Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa
File: 1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa (raw, json)
Hash identifier: uk9vsJ5blS4LoVkLlo0lWqpZKyqN2cNvxlX08dqFTi8=
Subject key identifier: FB:97:AC:C5:86:D3:C3:3F:F3:EC:F5:B6:C0:31:B1:4E:0E:A3:E9:F9
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 018D79AB71FE5C81780FBB11343D9EBCB43B
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa
Signing time: Mon 05 Feb 2024 14:28:15 +0000
ROA not before: Mon 05 Feb 2024 14:28:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41221
IP address blocks: 5.56.64.0/18 maxlen: 24
37.75.16.0/20 maxlen: 24
37.75.64.0/18 maxlen: 24
46.55.0.0/17 maxlen: 24
85.204.176.0/21 maxlen: 24
86.104.196.0/22 maxlen: 24
86.105.56.0/21 maxlen: 24
86.105.80.0/21 maxlen: 24
86.105.172.0/22 maxlen: 24
86.105.208.0/22 maxlen: 24
86.106.144.0/21 maxlen: 24
86.106.208.0/20 maxlen: 24
86.107.64.0/22 maxlen: 24
86.107.160.0/21 maxlen: 24
89.32.56.0/21 maxlen: 24
89.32.136.0/21 maxlen: 24
89.32.172.0/22 maxlen: 24
89.32.252.0/22 maxlen: 24
89.34.64.0/21 maxlen: 24
89.34.112.0/21 maxlen: 24
89.34.192.0/21 maxlen: 24
89.34.204.0/22 maxlen: 24
89.34.232.0/22 maxlen: 24
89.35.8.0/21 maxlen: 24
89.35.40.0/21 maxlen: 24
89.35.84.0/22 maxlen: 24
89.35.200.0/22 maxlen: 24
89.36.156.0/22 maxlen: 24
89.37.44.0/22 maxlen: 24
89.37.104.0/24 maxlen: 24
93.116.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 07:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:79:ab:71:fe:5c:81:78:0f:bb:11:34:3d:9e:bc:b4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Feb 5 14:28:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb97acc586d3c33ff3ecf5b6c031b14e0ea3e9f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:ce:e4:be:9e:4b:95:e1:40:47:8e:3f:f4:
a8:0d:f4:2e:2f:04:ad:a9:04:0f:27:a9:76:ca:a9:
c7:39:56:74:1d:95:ec:25:73:4c:5d:65:ca:2f:d0:
77:88:0e:ad:c5:4f:bf:55:8f:18:88:6d:db:33:71:
33:0e:18:5c:6d:57:58:59:31:ef:4e:58:e5:cf:2a:
f6:f1:6a:57:5f:66:c6:c8:2f:92:8a:a5:ae:f3:90:
ec:91:df:ff:fa:ae:9f:f0:d2:b2:1f:72:23:41:96:
cf:e0:43:3e:81:8d:2e:a6:9f:03:ec:49:eb:d6:54:
76:fe:0e:99:20:51:d6:c5:7c:a4:4f:2f:cc:fc:71:
f5:fd:75:8f:ad:91:c4:4c:70:1d:61:ab:07:f0:5f:
fc:c3:65:8b:4b:f5:cc:c6:6c:7e:07:a7:fa:bc:65:
34:e2:e8:8a:b4:be:61:9f:f7:c0:55:8f:e5:35:c9:
31:ec:2b:d4:92:09:2d:c6:08:62:4c:a8:a5:05:3d:
83:24:1e:a5:9e:b8:57:97:1d:10:df:90:17:6e:fd:
b4:6b:f7:3d:42:cd:2b:16:3e:8d:98:ce:c5:81:1c:
7d:52:ef:ee:58:60:71:93:d1:70:02:9c:7a:87:93:
f8:65:12:ea:32:e1:b4:9c:93:47:f8:d1:2b:01:fc:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:97:AC:C5:86:D3:C3:3F:F3:EC:F5:B6:C0:31:B1:4E:0E:A3:E9:F9
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/1-5esxYbTwz_z7PW2wDGxTg6j6fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.64.0/18
37.75.16.0/20
37.75.64.0/18
46.55.0.0/17
85.204.176.0/21
86.104.196.0/22
86.105.56.0/21
86.105.80.0/21
86.105.172.0/22
86.105.208.0/22
