9a:9e:b2:19:7b:1a:cc:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39027738f978feda24a9d87b0cb8bb9aa7af540d
Validity
Not Before: Jul 4 06:52:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09f4c93e37abe9a91f3e6453a434e800f4649eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:39:54:1f:0a:a7:df:2f:fb:45:86:71:34:c5:
7c:fe:a6:ae:94:56:bb:ef:cb:4b:fb:4c:30:c7:2a:
7c:c3:f2:2c:c2:13:ac:13:64:90:0d:9a:9c:e0:94:
aa:cc:28:b9:93:ca:1c:8a:e3:4d:d3:ec:0b:3f:a7:
ae:72:6c:0c:7d:d7:c9:94:80:99:12:8b:6f:b7:77:
56:30:ec:c3:cb:44:5f:7b:cf:74:b9:20:7b:09:a5:
c1:b9:01:9d:f4:20:13:28:6e:1d:6f:cd:7f:b2:1a:
9c:df:26:53:70:f5:dd:32:2c:d1:7a:57:1f:1d:d2:
97:72:f8:59:91:29:89:0f:a5:14:b2:9e:7e:4d:90:
74:9b:4f:17:fe:0e:d4:0f:4a:ef:fa:f7:c6:0f:ba:
8f:ea:8d:6d:f8:02:7a:be:72:1b:d7:34:12:18:7a:
cb:49:a9:4d:cb:a8:e3:aa:30:ed:f7:36:73:36:79:
d4:17:7f:3c:57:e2:c6:2e:7f:b7:c7:fb:ca:0c:d8:
84:1e:f8:13:31:c4:25:b3:c7:b0:35:3e:9c:91:2f:
ad:24:66:6a:9b:71:5b:90:2e:4c:cb:16:5e:e0:09:
ed:be:84:ef:82:a8:c1:e9:59:92:b0:1d:c6:e2:d0:
96:11:35:6c:5b:e2:c2:3a:67:d5:dc:b4:7f:c0:c6:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F4:C9:3E:37:AB:E9:A9:1F:3E:64:53:A4:34:E8:00:F4:64:9E:EF
X509v3 Authority Key Identifier:
keyid:39:02:77:38:F9:78:FE:DA:24:A9:D8:7B:0C:B8:BB:9A:A7:AF:54:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OQJ3OPl4_tokqdh7DLi7mqevVA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/CfTJPjer6akfPmRTpDToAPRknu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b9117c-51c5-4af8-bbef-f5d8ab7c15f0/1/OQJ3OPl4_tokqdh7DLi7mqevVA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.160.0/21
5.181.44.0/22
185.5.124.0/22
IPv6:
2a03:1c0::/32
Signature Algorithm: sha256WithRSAEncryption
31:e5:f2:30:d8:b0:6e:17:3e:e2:d0:e9:84:4f:f4:5c:8d:4d:
5a:0b:a0:76:fb:11:13:60:7b:73:5f:b9:40:3d:1d:56:d2:6f:
4b:0b:bf:2a:24:40:7a:54:95:d2:72:b2:68:b7:e1:ff:f5:a4:
bf:f5:d7:26:a3:72:6c:52:17:88:75:4c:24:88:f1:76:c4:61:
25:3c:0a:9f:d8:64:e4:2d:1d:23:d5:a1:4d:e4:3a:25:bb:06:
73:1e:e1:81:5f:b2:20:74:f2:59:91:e5:96:10:5f:c4:39:b9:
cf:53:67:35:4e:f9:ca:5d:5e:84:76:03:75:6b:8f:8b:de:f5:
9e:3e:32:7c:d5:93:3d:2f:1a:7b:89:ff:35:9c:70:89:72:c6:
4c:89:a2:6e:9a:f7:7a:f5:ff:f9:4e:6b:86:89:4a:5f:14:8c:
c0:70:42:d7:8b:4f:14:63:e0:80:ee:fb:30:44:0b:33:8d:a2:
40:33:59:a6:d9:a7:1f:36:a2:46:28:12:df:bf:cb:6a:70:b1:
74:5b:57:db:e2:e0:b5:6a:2b:d1:6e:2e:54:d9:39:23:de:05:
55:bb:b5:ad:32:90:19:ed:10:23:3c:ff:c7:65:ee:96:21:11:
77:03:24:bd:44:8a:0d:61:06:2b:d8:55:9b:3e:ef:00:9b:11:
0e:d8:2b:23
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZB8g+swrRuLP5qeshl7GsxxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MDI3NzM4Zjk3OGZlZGEyNGE5ZDg3YjBjYjhiYjlhYTdh
ZjU0MGQwHhcNMjQwNzA0MDY1MjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWY0YzkzZTM3YWJlOWE5MWYzZTY0NTNhNDM0ZTgwMGY0NjQ5ZWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTlUHwqn3y/7RYZxNMV8/qaulFa7
78tL+0wwxyp8w/IswhOsE2SQDZqc4JSqzCi5k8ociuNN0+wLP6eucmwMfdfJlICZ
Eotvt3dWMOzDy0Rfe890uSB7CaXBuQGd9CATKG4db81/shqc3yZTcPXdMizRelcf
HdKXcvhZkSmJD6UUsp5+TZB0m08X/g7UD0rv+vfGD7qP6o1t+AJ6vnIb1zQSGHrL
SalNy6jjqjDt9zZzNnnUF388V+LGLn+3x/vKDNiEHvgTMcQls8ewNT6ckS+tJGZq
m3FbkC5MyxZe4AntvoTvgqjB6VmSsB3G4tCWETVsW+LCOmfV3LR/wMYGcwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAn0yT43q+mpHz5kU6Q06AD0ZJ7vMB8GA1UdIwQY
MBaAFDkCdzj5eP7aJKnYewy4u5qnr1QNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1FKM09QbDRfdG9rcWRoN0RMaTdtcWV2VkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTExN2MtNTFjNS00YWY4LWJiZWYt
ZjVkOGFiN2MxNWYwLzEvQ2ZUSlBqZXI2YWtmUG1SVHBEVG9BUFJrbnU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9iOTExN2MtNTFjNS00YWY4LWJiZWYtZjVkOGFiN2MxNWYw
LzEvT1FKM09QbDRfdG9rcWRoN0RMaTdtcWV2VkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBTigAwQC
BbUsAwQCuQV8MA0EAgACMAcDBQAqAwHAMA0GCSqGSIb3DQEBCwUAA4IBAQAx5fIw
2LBuFz7i0OmET/RcjU1aC6B2+xETYHtzX7lAPR1W0m9LC78qJEB6VJXScrJot+H/
9aS/9dcmo3JsUheIdUwkiPF2xGElPAqf2GTkLR0j1aFN5DoluwZzHuGBX7IgdPJZ
keWWEF/EObnPU2c1TvnKXV6EdgN1a4+L3vWePjJ81ZM9Lxp7if81nHCJcsZMiaJu
mvd69f/5TmuGiUpfFIzAcELXi08UY+CA7vswRAszjaJAM1mm2acfNqJGKBLfv8tq
cLF0W1fb4uC1aivRbi5U2Tkj3gVVu7WtMpAZ7RAjPP/HZe6WIRF3AyS9RIoNYQYr
2FWbPu8AmxEO2Csj
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:31:07 2025 by rpki-client