Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/rEhx2OqssdyU6X4Pw3rKiAV92LA.roa
File: rEhx2OqssdyU6X4Pw3rKiAV92LA.roa (raw, json)
Hash identifier: ZDUUpR6oXCi+zpr7YjO1+sn81S+pcPD/NUIjMztmbHQ=
Subject key identifier: AC:48:71:D8:EA:AC:B1:DC:94:E9:7E:0F:C3:7A:CA:88:05:7D:D8:B0
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 018D6B2001ADF9060B13ADA0F255511B5CD1
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/rEhx2OqssdyU6X4Pw3rKiAV92LA.roa
Signing time: Fri 02 Feb 2024 18:41:16 +0000
ROA not before: Fri 02 Feb 2024 18:41:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13768
IP address blocks: 5.44.16.0/21 maxlen: 21
5.44.24.0/22 maxlen: 22
5.44.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 Feb 2024 22:38:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:20:01:ad:f9:06:0b:13:ad:a0:f2:55:51:1b:5c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Feb 2 18:41:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac4871d8eaacb1dc94e97e0fc37aca88057dd8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c6:9b:15:22:63:ff:7c:d7:7d:c7:bc:0b:2b:
3c:b9:26:73:30:73:cf:9c:10:44:ff:08:df:55:0e:
2e:9d:63:a7:46:59:7a:3a:d4:1d:c0:7d:56:f0:5f:
a5:34:18:21:29:a7:d1:11:1d:8e:c4:e6:d3:e5:78:
fe:e6:e4:d1:9d:f5:d0:79:af:98:32:32:dc:bc:0d:
58:8f:be:29:f8:da:03:9b:10:de:9f:4f:8f:28:2f:
ec:8a:40:77:4b:d3:6e:a0:b9:35:9f:37:97:4b:0d:
50:32:11:80:83:47:e3:f5:46:17:71:e5:17:5c:25:
4c:2c:ea:f6:e9:13:cf:a6:38:f0:7a:ec:8c:d7:7a:
0b:94:09:81:f7:10:01:f7:53:ac:18:04:2a:1a:67:
e7:c3:01:7e:88:31:d8:f9:04:4f:3d:63:e2:26:f7:
9f:be:c6:7b:79:68:35:5f:fb:78:f3:f4:d9:4c:da:
f5:8f:82:31:1f:ed:74:f8:1d:e0:de:b8:d2:5d:c6:
ff:13:11:65:14:ab:32:f5:02:36:7e:ce:5c:bd:b3:
8c:ea:70:33:9c:d4:d7:0b:20:62:02:ce:29:46:13:
1a:9e:b0:23:f3:e4:2e:2b:25:dd:1f:fb:2d:30:a0:
48:ce:dd:68:7f:63:7f:3b:f6:bf:e0:15:f7:b3:55:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:48:71:D8:EA:AC:B1:DC:94:E9:7E:0F:C3:7A:CA:88:05:7D:D8:B0
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/rEhx2OqssdyU6X4Pw3rKiAV92LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.16.0/20
Signature Algorithm: sha256WithRSAEncryption
3e:99:a4:7f:29:1a:80:9a:59:62:c8:cd:4f:fd:b8:f8:0a:82:
15:df:a0:38:15:d2:6b:e8:8e:75:dc:5b:96:a9:ef:a6:52:66:
c4:47:3c:e9:aa:ab:bf:dd:9b:87:e5:78:fe:6c:10:74:67:c4:
5e:1f:58:04:99:38:a8:95:33:54:b1:1f:99:3e:2d:f6:75:c0:
2a:f2:b7:c6:22:99:bb:32:d0:4b:1f:4f:de:e9:ad:25:bf:93:
de:54:0c:a4:d5:93:df:7a:86:ae:39:19:5c:1f:bf:64:d7:01:
71:c2:cc:83:36:92:d8:a0:b8:2a:db:ee:e7:09:5c:64:12:b0:
cd:d5:c0:1b:d6:2c:da:6a:c5:38:b6:06:20:69:8f:e7:12:31:
dd:42:e9:6e:e4:34:c6:7f:f6:f0:d7:84:43:40:7a:8e:5a:49:
3e:9f:06:fd:3a:50:42:2c:b6:ef:44:0f:61:a7:2d:29:09:dc:
e8:5c:92:96:6b:b9:d5:99:41:13:69:3a:49:a5:b6:92:e0:0b:
67:42:aa:6e:73:08:8c:1b:7b:d7:a0:71:c1:5b:c0:df:d0:68:
bb:6c:cb:a9:10:e7:22:fa:ed:42:99:26:bb:34:e5:04:a6:2c:
ad:b1:61:3a:23:c6:1c:78:ba:4e:f9:59:84:6a:2f:41:89:f3:
5d:a6:3c:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1rIAGt+QYLE62g8lVRG1zRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZWY1ODQ5OTMwY2M5ZGQ3NDIxMWZiMzdlMjQxMTgyNDlh
MWZjNDAwHhcNMjQwMjAyMTg0MTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzQ4NzFkOGVhYWNiMWRjOTRlOTdlMGZjMzdhY2E4ODA1N2RkOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsabFSJj/3zXfce8Cys8uSZzMHPP
nBBE/wjfVQ4unWOnRll6OtQdwH1W8F+lNBghKafRER2OxObT5Xj+5uTRnfXQea+Y
MjLcvA1Yj74p+NoDmxDen0+PKC/sikB3S9NuoLk1nzeXSw1QMhGAg0fj9UYXceUX
XCVMLOr26RPPpjjweuyM13oLlAmB9xAB91OsGAQqGmfnwwF+iDHY+QRPPWPiJvef
vsZ7eWg1X/t48/TZTNr1j4IxH+10+B3g3rjSXcb/ExFlFKsy9QI2fs5cvbOM6nAz
nNTXCyBiAs4pRhManrAj8+QuKyXdH/stMKBIzt1of2N/O/a/4BX3s1Ww2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxIcdjqrLHclOl+D8N6yogFfdiwMB8GA1UdIwQY
MBaAFEDvWEmTDMnddCEfs34kEYJJofxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTIt
OWIyYzZiMDhhODRhLzEvckVoeDJPcXNzZHlVNlg0UHczcktpQVY5MkxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lZWEyMWEtYzlkMy00YzZkLTlhNTItOWIyYzZiMDhhODRh
LzEvUU85WVNaTU15ZDEwSVItemZpUVJna21oX0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEBSwQMA0G
CSqGSIb3DQEBCwUAA4IBAQA+maR/KRqAmlliyM1P/bj4CoIV36A4FdJr6I513FuW
qe+mUmbERzzpqqu/3ZuH5Xj+bBB0Z8ReH1gEmTiolTNUsR+ZPi32dcAq8rfGIpm7
MtBLH0/e6a0lv5PeVAyk1ZPfeoauORlcH79k1wFxwsyDNpLYoLgq2+7nCVxkErDN
1cAb1izaasU4tgYgaY/nEjHdQulu5DTGf/bw14RDQHqOWkk+nwb9OlBCLLbvRA9h
py0pCdzoXJKWa7nVmUETaTpJpbaS4AtnQqpucwiMG3vXoHHBW8Df0Gi7bMupEOci
+u1CmSa7NOUEpiytsWE6I8YceLpO+VmEai9BifNdpjwZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:57 2024 by rpki-client on console-fra.rpki-client.org