86.106.144.0/21
86.106.208.0/20
86.107.64.0/22
86.107.160.0/21
89.32.56.0/21
89.32.136.0/21
89.32.172.0/22
89.32.252.0/22
89.34.64.0/21
89.34.112.0/21
89.34.192.0/21
89.34.204.0/22
89.34.232.0/22
89.35.8.0/21
89.35.40.0/21
89.35.84.0/22
89.35.200.0/22
89.36.156.0/22
89.37.44.0/22
89.37.104.0/24
93.116.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:33:43:dc:75:60:ae:6c:3e:ee:1a:17:c6:ae:ea:29:81:73:
25:3f:d6:48:e5:ce:c5:9d:67:b0:af:22:fc:24:e9:04:6b:19:
5c:18:78:c2:99:9a:95:7d:28:1e:58:44:83:8f:cb:ba:bb:f9:
dc:5b:f9:bc:7f:1a:73:1b:d4:64:0e:f5:ea:d0:2b:4b:83:1d:
58:7c:11:4b:84:40:8f:39:03:8d:ff:70:57:95:5e:01:d9:85:
3a:22:1e:86:22:07:d5:3e:87:56:d8:3e:a6:36:2d:53:11:7b:
86:0f:09:15:64:dd:77:e1:b6:04:ac:9c:9d:70:96:9a:f2:ff:
c7:bb:e4:26:ac:30:d9:74:6e:66:f7:bd:c3:83:40:e2:be:45:
50:c4:42:73:c6:de:35:7a:7f:3d:b0:8c:49:d6:b1:5e:63:a3:
52:2c:1b:ea:10:0d:4e:07:59:23:bb:6f:93:14:1d:eb:fe:ea:
76:ad:f0:88:1c:e2:11:16:c4:80:de:f6:21:34:87:2a:e6:a9:
18:a4:b1:90:c8:5d:89:e2:52:d5:3b:43:0f:b1:03:21:2f:be:
21:48:8d:12:22:2d:1a:f7:8d:ab:29:6e:6a:aa:85:5d:fe:d0:
11:e0:74:de:73:b3:6a:fb:b1:3b:b6:38:12:45:b0:67:01:41:
d6:78:79:41
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgISAY15q3H+XIF4D7sRND2evLQ7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjQwMjA1MTQyODE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjk3YWNjNTg2ZDNjMzNmZjNlY2Y1YjZjMDMxYjE0ZTBlYTNlOWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4fO5L6eS5XhQEeOP/SoDfQuLwSt
qQQPJ6l2yqnHOVZ0HZXsJXNMXWXKL9B3iA6txU+/VY8YiG3bM3EzDhhcbVdYWTHv
Tljlzyr28WpXX2bGyC+SiqWu85Dskd//+q6f8NKyH3IjQZbP4EM+gY0upp8D7Enr
1lR2/g6ZIFHWxXykTy/M/HH1/XWPrZHETHAdYasH8F/8w2WLS/XMxmx+B6f6vGU0
4uiKtL5hn/fAVY/lNckx7CvUkgktxghiTKilBT2DJB6lnrhXlx0Q35AXbv20a/c9
Qs0rFj6NmM7FgRx9Uu/uWGBxk9FwApx6h5P4ZRLqMuG0nJNH+NErAfyZ3QIDAQAB
o4ICwzCCAr8wHQYDVR0OBBYEFPuXrMWG08M/8+z1tsAxsU4Oo+n5MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvMS01ZXN4WWJUd3pfejdQVzJ3REd4VGc2ajZmay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTEvYjQ1ZDc5LWE0ZDctNDQ2MC1iZmU3LWJiZWEyOTE4ZTEw
Mi8xL29naU9CdFZUel9LVDBuZjAxMnc2Y1F2WXN2Yy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCB1wYIKwYBBQUHAQcBAf8EgccwgcQwgcEEAgABMIG6AwQG
BThAAwQEJUsQAwQGJUtAAwQHLjcAAwQDVcywAwQCVmjEAwQDVmk4AwQDVmlQAwQC
VmmsAwQCVmnQAwQDVmqQAwQEVmrQAwQCVmtAAwQDVmugAwQDWSA4AwQDWSCIAwQC
WSCsAwQCWSD8AwQDWSJAAwQDWSJwAwQDWSLAAwQCWSLMAwQCWSLoAwQDWSMIAwQD
WSMoAwQCWSNUAwQCWSPIAwQCWSScAwQCWSUsAwQAWSVoAwQAXXT+MA0GCSqGSIb3
DQEBCwUAA4IBAQC6M0PcdWCubD7uGhfGruopgXMlP9ZI5c7FnWewryL8JOkEaxlc
GHjCmZqVfSgeWESDj8u6u/ncW/m8fxpzG9RkDvXq0CtLgx1YfBFLhECPOQON/3BX
lV4B2YU6Ih6GIgfVPodW2D6mNi1TEXuGDwkVZN134bYErJydcJaa8v/Hu+QmrDDZ
dG5m973Dg0DivkVQxEJzxt41en89sIxJ1rFeY6NSLBvqEA1OB1kju2+TFB3r/up2
rfCIHOIRFsSA3vYhNIcq5qkYpLGQyF2J4lLVO0MPsQMhL74hSI0SIi0a942rKW5q
qoVd/tAR4HTec7Nq+7E7tjgSRbBnAUHWeHlB
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:50 2025 by rpki-client