Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xKsmxVcQwt6C-qcwj8XCabvqR7s.roa
File: xKsmxVcQwt6C-qcwj8XCabvqR7s.roa (raw, json)
Hash identifier: Sk5N1crgHeysAa6ea+oa4a2CGPufvszedR0NtylP/dQ=
Subject key identifier: C4:AB:26:C5:57:10:C2:DE:82:FA:A7:30:8F:C5:C2:69:BB:EA:47:BB
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 018F76EF9C4C4A471ECDDC6FD2545BD40847
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xKsmxVcQwt6C-qcwj8XCabvqR7s.roa
Signing time: Tue 14 May 2024 11:49:25 +0000
ROA not before: Tue 14 May 2024 11:49:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 5.102.96.0/20 maxlen: 24
5.102.96.0/21 maxlen: 24
46.20.212.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 May 2024 06:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:ef:9c:4c:4a:47:1e:cd:dc:6f:d2:54:5b:d4:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: May 14 11:49:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ab26c55710c2de82faa7308fc5c269bbea47bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:84:5b:7e:2a:2f:7e:97:99:de:f6:77:78:d4:
ed:e3:41:de:69:69:69:d5:80:9a:22:d2:8e:0d:47:
82:90:d9:26:dd:79:4a:a5:58:80:85:8b:8d:b0:ce:
c4:70:27:35:52:d2:40:bc:ad:a6:54:2f:ca:fe:7b:
72:83:6e:bc:c6:cf:ed:8c:25:d6:f1:ce:cb:75:41:
21:7e:f4:f8:8b:67:4d:d7:6e:0c:9c:1d:c8:ab:8b:
48:a8:3b:76:c0:8c:ee:1e:fd:ed:ae:47:88:9b:35:
b8:52:a3:ea:48:45:14:c4:c7:19:1a:a3:e0:fc:05:
99:22:64:50:b8:85:b0:e9:2e:9a:6e:34:67:a3:a3:
df:f0:27:cb:ce:c9:eb:1a:73:c4:48:88:a9:06:43:
19:f2:be:d5:ae:77:24:a3:af:3b:27:f6:62:d4:42:
37:b9:7c:de:c7:5b:65:79:2e:8a:f2:8b:e5:6d:b6:
e1:0e:e5:2b:e4:c0:e7:50:a1:bf:27:18:36:27:c7:
74:c4:0f:60:3b:c1:3e:44:59:94:f0:bf:72:c2:62:
00:dc:72:17:b8:77:59:f8:fa:34:f7:69:61:93:33:
ac:32:ef:28:49:de:1d:6f:7c:0e:28:1b:fe:ac:53:
a4:18:48:22:f6:a7:87:6b:6b:2d:6c:9f:71:4a:ef:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AB:26:C5:57:10:C2:DE:82:FA:A7:30:8F:C5:C2:69:BB:EA:47:BB
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/xKsmxVcQwt6C-qcwj8XCabvqR7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.96.0/20
46.20.212.0/22
Signature Algorithm: sha256WithRSAEncryption
26:5b:d1:7b:80:a7:70:eb:b3:be:93:56:b8:9e:b5:7a:cc:e6:
2e:55:f9:39:bc:6b:b4:4e:2c:e9:07:e0:59:85:f5:f8:d6:5d:
5c:b1:35:f4:1e:cb:32:da:55:d4:c2:af:eb:19:01:20:29:37:
41:d8:07:6c:86:1f:c9:2b:3e:86:41:c5:96:52:a5:84:a1:4c:
c9:0c:f0:ac:fc:eb:7c:f3:41:5c:26:d1:80:2f:4d:06:4a:c5:
27:18:66:a3:7d:be:6a:c9:70:3d:55:ad:46:80:83:7f:8f:99:
41:f8:dd:29:b9:8c:d0:fa:73:b9:1f:f7:0e:2a:a2:58:5e:5b:
0f:78:5f:63:3a:32:8e:60:02:5b:82:d4:4b:1c:8e:73:77:b6:
a9:10:9f:48:31:91:79:70:29:b2:a4:cc:a6:2d:4f:0a:05:63:
d6:15:68:8f:40:b2:bb:69:99:ec:bd:0e:17:c6:72:22:8a:28:
8b:be:3b:ca:57:f5:8a:0f:11:a1:76:ae:1f:ad:11:6b:49:75:
64:3b:73:50:aa:da:8a:95:76:46:46:6e:d9:bb:b9:23:57:ae:
e6:d4:0d:70:3f:22:04:18:95:06:6d:4e:c6:a1:aa:c2:83:6f:
4b:ed:c7:f5:c8:04:33:d3:d4:af:d7:92:df:76:81:25:60:97:
70:2c:e3:08
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY9275xMSkcezdxv0lRb1AhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2
N2IxZTQwHhcNMjQwNTE0MTE0OTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGFiMjZjNTU3MTBjMmRlODJmYWE3MzA4ZmM1YzI2OWJiZWE0N2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YRbfiovfpeZ3vZ3eNTt40HeaWlp
1YCaItKODUeCkNkm3XlKpViAhYuNsM7EcCc1UtJAvK2mVC/K/ntyg268xs/tjCXW
8c7LdUEhfvT4i2dN124MnB3Iq4tIqDt2wIzuHv3trkeImzW4UqPqSEUUxMcZGqPg
/AWZImRQuIWw6S6abjRno6Pf8CfLzsnrGnPESIipBkMZ8r7Vrncko687J/Zi1EI3
uXzex1tleS6K8ovlbbbhDuUr5MDnUKG/Jxg2J8d0xA9gO8E+RFmU8L9ywmIA3HIX
uHdZ+Po092lhkzOsMu8oSd4db3wOKBv+rFOkGEgi9qeHa2stbJ9xSu+PZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMSrJsVXEMLegvqnMI/Fwmm76ke7MB8GA1UdIwQY
MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut
ODk3MTRhN2U4ZDU4LzEveEtzbXhWY1F3dDZDLXFjd2o4WENhYnZxUjdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4
LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEBWZgAwQC
LhTUMA0GCSqGSIb3DQEBCwUAA4IBAQAmW9F7gKdw67O+k1a4nrV6zOYuVfk5vGu0
TizpB+BZhfX41l1csTX0Hssy2lXUwq/rGQEgKTdB2Adshh/JKz6GQcWWUqWEoUzJ
DPCs/Ot880FcJtGAL00GSsUnGGajfb5qyXA9Va1GgIN/j5lB+N0puYzQ+nO5H/cO
KqJYXlsPeF9jOjKOYAJbgtRLHI5zd7apEJ9IMZF5cCmypMymLU8KBWPWFWiPQLK7
aZnsvQ4XxnIiiiiLvjvKV/WKDxGhdq4frRFrSXVkO3NQqtqKlXZGRm7Zu7kjV67m
1A1wPyIEGJUGbU7GoarCg29L7cf1yAQz09Sv15LfdoElYJdwLOMI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:39 2024 by rpki-client on console-fra.rpki-client.org