Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/r9cssK8-ZJbt-MoUAJanMEBVkWU.roa
File: r9cssK8-ZJbt-MoUAJanMEBVkWU.roa (raw, json)
Hash identifier: DqRejvLjYDe4DP/Vm5xtAX+FCbnwNm0252w/OcUn5dQ=
Subject key identifier: AF:D7:2C:B0:AF:3E:64:96:ED:F8:CA:14:00:96:A7:30:40:55:91:65
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 0193D44EED488095D3742499AED600AC1B3D
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/r9cssK8-ZJbt-MoUAJanMEBVkWU.roa
Signing time: Tue 17 Dec 2024 11:09:22 +0000
ROA not before: Tue 17 Dec 2024 11:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 5.183.136.0/24 maxlen: 24
5.183.137.0/24 maxlen: 24
5.183.138.0/24 maxlen: 24
5.183.139.0/24 maxlen: 24
2a0e:dc00::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d4:4e:ed:48:80:95:d3:74:24:99:ae:d6:00:ac:1b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Dec 17 11:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd72cb0af3e6496edf8ca140096a73040559165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:52:c0:36:af:76:8f:b7:d3:d0:a1:5d:11:f7:
24:de:50:a0:e3:c3:2b:14:8c:15:f0:5f:3c:8d:ed:
50:ad:42:be:33:e2:1c:fa:d7:62:24:54:d0:c1:61:
34:fd:41:02:8f:bb:98:f4:ea:49:6a:c7:81:8a:51:
d7:4e:aa:e0:72:b2:7c:bf:88:a9:59:a4:af:0a:ab:
d1:e3:5f:d4:c5:f9:23:27:c3:cc:d9:da:44:6a:7a:
93:2c:f7:45:d4:5f:53:06:cd:b1:74:6a:21:c0:8b:
51:3e:e6:c5:1d:b5:2f:87:5f:af:e9:fe:31:df:c5:
49:45:73:c4:79:bb:46:3d:2c:e2:34:3d:00:37:9f:
9f:48:db:cd:f2:29:99:5e:9d:94:fc:e7:14:a9:3d:
89:3d:25:84:98:9b:86:0f:93:ef:f2:ff:33:38:31:
94:9e:10:9a:b1:87:18:cb:9a:4a:bd:bf:f9:01:ec:
73:1c:2a:1f:80:c1:8c:1f:ca:c0:22:bd:a9:59:8a:
a6:b4:d5:41:1c:b8:96:12:7c:4e:49:3a:63:24:39:
7b:25:d7:5d:5a:19:ac:cf:ab:bc:75:0d:3b:14:4b:
23:b3:79:bd:22:9e:06:2c:ed:e1:6a:aa:07:9e:64:
35:9d:e6:86:90:00:3b:7b:4d:52:87:83:f3:b3:17:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D7:2C:B0:AF:3E:64:96:ED:F8:CA:14:00:96:A7:30:40:55:91:65
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/r9cssK8-ZJbt-MoUAJanMEBVkWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.136.0/22
IPv6:
2a0e:dc00::/32
Signature Algorithm: sha256WithRSAEncryption
36:fb:4a:f6:f4:a7:a3:ce:76:bf:7e:ab:60:38:11:ea:17:66:
8d:30:42:5f:2d:a7:e5:a7:eb:3d:20:26:b7:c1:a7:bf:6b:ef:
47:1f:76:61:3d:64:a6:fe:9b:0b:43:c2:dd:c7:af:f4:5a:c6:
47:83:32:0a:47:e1:ac:36:6c:0b:b5:1d:40:33:f1:bf:96:7b:
b6:be:af:ee:ca:5e:6f:c4:52:53:53:6f:7a:91:69:23:b7:81:
f1:cf:06:5d:be:99:31:17:4f:b3:a1:62:82:8a:26:8d:0e:56:
9d:84:59:c2:37:09:f2:d2:ad:27:d0:e4:f4:a4:e6:9c:78:61:
7f:4c:cc:1e:70:2a:0d:7b:af:88:42:62:03:85:9a:af:a7:6d:
22:6a:88:c3:1a:6d:1c:47:e2:7a:13:db:16:bb:e8:38:1c:14:
d0:88:45:72:0a:23:4a:5b:c3:9f:00:e9:9d:62:5d:c1:52:59:
95:62:8a:66:62:25:59:2c:4e:bd:cb:aa:cd:3a:23:7c:68:f1:
40:e1:6a:af:74:a2:a0:8a:00:b6:ca:50:c3:f1:9a:30:72:6b:
a8:b9:76:ac:c0:d1:b4:39:66:6e:79:03:7d:8c:16:91:be:01:
b6:4e:71:03:1f:97:ca:8b:27:2e:4a:0b:ee:03:ae:bc:da:f0:
69:23:f0:2a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZPUTu1IgJXTdCSZrtYArBs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4
NTVkNTQwHhcNMjQxMjE3MTEwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmQ3MmNiMGFmM2U2NDk2ZWRmOGNhMTQwMDk2YTczMDQwNTU5MTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlLANq92j7fT0KFdEfck3lCg48Mr
FIwV8F88je1QrUK+M+Ic+tdiJFTQwWE0/UECj7uY9OpJaseBilHXTqrgcrJ8v4ip
WaSvCqvR41/UxfkjJ8PM2dpEanqTLPdF1F9TBs2xdGohwItRPubFHbUvh1+v6f4x
38VJRXPEebtGPSziND0AN5+fSNvN8imZXp2U/OcUqT2JPSWEmJuGD5Pv8v8zODGU
nhCasYcYy5pKvb/5AexzHCofgMGMH8rAIr2pWYqmtNVBHLiWEnxOSTpjJDl7Jddd
Whmsz6u8dQ07FEsjs3m9Ip4GLO3haqoHnmQ1neaGkAA7e01Sh4PzsxfdTQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK/XLLCvPmSW7fjKFACWpzBAVZFlMB8GA1UdIwQY
MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi
LTA5NGQwZGIxYWQyYy8xL3I5Y3NzSzgtWkpidC1Nb1VBSmFuTUVCVmtXVS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZiLTA5NGQwZGIxYWQy
Yy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAIFt4gw
DQQCAAIwBwMFACoO3AAwDQYJKoZIhvcNAQELBQADggEBADb7Svb0p6POdr9+q2A4
EeoXZo0wQl8tp+Wn6z0gJrfBp79r70cfdmE9ZKb+mwtDwt3Hr/RaxkeDMgpH4aw2
bAu1HUAz8b+We7a+r+7KXm/EUlNTb3qRaSO3gfHPBl2+mTEXT7OhYoKKJo0OVp2E
WcI3CfLSrSfQ5PSk5px4YX9MzB5wKg17r4hCYgOFmq+nbSJqiMMabRxH4noT2xa7
6DgcFNCIRXIKI0pbw58A6Z1iXcFSWZViimZiJVksTr3Lqs06I3xo8UDhaq90oqCK
ALbKUMPxmjBya6i5dqzA0bQ5Zm55A32MFpG+AbZOcQMfl8qLJy5KC+4Drrza8Gkj
8Co=
-----END CERTIFICATE-----
Generated at Sun Apr 20 04:26:39 2025 by rpki-client