Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/0ISkTBcGD-l5nZmby3GJTZPzpgc.roa
File: 0ISkTBcGD-l5nZmby3GJTZPzpgc.roa (raw, json)
Hash identifier: CirbrQi/zV3QflsXwQBdm4KG2GciWYBzVrSGLDw/fF4=
Subject key identifier: D0:84:A4:4C:17:06:0F:E9:79:9D:99:9B:CB:71:89:4D:93:F3:A6:07
Certificate issuer: /CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Certificate serial: 0191EFE9E4A2B2719440050B9F65C49577C8
Authority key identifier: 57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/0ISkTBcGD-l5nZmby3GJTZPzpgc.roa
Signing time: Sat 14 Sep 2024 09:42:48 +0000
ROA not before: Sat 14 Sep 2024 09:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49121
IP address blocks: 5.57.209.0/24 maxlen: 24
37.221.68.0/24 maxlen: 24
37.221.69.0/24 maxlen: 24
37.221.70.0/24 maxlen: 24
37.221.71.0/24 maxlen: 24
45.87.117.0/24 maxlen: 24
45.87.118.0/24 maxlen: 24
45.87.119.0/24 maxlen: 24
185.186.0.0/24 maxlen: 24
185.186.1.0/24 maxlen: 24
185.232.166.0/24 maxlen: 24
194.61.10.0/23 maxlen: 23
194.147.74.0/23 maxlen: 23
2a09:e200::/48 maxlen: 48
2a09:e200:e200::/48 maxlen: 48
2a09:e207:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 19 Nov 2024 15:06:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:e9:e4:a2:b2:71:94:40:05:0b:9f:65:c4:95:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=579ade9feaedc406df5e11bcef0393cd5e9fd0dd
Validity
Not Before: Sep 14 09:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d084a44c17060fe9799d999bcb71894d93f3a607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:9e:24:60:df:9e:a3:10:3b:ca:ac:e3:44:
a6:18:9b:44:21:6f:b1:d4:25:21:df:e5:1f:12:63:
e4:6e:62:6c:68:86:01:58:85:6c:ec:48:6a:86:de:
32:c4:57:8f:4c:7f:da:07:c4:9b:c8:08:aa:81:4c:
00:e4:b1:2e:06:25:6a:53:6b:de:34:bd:fa:08:7f:
fe:c2:73:8f:c2:0d:96:5d:ea:07:24:cf:7b:f4:32:
2a:3d:e8:9b:ff:dc:54:7f:df:ab:11:0f:65:fb:e5:
50:34:f3:28:5e:74:df:55:a2:69:1b:ea:cc:ea:5b:
5a:cb:a5:3d:9b:d8:1f:3d:e3:36:18:b4:56:25:4e:
04:2a:30:16:55:4d:6a:70:ee:93:6d:81:4f:9e:2c:
15:d1:6d:86:a9:3b:33:95:0d:14:73:52:39:57:72:
9d:d4:bd:00:a9:78:20:82:5b:90:fa:28:1e:dd:c5:
7e:11:a4:7a:3e:c1:8c:d3:51:a6:61:ec:7d:7c:7d:
46:01:c9:4c:eb:c1:0d:01:53:3b:7d:59:ee:52:c9:
d3:34:05:28:21:0f:a3:4b:f5:d1:ec:01:43:77:5a:
03:27:ad:d2:0c:48:61:72:a4:6c:4c:24:f8:b0:e0:
40:a0:a9:41:f6:a9:0c:2b:d9:e7:a3:08:d9:4f:b8:
b3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:A4:4C:17:06:0F:E9:79:9D:99:9B:CB:71:89:4D:93:F3:A6:07
X509v3 Authority Key Identifier:
keyid:57:9A:DE:9F:EA:ED:C4:06:DF:5E:11:BC:EF:03:93:CD:5E:9F:D0:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5ren-rtxAbfXhG87wOTzV6f0N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/0ISkTBcGD-l5nZmby3GJTZPzpgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/220ed7-8dc2-4c01-92bb-208ef32c0202/1/V5ren-rtxAbfXhG87wOTzV6f0N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.209.0/24
