Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/0C5rF5iPmBGJPpKU83sZmPZeApI.roa
File: 0C5rF5iPmBGJPpKU83sZmPZeApI.roa (raw, json)
Hash identifier: RL/bhfd5025zG4iERTwGQH3E5csAV/IG91bCdAd+3q0=
Subject key identifier: D0:2E:6B:17:98:8F:98:11:89:3E:92:94:F3:7B:19:98:F6:5E:02:92
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 018F3EB53F8F0F914369CE9170EAF2B77FBA
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/0C5rF5iPmBGJPpKU83sZmPZeApI.roa
Signing time: Fri 03 May 2024 13:46:56 +0000
ROA not before: Fri 03 May 2024 13:46:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 5.253.63.0/24 maxlen: 24
79.133.180.0/24 maxlen: 24
185.233.184.0/24 maxlen: 24
185.244.49.0/24 maxlen: 24
185.250.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 06:37:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3e:b5:3f:8f:0f:91:43:69:ce:91:70:ea:f2:b7:7f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: May 3 13:46:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d02e6b17988f9811893e9294f37b1998f65e0292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:71:9b:ca:95:20:51:bd:38:8f:91:5d:b1:b6:
db:d9:2d:68:ef:22:c9:96:03:c5:77:8d:1b:e0:24:
d1:db:9d:dc:a3:78:b3:37:85:8f:3e:17:15:a7:5e:
84:f5:19:d4:16:90:1e:a7:a1:b0:40:2f:46:bf:ea:
c2:97:c6:3d:4c:9d:9a:4a:a0:48:46:3f:83:d8:31:
d5:45:4f:a0:03:fa:c9:12:fc:53:b3:2e:e3:42:d5:
4c:f9:9a:d5:d7:79:5a:0e:03:f3:1e:ac:c9:4e:ed:
c1:5d:fb:e5:c0:10:f4:b0:e8:32:6d:b6:1e:c6:fe:
1f:93:f0:05:03:af:89:0d:32:20:e5:79:dd:b3:e0:
06:79:79:33:f2:1d:90:eb:1f:a7:eb:bd:f8:b7:2e:
44:4e:a8:70:8a:d7:ab:79:8e:66:9b:96:22:da:99:
88:a0:47:ec:4b:66:0d:6f:dd:39:16:bd:1d:2e:c5:
4e:44:93:81:bc:fc:7e:b8:8d:9d:68:e8:aa:16:f3:
84:2c:be:bc:71:a2:83:8d:76:89:4d:30:fb:37:79:
70:da:3b:2d:f8:a6:98:24:cb:8f:08:0e:2c:c3:e4:
39:c2:be:21:ac:cc:8b:c4:65:51:2e:95:26:c1:ee:
20:d5:07:b9:ee:9e:16:67:48:4b:ac:5a:99:fb:4d:
2e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2E:6B:17:98:8F:98:11:89:3E:92:94:F3:7B:19:98:F6:5E:02:92
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/0C5rF5iPmBGJPpKU83sZmPZeApI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
79.133.180.0/24
185.233.184.0/24
185.244.49.0/24
185.250.45.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:a0:9f:5d:e4:53:98:e1:32:16:a3:94:c4:01:4b:3d:c5:c0:
e4:b3:64:12:7c:0b:4b:02:fb:43:f0:6b:ec:c6:b1:3f:3b:d6:
0b:60:43:96:46:c7:2d:62:20:24:99:cb:7d:c8:db:f8:b8:65:
d7:45:13:03:72:f1:f5:e3:0c:70:9a:c3:d7:bf:b6:72:c5:c6:
16:d1:94:b6:4f:0f:26:c0:bf:5b:d2:79:19:47:17:71:10:cb:
2d:1f:db:f8:60:92:d2:25:1b:fe:2a:3e:c1:c6:e9:d7:39:34:
42:f4:c1:38:16:ec:72:cc:4a:89:09:c4:a6:4f:ec:64:7f:86:
1a:72:22:5e:4a:ce:64:fd:ff:16:72:12:8c:d2:53:68:35:95:
d8:42:7f:61:a0:5d:32:ed:aa:c1:98:ae:68:80:ef:b3:22:3f:
e5:45:02:85:bb:c5:9f:9c:97:25:08:71:b0:a9:1d:f6:32:37:
15:99:b7:bb:69:bf:9d:d7:0b:a7:a8:49:e9:8e:c9:1c:70:3b:
ae:91:a0:7b:0e:d9:d5:c8:4c:66:63:16:40:4d:13:f8:d0:e9:
1e:14:57:7a:e0:80:cd:7d:38:09:3f:3a:4a:c3:72:25:55:32:
68:1f:b0:86:62:69:ae:53:ab:59:84:76:42:db:1c:3d:ba:b1:
86:02:f8:79
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY8+tT+PD5FDac6RcOryt3+6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYmU2NWFlMjNmMjA3ZmE2OTUyNTVmNTVhOTA3YWMxNjA4
YmUwOTQwHhcNMjQwNTAzMTM0NjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDJlNmIxNzk4OGY5ODExODkzZTkyOTRmMzdiMTk5OGY2NWUwMjkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3GbypUgUb04j5Fdsbbb2S1o7yLJ
lgPFd40b4CTR253co3izN4WPPhcVp16E9RnUFpAep6GwQC9Gv+rCl8Y9TJ2aSqBI
Rj+D2DHVRU+gA/rJEvxTsy7jQtVM+ZrV13laDgPzHqzJTu3BXfvlwBD0sOgybbYe
xv4fk/AFA6+JDTIg5Xnds+AGeXkz8h2Q6x+n6734ty5ETqhwitereY5mm5Yi2pmI
oEfsS2YNb905Fr0dLsVORJOBvPx+uI2daOiqFvOELL68caKDjXaJTTD7N3lw2jst
+KaYJMuPCA4sw+Q5wr4hrMyLxGVRLpUmwe4g1Qe57p4WZ0hLrFqZ+00u5wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFNAuaxeYj5gRiT6SlPN7GZj2XgKSMB8GA1UdIwQY
MBaAFF++Za4j8gf6aVJV9VqQesFgi+CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUt
NDkyYWIzNzI2ODlkLzEvMEM1ckY1aVBtQkdKUHBLVTgzc1ptUFplQXBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9mNDMxOWYtM2RmYi00MmVhLWJhOTUtNDkyYWIzNzI2ODlk
LzEvWDc1bHJpUHlCX3BwVWxYMVdwQjZ3V0NMNEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABf0/AwQA
T4W0AwQAuem4AwQAufQxAwQAufotMA0GCSqGSIb3DQEBCwUAA4IBAQBNoJ9d5FOY
4TIWo5TEAUs9xcDks2QSfAtLAvtD8GvsxrE/O9YLYEOWRsctYiAkmct9yNv4uGXX
RRMDcvH14wxwmsPXv7ZyxcYW0ZS2Tw8mwL9b0nkZRxdxEMstH9v4YJLSJRv+Kj7B
xunXOTRC9ME4FuxyzEqJCcSmT+xkf4YaciJeSs5k/f8WchKM0lNoNZXYQn9hoF0y
7arBmK5ogO+zIj/lRQKFu8WfnJclCHGwqR32MjcVmbe7ab+d1wunqEnpjskccDuu
kaB7DtnVyExmYxZATRP40OkeFFd64IDNfTgJPzpKw3IlVTJoH7CGYmmuU6tZhHZC
2xw9urGGAvh5
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:02 2024 by rpki-client on console-ams.rpki-client.org