Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b5E-k6Bm7gXOJ6vQJU0tRkMGywQ.roa
File: b5E-k6Bm7gXOJ6vQJU0tRkMGywQ.roa (raw, json)
Hash identifier: e9rSk3Bvl03ydDEoVrvGGh0Wv6NY8ZKeq/zbOCfiDFA=
Subject key identifier: 6F:91:3E:93:A0:66:EE:05:CE:27:AB:D0:25:4D:2D:46:43:06:CB:04
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0194214407F1B8453724FE0BFC1568D0167A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b5E-k6Bm7gXOJ6vQJU0tRkMGywQ.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206509
IP address blocks: 81.5.128.0/18 maxlen: 18
81.168.0.0/17 maxlen: 17
82.152.0.0/15 maxlen: 15
109.176.0.0/16 maxlen: 16
213.152.32.0/19 maxlen: 19
Validation: Failed, certificate revoked on Mon 06 Jan 2025 09:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:07:f1:b8:45:37:24:fe:0b:fc:15:68:d0:16:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f913e93a066ee05ce27abd0254d2d464306cb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0d:9b:a3:2b:33:2d:57:6e:8e:b8:c2:cb:4f:
5e:96:9e:02:17:fa:d0:32:9d:76:f1:6d:24:59:25:
d0:5d:1b:b2:7f:95:a7:34:a1:52:c9:34:41:0c:10:
d9:6c:b9:90:97:99:06:2e:6e:0a:12:9d:1b:df:17:
64:0d:55:c1:39:6e:8d:52:4c:83:79:7d:86:44:34:
79:05:5a:b0:18:a9:1b:c6:aa:47:c2:ef:30:53:9c:
39:80:16:6d:66:05:83:67:90:b5:47:d9:1f:0b:bd:
b1:72:f1:b5:ee:75:7b:76:1d:2f:d5:d0:45:ed:8a:
4b:6e:ea:34:1d:e8:08:d5:72:6e:1e:ac:ab:89:be:
a9:7e:84:e5:59:9f:58:35:f7:f9:5f:da:e2:04:e7:
60:2a:79:37:79:e2:b4:39:be:0f:74:fa:65:ac:9d:
21:34:df:54:66:b2:13:ab:48:8c:24:ee:e6:24:a6:
1e:48:0f:c8:f8:30:ac:f4:e9:1c:09:9e:75:f0:8f:
96:88:30:09:9c:2c:fc:bd:3a:6d:55:91:05:d0:44:
4a:6d:5a:7f:0d:b0:e7:81:f7:24:dc:3d:87:f8:b9:
ab:c0:5a:13:8c:fb:3c:aa:d0:95:55:a9:d3:a2:82:
cc:8f:68:39:e5:42:52:51:08:e5:c8:bd:6e:b5:cf:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:91:3E:93:A0:66:EE:05:CE:27:AB:D0:25:4D:2D:46:43:06:CB:04
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/b5E-k6Bm7gXOJ6vQJU0tRkMGywQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.128.0/18
81.168.0.0/17
82.152.0.0/15
109.176.0.0/16
213.152.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:ce:ca:eb:96:43:2d:53:2c:81:99:9a:e0:d3:86:ae:66:b4:
77:aa:82:06:67:ee:e7:c6:e3:db:ba:76:dc:2b:94:31:9f:5b:
7f:4f:d0:10:f4:20:df:f6:ed:b7:94:b4:b2:50:ba:b8:7e:3d:
56:59:6b:98:33:b3:6f:d0:81:2c:da:a3:a1:9a:89:ad:6b:c5:
f4:6a:77:1e:15:be:2e:9b:a0:9e:20:d1:47:b6:a3:a9:62:c3:
0a:33:ab:a9:56:8b:b1:1c:16:8f:13:ed:1f:c9:02:4d:7a:3d:
19:2e:b7:04:59:e1:35:16:36:44:e9:0d:59:31:7d:2c:69:b3:
4d:d9:46:62:4b:8d:09:d6:87:5f:2f:dd:ed:4a:3b:51:fe:94:
f2:15:97:b2:36:c2:b0:f3:b2:95:0a:f3:7a:97:6a:35:59:72:
45:85:54:c6:a2:80:5b:5a:12:03:18:50:92:30:89:39:37:7c:
13:1a:59:39:ed:25:dc:7d:c3:6b:af:37:69:9b:7e:3a:47:02:
e4:fd:c5:6d:8d:53:e9:45:d8:59:79:02:2b:ff:8d:fb:fd:a3:
47:18:6d:91:e4:35:15:d5:6b:e9:c3:7f:ce:61:a0:12:88:05:
3e:dc:7e:c5:2c:83:79:52:1a:a6:30:6b:c5:bc:cd:1b:0b:d9:
30:cc:c2:d2
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQhRAfxuEU3JP4L/BVo0BZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjUwMTAxMDk0ODE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZjkxM2U5M2EwNjZlZTA1Y2UyN2FiZDAyNTRkMmQ0NjQzMDZjYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkw2boyszLVdujrjCy09elp4CF/rQ
Mp128W0kWSXQXRuyf5WnNKFSyTRBDBDZbLmQl5kGLm4KEp0b3xdkDVXBOW6NUkyD
eX2GRDR5BVqwGKkbxqpHwu8wU5w5gBZtZgWDZ5C1R9kfC72xcvG17nV7dh0v1dBF
7YpLbuo0HegI1XJuHqyrib6pfoTlWZ9YNff5X9riBOdgKnk3eeK0Ob4PdPplrJ0h
NN9UZrITq0iMJO7mJKYeSA/I+DCs9OkcCZ518I+WiDAJnCz8vTptVZEF0ERKbVp/
DbDngfck3D2H+LmrwFoTjPs8qtCVVanTooLMj2g55UJSUQjlyL1utc80NQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFG+RPpOgZu4Fzier0CVNLUZDBssEMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvYjVFLWs2Qm03Z1hPSjZ2UUpVMHRSa01HeXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcAwQGUQWAAwQH
UagAAwMBUpgDAwBtsAMEBdWYIDANBgkqhkiG9w0BAQsFAAOCAQEADc7K65ZDLVMs
gZma4NOGrma0d6qCBmfu58bj27p23CuUMZ9bf0/QEPQg3/btt5S0slC6uH49Vllr
mDOzb9CBLNqjoZqJrWvF9Gp3HhW+LpugniDRR7ajqWLDCjOrqVaLsRwWjxPtH8kC
TXo9GS63BFnhNRY2ROkNWTF9LGmzTdlGYkuNCdaHXy/d7Uo7Uf6U8hWXsjbCsPOy
lQrzepdqNVlyRYVUxqKAW1oSAxhQkjCJOTd8ExpZOe0l3H3Da683aZt+OkcC5P3F
bY1T6UXYWXkCK/+N+/2jRxhtkeQ1FdVr6cN/zmGgEogFPtx+xSyDeVIapjBrxbzN
GwvZMMzC0g==
-----END CERTIFICATE-----
Generated at Thu Mar 13 19:09:42 2025 by rpki-client