37.221.68.0/22
45.87.117.0-45.87.119.255
185.186.0.0/23
185.232.166.0/24
194.61.10.0/23
194.147.74.0/23
IPv6:
2a09:e200::/48
2a09:e200:e200::/48
2a09:e207:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
03:6d:6e:bf:b7:4e:5e:03:95:f4:12:86:26:93:3b:d6:a2:1f:
cb:3d:18:5c:e7:00:84:0f:72:be:c9:6f:0c:4e:f2:32:37:d1:
d1:fb:12:c4:79:35:75:d2:80:71:ea:be:9f:ed:15:50:9f:e3:
96:4a:df:4a:03:eb:b6:c2:7c:82:a8:8e:e0:f6:12:3f:40:2c:
c4:34:49:a1:77:bf:f3:63:1a:45:23:7f:fe:b1:3b:bf:4a:b9:
7c:87:74:57:d8:dd:e1:50:7c:50:85:ed:5f:83:54:12:6a:5d:
f3:eb:8f:36:d7:2f:6f:89:79:57:70:29:1c:b3:bb:ee:e4:16:
7d:db:16:34:a9:1c:5a:db:eb:1c:33:07:17:5f:18:91:fb:d7:
78:6f:f2:a3:bf:4d:8d:0b:d2:c5:8b:e8:8f:5f:5c:c2:85:aa:
eb:2d:62:07:51:cc:76:d8:83:41:89:2c:b9:f7:89:d2:43:e5:
69:cf:17:3b:8c:62:f4:99:df:a3:6b:92:42:3b:c8:7b:6d:fe:
f7:db:bc:a0:34:58:bf:42:f8:dc:1d:6b:60:58:d4:ad:c6:6b:
7e:73:6d:95:00:ad:34:45:75:bb:fb:56:76:f1:bc:98:4a:0f:
1b:21:01:84:d5:a3:1a:1f:4f:29:2f:3e:37:fb:ee:bb:48:3c:
8b:2f:c0:03
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgISAZHv6eSisnGUQAULn2XElXfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWFkZTlmZWFlZGM0MDZkZjVlMTFiY2VmMDM5M2NkNWU5
ZmQwZGQwHhcNMjQwOTE0MDk0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDg0YTQ0YzE3MDYwZmU5Nzk5ZDk5OWJjYjcxODk0ZDkzZjNhNjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTSeJGDfnqMQO8qs40SmGJtEIW+x
1CUh3+UfEmPkbmJsaIYBWIVs7Ehqht4yxFePTH/aB8SbyAiqgUwA5LEuBiVqU2ve
NL36CH/+wnOPwg2WXeoHJM979DIqPeib/9xUf9+rEQ9l++VQNPMoXnTfVaJpG+rM
6ltay6U9m9gfPeM2GLRWJU4EKjAWVU1qcO6TbYFPniwV0W2GqTszlQ0Uc1I5V3Kd
1L0AqXgggluQ+ige3cV+EaR6PsGM01GmYex9fH1GAclM68ENAVM7fVnuUsnTNAUo
IQ+jS/XR7AFDd1oDJ63SDEhhcqRsTCT4sOBAoKlB9qkMK9nnowjZT7iz7QIDAQAB
o4ICWDCCAlQwHQYDVR0OBBYEFNCEpEwXBg/peZ2Zm8txiU2T86YHMB8GA1UdIwQY
MBaAFFea3p/q7cQG314RvO8Dk81en9DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmIt
MjA4ZWYzMmMwMjAyLzEvMElTa1RCY0dELWw1blptYnkzR0pUWlB6cGdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yMjBlZDctOGRjMi00YzAxLTkyYmItMjA4ZWYzMmMwMjAy
LzEvVjVyZW4tcnR4QWJmWGhHODd3T1R6VjZmME4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTA4BAIAATAyAwQABTnRAwQC
Jd1EMAwDBAAtV3UDBAMtV3ADBAG5ugADBAC56KYDBAHCPQoDBAHCk0owIQQCAAIw
GwMHACoJ4gAAAAMHACoJ4gDiAAMHACoJ4gf//zANBgkqhkiG9w0BAQsFAAOCAQEA
A21uv7dOXgOV9BKGJpM71qIfyz0YXOcAhA9yvslvDE7yMjfR0fsSxHk1ddKAceq+
n+0VUJ/jlkrfSgPrtsJ8gqiO4PYSP0AsxDRJoXe/82MaRSN//rE7v0q5fId0V9jd
4VB8UIXtX4NUEmpd8+uPNtcvb4l5V3ApHLO77uQWfdsWNKkcWtvrHDMHF18YkfvX
eG/yo79NjQvSxYvoj19cwoWq6y1iB1HMdtiDQYksufeJ0kPlac8XO4xi9Jnfo2uS
QjvIe23+99u8oDRYv0L43B1rYFjUrcZrfnNtlQCtNEV1u/tWdvG8mEoPGyEBhNWj
Gh9PKS8+N/vuu0g8iy/AAw==
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:43:34 2024 by rpki-client on console-ams.rpki-client.org