Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/mVedHkjQMByvxfF6TmRMu9ecTmI.roa
File: mVedHkjQMByvxfF6TmRMu9ecTmI.roa (raw, json)
Hash identifier: XnfrbAnPEgFqrmC24ihDy5ViSYaX7sV0aVqeuae17WY=
Subject key identifier: 99:57:9D:1E:48:D0:30:1C:AF:C5:F1:7A:4E:64:4C:BB:D7:9C:4E:62
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 018D6BF8FCD9D579CC2129EBD18CE8DBCEA0
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/mVedHkjQMByvxfF6TmRMu9ecTmI.roa
Signing time: Fri 02 Feb 2024 22:38:16 +0000
ROA not before: Fri 02 Feb 2024 22:38:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13768
IP address blocks: 5.44.16.0/21 maxlen: 21
5.44.24.0/22 maxlen: 22
5.44.28.0/22 maxlen: 22
62.128.132.0/24 maxlen: 24
62.128.133.0/24 maxlen: 24
62.128.140.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 03 Feb 2024 00:11:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:f8:fc:d9:d5:79:cc:21:29:eb:d1:8c:e8:db:ce:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Feb 2 22:38:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99579d1e48d0301cafc5f17a4e644cbbd79c4e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:70:41:6f:cf:5b:e2:46:ed:ce:7a:8e:99:25:
48:c7:04:94:93:07:b6:d2:1b:f3:bf:ad:dc:d3:bf:
c9:19:06:e9:40:dc:d3:db:6f:48:09:5e:c1:c6:09:
30:89:03:d0:63:f4:2e:da:fd:15:58:d5:42:d4:d0:
7b:61:6b:6d:99:33:fe:b7:31:76:b4:d2:9f:a8:34:
2b:52:18:31:99:0d:8b:52:f2:cc:be:75:25:6e:7d:
98:c8:ee:61:03:a0:d1:72:7c:f8:33:38:46:b9:fa:
88:89:4b:e7:78:16:f1:94:8b:bb:10:e5:08:41:2b:
9d:d5:9f:86:8d:89:d3:fe:bf:ab:f6:43:bc:6e:87:
12:d7:ac:e1:c7:6d:15:f7:15:21:26:4d:8d:23:f4:
6f:20:1a:41:f9:55:f4:b2:d1:2d:ad:05:82:48:38:
ff:66:17:51:72:7b:c8:cb:9e:74:36:f3:de:dd:a2:
2e:9f:06:7a:b3:18:d6:62:d0:5b:cc:b9:eb:c9:54:
37:ff:a3:52:39:24:7f:09:ec:6b:a1:be:9a:13:4d:
a4:56:e2:42:8a:4b:4f:ef:76:87:b9:9e:76:75:cc:
a6:2f:8a:34:45:3f:e4:d1:9a:46:30:bb:9f:e7:4e:
62:45:a8:05:05:eb:01:2a:0c:d5:76:64:44:0b:52:
14:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:57:9D:1E:48:D0:30:1C:AF:C5:F1:7A:4E:64:4C:BB:D7:9C:4E:62
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/mVedHkjQMByvxfF6TmRMu9ecTmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.16.0/20
62.128.132.0/23
62.128.140.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:45:eb:b8:56:a7:95:34:51:22:f1:3e:3d:86:33:72:af:7b:
ac:f5:b5:c1:2a:58:d0:ed:e3:d1:55:5e:bb:85:24:e5:81:e6:
6c:e3:fc:79:fa:95:ea:c4:a8:6a:b0:df:90:8e:45:72:87:f0:
aa:de:23:9c:c4:91:ea:99:f0:12:b7:9d:a5:a1:4c:9a:46:ff:
cc:da:e9:1c:d3:be:14:30:59:17:42:51:9c:44:e5:af:05:d2:
0a:61:70:c8:81:5d:b5:b0:fd:c5:f2:af:36:7e:30:7a:3e:92:
2e:2e:ca:70:f1:b2:35:c7:34:0e:2c:cd:4c:2a:37:2a:4e:cc:
43:65:d3:56:22:88:77:8e:72:a5:ca:3e:13:dd:05:00:0d:e8:
4d:f7:dd:4c:5c:dc:6b:bd:73:d0:8c:12:60:79:99:0b:78:3d:
84:d4:a4:8d:73:eb:df:aa:dc:6a:6e:c1:9a:00:1c:c1:ca:41:
46:40:c4:f1:43:e1:6c:ed:9a:4b:0b:04:7b:22:d7:97:80:68:
79:f5:db:57:48:fa:ca:1f:9a:99:79:6b:bb:26:c8:95:81:fa:
69:d0:1f:76:bd:f3:4c:aa:59:dc:8b:e7:0e:9c:e9:6a:b2:91:
5c:37:0e:86:4b:c9:fc:f4:1b:42:eb:15:46:2a:8a:54:7e:96:
da:8c:3b:f1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY1r+PzZ1XnMISnr0Yzo286gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjQwMjAyMjIzODE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTU3OWQxZTQ4ZDAzMDFjYWZjNWYxN2E0ZTY0NGNiYmQ3OWM0ZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHBBb89b4kbtznqOmSVIxwSUkwe2
0hvzv63c07/JGQbpQNzT229ICV7BxgkwiQPQY/Qu2v0VWNVC1NB7YWttmTP+tzF2
tNKfqDQrUhgxmQ2LUvLMvnUlbn2YyO5hA6DRcnz4MzhGufqIiUvneBbxlIu7EOUI
QSud1Z+GjYnT/r+r9kO8bocS16zhx20V9xUhJk2NI/RvIBpB+VX0stEtrQWCSDj/
ZhdRcnvIy550NvPe3aIunwZ6sxjWYtBbzLnryVQ3/6NSOSR/Cexrob6aE02kVuJC
iktP73aHuZ52dcymL4o0RT/k0ZpGMLuf505iRagFBesBKgzVdmREC1IUhwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJlXnR5I0DAcr8Xxek5kTLvXnE5iMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvbVZlZEhralFNQnl2eGZGNlRtUk11OWVjVG1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEBSwQAwQB
PoCEAwQCPoCMMA0GCSqGSIb3DQEBCwUAA4IBAQC7Reu4VqeVNFEi8T49hjNyr3us
9bXBKljQ7ePRVV67hSTlgeZs4/x5+pXqxKhqsN+QjkVyh/Cq3iOcxJHqmfASt52l
oUyaRv/M2ukc074UMFkXQlGcROWvBdIKYXDIgV21sP3F8q82fjB6PpIuLspw8bI1
xzQOLM1MKjcqTsxDZdNWIoh3jnKlyj4T3QUADehN991MXNxrvXPQjBJgeZkLeD2E
1KSNc+vfqtxqbsGaABzBykFGQMTxQ+Fs7ZpLCwR7IteXgGh59dtXSPrKH5qZeWu7
JsiVgfpp0B92vfNMqlnci+cOnOlqspFcNw6GS8n89BtC6xVGKopUfpbajDvx
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:26 2025 by rpki-client