Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/5YJHdCPhDoSIEsVFwUAqFfUGBfc.roa
File: 5YJHdCPhDoSIEsVFwUAqFfUGBfc.roa (raw, json)
Hash identifier: QGqRhTQ1xpPfsy+jX03NGt/RIuoBoDXUwSEk9OY0BIc=
Subject key identifier: E5:82:47:74:23:E1:0E:84:88:12:C5:45:C1:40:2A:15:F5:06:05:F7
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 018689D8D8791FE1ABE869B18C947639567E
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/5YJHdCPhDoSIEsVFwUAqFfUGBfc.roa
Signing time: Sat 25 Feb 2023 18:32:15 +0000
ROA not before: Sat 25 Feb 2023 18:32:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201194
IP address blocks: 5.57.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:89:d8:d8:79:1f:e1:ab:e8:69:b1:8c:94:76:39:56:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Feb 25 18:32:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e582477423e10e848812c545c1402a15f50605f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:df:d0:5f:c9:fc:46:53:a2:94:c6:75:60:d8:
47:34:de:5a:cd:ce:39:0f:56:c0:7e:f3:a0:8e:b9:
de:3e:e4:60:af:18:9c:44:98:61:af:82:4a:3a:f2:
10:4d:2f:4e:a9:55:65:36:a5:b0:c4:02:55:db:e7:
36:71:04:99:92:ce:58:13:75:6b:a8:53:c1:bd:c2:
84:3b:2c:84:ae:6d:8b:24:48:d8:63:28:ab:bf:6d:
75:49:10:04:85:dc:18:ec:67:78:89:f9:2c:d1:c6:
aa:f1:5f:79:40:d8:6d:11:04:53:f4:2c:47:12:27:
33:a3:f3:dc:70:57:5d:f7:8e:c2:3a:2d:20:81:de:
72:05:81:db:38:46:46:d9:8a:e0:94:bb:5b:c7:58:
4e:96:58:67:66:9a:fa:81:4d:a9:cd:1d:40:6a:43:
fb:e7:7a:f7:06:bf:33:c8:c6:16:3e:7a:5e:48:0c:
16:54:24:2b:83:86:50:3a:e5:fa:e1:39:c2:08:fe:
5d:d9:3e:9c:1d:5c:16:b1:5d:e0:c9:4e:89:59:15:
87:9f:7f:c7:9c:4b:2c:ae:58:0a:d6:88:2e:c3:62:
2b:92:a5:84:f3:ed:14:b7:2a:89:1c:9a:f2:cb:40:
a8:13:1d:4c:90:67:56:e4:30:66:2e:ce:7c:90:e0:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:82:47:74:23:E1:0E:84:88:12:C5:45:C1:40:2A:15:F5:06:05:F7
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/5YJHdCPhDoSIEsVFwUAqFfUGBfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.38.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:63:7f:a2:7e:1d:dc:36:40:3a:d4:f7:19:28:22:0e:e2:be:
26:b1:98:58:fe:64:fa:5b:aa:8f:f7:e7:72:a5:70:1e:d2:42:
d9:0c:7b:6c:80:aa:1b:3a:c2:04:1e:ae:17:f1:d5:7d:41:57:
06:9d:be:02:fc:a9:00:4b:9b:d5:3e:d6:b5:f2:f4:c6:d2:61:
5a:60:c7:34:5b:37:59:86:f2:7d:19:db:f8:3b:38:b2:ca:6c:
f7:b4:97:7a:e1:89:0e:24:36:53:64:85:52:94:a8:43:0c:97:
f8:9e:00:1a:1e:ca:3a:69:e4:b3:70:bc:c8:10:41:fb:5f:46:
36:d6:9b:34:98:ef:da:13:97:dc:1d:21:43:4b:0f:88:e5:f8:
ad:e7:15:ba:f4:8d:c7:1a:d0:18:8e:0e:3e:95:fd:24:51:c9:
12:f2:ef:53:e8:7a:79:ff:86:aa:87:46:06:59:f5:ad:1c:d1:
95:83:3c:20:e1:ce:6c:1c:c2:5d:53:46:99:9a:5b:07:fd:49:
f4:3a:07:5a:9a:9b:c8:75:dd:75:8b:cf:7c:b2:96:5b:53:b8:
a9:3a:5c:8d:72:db:c3:1a:6b:19:df:5c:f5:f4:df:3d:23:99:
e2:4c:05:87:79:27:b2:73:ea:10:60:7f:19:fe:62:7e:79:51:
8c:65:56:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYaJ2Nh5H+Gr6GmxjJR2OVZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0
ZDY0NjQwHhcNMjMwMjI1MTgzMjE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTgyNDc3NDIzZTEwZTg0ODgxMmM1NDVjMTQwMmExNWY1MDYwNWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd/QX8n8RlOilMZ1YNhHNN5azc45
D1bAfvOgjrnePuRgrxicRJhhr4JKOvIQTS9OqVVlNqWwxAJV2+c2cQSZks5YE3Vr
qFPBvcKEOyyErm2LJEjYYyirv211SRAEhdwY7Gd4ifks0caq8V95QNhtEQRT9CxH
Eiczo/PccFdd947COi0ggd5yBYHbOEZG2YrglLtbx1hOllhnZpr6gU2pzR1AakP7
53r3Br8zyMYWPnpeSAwWVCQrg4ZQOuX64TnCCP5d2T6cHVwWsV3gyU6JWRWHn3/H
nEssrlgK1oguw2IrkqWE8+0UtyqJHJryy0CoEx1MkGdW5DBmLs58kOCtWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOWCR3Qj4Q6EiBLFRcFAKhX1BgX3MB8GA1UdIwQY
MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt
OTg5MTY2ODgxOTY5LzEvNVlKSGRDUGhEb1NJRXNWRndVQXFGZlVHQmZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5
LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTkmMA0G
CSqGSIb3DQEBCwUAA4IBAQCrY3+ifh3cNkA61PcZKCIO4r4msZhY/mT6W6qP9+dy
pXAe0kLZDHtsgKobOsIEHq4X8dV9QVcGnb4C/KkAS5vVPta18vTG0mFaYMc0WzdZ
hvJ9Gdv4Oziyymz3tJd64YkOJDZTZIVSlKhDDJf4ngAaHso6aeSzcLzIEEH7X0Y2
1ps0mO/aE5fcHSFDSw+I5fit5xW69I3HGtAYjg4+lf0kUckS8u9T6Hp5/4aqh0YG
WfWtHNGVgzwg4c5sHMJdU0aZmlsH/Un0OgdampvIdd11i898spZbU7ipOlyNctvD
GmsZ31z19N89I5niTAWHeSeyc+oQYH8Z/mJ+eVGMZVa6
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:33 2023 by rpki-client on console-fra.rpki-client.org