Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tVeNXgBP2sHFSGTW02o7uvZL6js.roa
File: tVeNXgBP2sHFSGTW02o7uvZL6js.roa (raw, json)
Hash identifier: eVk22qektWfOv/fEmdITrDWUwVIkYI7/WSqKo1NZEO0=
Subject key identifier: B5:57:8D:5E:00:4F:DA:C1:C5:48:64:D6:D3:6A:3B:BA:F6:4B:EA:3B
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01856D53ED149A95287266A456C590ECB52D
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tVeNXgBP2sHFSGTW02o7uvZL6js.roa
Signing time: Sun 01 Jan 2023 12:34:54 +0000
ROA not before: Sun 01 Jan 2023 12:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42831
IP address blocks: 5.157.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ed:14:9a:95:28:72:66:a4:56:c5:90:ec:b5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 12:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5578d5e004fdac1c54864d6d36a3bbaf64bea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:99:fc:e4:5a:5f:ed:89:40:e5:f0:f1:50:11:
70:4c:43:6c:f0:eb:36:73:01:1f:15:a6:10:e2:63:
45:fe:0c:ba:ed:ca:3e:ff:98:84:61:90:45:06:6f:
74:8b:8d:cd:6a:39:6f:0f:82:c9:f7:f3:d4:ed:e0:
90:2e:e2:af:c6:d2:77:21:87:1a:fb:fd:0f:95:65:
a0:ce:49:4a:a9:bd:87:76:70:df:27:e8:1b:9a:eb:
52:a5:19:db:80:2c:48:cd:08:95:3d:86:47:4e:d5:
d2:e7:15:18:3a:7b:fd:aa:42:ff:fb:fe:87:95:c5:
36:f8:0d:4f:3b:a4:fc:04:83:74:35:67:c1:f5:50:
4c:cf:17:97:65:41:b0:8b:8b:b8:e2:cb:b4:e9:e0:
7f:eb:11:6e:4f:0f:e7:90:d7:4f:d8:ef:65:3e:ec:
16:60:c9:6e:eb:5f:4d:73:6b:f9:6c:1e:46:62:c0:
bc:f1:53:e3:59:3b:78:88:18:cf:0c:21:c4:ed:36:
a9:41:23:01:48:6c:a5:ed:53:9e:aa:80:44:a8:b9:
8a:d9:ab:a1:e7:7e:f4:cf:bc:7b:2c:c8:94:25:58:
ca:09:35:bf:a6:28:a6:dc:bc:50:26:bf:83:df:f2:
96:04:45:58:39:0e:e1:8b:95:4d:ff:8f:8a:8a:97:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:57:8D:5E:00:4F:DA:C1:C5:48:64:D6:D3:6A:3B:BA:F6:4B:EA:3B
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/tVeNXgBP2sHFSGTW02o7uvZL6js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.128.0/24
Signature Algorithm: sha256WithRSAEncryption
65:67:d0:af:57:b6:10:a1:90:48:03:9b:50:d3:27:c1:53:f1:
08:45:a4:9f:96:86:60:93:d1:87:81:f5:3b:ec:2a:99:5c:10:
dd:96:e7:cb:58:00:16:7d:b2:da:1d:77:b4:02:40:39:dd:92:
f8:24:ac:c3:60:bb:9e:3e:ed:f6:b5:33:3e:e0:66:33:a3:ea:
94:85:5e:df:e3:b6:84:1a:c5:02:0c:ba:7f:ea:03:4d:4e:28:
37:cc:72:c3:f0:f9:60:0f:8f:39:a8:0b:14:9c:4e:aa:77:4f:
51:09:aa:07:65:d6:2a:55:7f:64:9c:76:b7:af:2d:5f:81:09:
21:a3:cf:41:fd:36:35:0b:98:e3:d1:08:88:eb:93:44:6d:6a:
12:2c:e9:b4:53:95:d5:da:5a:f3:7d:4e:a4:a8:04:3f:58:bb:
f1:7f:39:ca:96:98:ea:9e:bc:52:42:13:dc:5f:13:dc:61:9c:
32:c4:f1:97:64:dd:97:5a:9b:81:7e:ed:68:f7:a8:bf:e6:a9:
6b:fe:24:44:9e:12:65:66:13:19:49:2f:dc:17:25:e2:55:70:
f1:40:79:00:5a:e9:26:91:5b:2c:39:2f:b2:14:f6:56:92:8e:
25:8f:2b:55:da:c7:7f:94:d6:9e:1c:e0:25:7d:15:4b:6a:db:
bf:f5:da:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtU+0UmpUocmakVsWQ7LUtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjMwMTAxMTIzNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTU3OGQ1ZTAwNGZkYWMxYzU0ODY0ZDZkMzZhM2JiYWY2NGJlYTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5n85Fpf7YlA5fDxUBFwTENs8Os2
cwEfFaYQ4mNF/gy67co+/5iEYZBFBm90i43NajlvD4LJ9/PU7eCQLuKvxtJ3IYca
+/0PlWWgzklKqb2HdnDfJ+gbmutSpRnbgCxIzQiVPYZHTtXS5xUYOnv9qkL/+/6H
lcU2+A1PO6T8BIN0NWfB9VBMzxeXZUGwi4u44su06eB/6xFuTw/nkNdP2O9lPuwW
YMlu619Nc2v5bB5GYsC88VPjWTt4iBjPDCHE7TapQSMBSGyl7VOeqoBEqLmK2auh
5370z7x7LMiUJVjKCTW/piim3LxQJr+D3/KWBEVYOQ7hi5VN/4+Kipd/fQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVXjV4AT9rBxUhk1tNqO7r2S+o7MB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvdFZlTlhnQlAyc0hGU0dUVzAybzd1dlpMNmpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZ2AMA0G
CSqGSIb3DQEBCwUAA4IBAQBlZ9CvV7YQoZBIA5tQ0yfBU/EIRaSfloZgk9GHgfU7
7CqZXBDdlufLWAAWfbLaHXe0AkA53ZL4JKzDYLuePu32tTM+4GYzo+qUhV7f47aE
GsUCDLp/6gNNTig3zHLD8PlgD485qAsUnE6qd09RCaoHZdYqVX9knHa3ry1fgQkh
o89B/TY1C5jj0QiI65NEbWoSLOm0U5XV2lrzfU6kqAQ/WLvxfznKlpjqnrxSQhPc
XxPcYZwyxPGXZN2XWpuBfu1o96i/5qlr/iREnhJlZhMZSS/cFyXiVXDxQHkAWukm
kVssOS+yFPZWko4ljytV2sd/lNaeHOAlfRVLatu/9drW
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org