Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/UDLekOfCfZ-753SxhlYxhJfTKcA.roa
File: UDLekOfCfZ-753SxhlYxhJfTKcA.roa (raw, json)
Hash identifier: GU8HHj46wqbFRNOWjxMusAQaqx9Lh+OL6GijnSASbMM=
Subject key identifier: 50:32:DE:90:E7:C2:7D:9F:BB:E7:74:B1:86:56:31:84:97:D3:29:C0
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 018C20A34BAB1614BA67187473FD53C05D7A
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/UDLekOfCfZ-753SxhlYxhJfTKcA.roa
Signing time: Thu 30 Nov 2023 14:30:21 +0000
ROA not before: Thu 30 Nov 2023 14:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36351
IP address blocks: 5.62.35.0/24 maxlen: 24
5.62.33.0/24 maxlen: 24
5.62.23.0/24 maxlen: 24
5.62.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:a3:4b:ab:16:14:ba:67:18:74:73:fd:53:c0:5d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Nov 30 14:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5032de90e7c27d9fbbe774b18656318497d329c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:af:78:9b:80:0a:c1:6c:3c:39:6d:76:37:
79:ee:0b:63:f4:5e:6c:bc:03:2f:fd:7a:48:ab:ce:
f7:37:57:5f:41:06:88:75:4b:8b:c1:f1:a8:de:c5:
a8:24:87:b2:1a:24:fe:2a:55:be:a3:99:74:9e:5e:
6c:b0:38:59:74:93:c8:64:46:5b:d2:09:c0:fc:66:
6a:5b:ca:2f:e0:14:ee:4e:10:f0:d2:24:e4:87:f0:
84:3e:67:f3:5b:80:c1:61:47:d6:fb:bc:92:c0:a2:
17:77:94:1c:e5:66:14:0f:26:81:64:64:1a:43:46:
b6:77:5c:14:c2:7d:a8:8b:14:d7:ba:7b:b0:40:fd:
29:d7:f9:c2:a8:56:4b:4d:c5:75:6b:21:22:59:f8:
a0:7e:1a:f0:02:01:2d:39:16:df:c6:43:24:50:11:
c9:43:15:77:19:07:60:da:3e:54:6d:6c:a1:6d:e3:
05:05:7a:2f:36:e4:b1:bb:29:10:ca:f2:19:da:3d:
8f:ab:fa:be:3a:73:6f:52:c1:94:93:35:38:e8:25:
31:1e:de:c3:7e:b6:2a:ab:ea:23:e6:46:40:2e:4c:
54:d8:a8:ee:d9:23:e1:bb:a8:8f:e6:8e:cc:85:93:
6d:8f:5b:81:07:49:cb:62:5d:51:a3:0b:4d:fc:52:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:32:DE:90:E7:C2:7D:9F:BB:E7:74:B1:86:56:31:84:97:D3:29:C0
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/UDLekOfCfZ-753SxhlYxhJfTKcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.22.0/23
5.62.33.0/24
5.62.35.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6b:3b:61:5a:10:7f:06:7d:d4:4c:42:a9:af:fa:e7:9b:0a:
71:91:6e:4e:25:56:c1:1d:03:8c:cf:46:0b:74:bc:f4:86:0c:
3a:69:d6:cb:29:01:f7:f5:5e:8f:9e:30:a2:45:85:c3:e3:83:
7c:0c:d7:ef:f6:10:18:3c:35:05:7f:4c:52:57:99:18:b3:4d:
6e:5e:63:52:86:b8:3f:cf:ee:34:78:7f:af:b3:aa:b4:6a:47:
21:6a:fd:69:d6:33:2a:e4:26:a9:5b:ba:56:91:f4:4b:f2:65:
21:ad:f2:c5:a4:33:fd:c5:ee:8e:16:e6:62:a8:3c:b8:d2:a0:
a2:6f:95:9f:80:aa:37:08:30:bc:5d:d3:0c:16:f8:e5:0d:ea:
49:74:bc:ff:47:26:20:02:6b:9f:7f:18:36:68:c1:b4:42:3f:
3a:f6:04:de:7c:23:5c:3b:d2:79:6d:3f:ed:43:ff:2d:c3:57:
38:98:03:cf:a3:08:86:17:fd:76:77:94:8d:83:82:ed:d7:da:
05:60:86:3f:5f:48:5a:9c:3d:9a:c6:86:f4:73:9a:5d:04:d7:
2a:f4:b7:ad:26:32:3c:6a:33:77:58:a0:7a:7a:ff:c8:99:36:
65:b7:be:e4:40:b0:ad:f2:2b:40:9d:a6:6b:24:24:18:74:31:
67:ed:88:07
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYwgo0urFhS6Zxh0c/1TwF16MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWI4ODVjM2IzMDJmZDUwZTZjMjI2NDdhMzNkYzQ3NzI3
ZmVhOTUwHhcNMjMxMTMwMTQzMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDMyZGU5MGU3YzI3ZDlmYmJlNzc0YjE4NjU2MzE4NDk3ZDMyOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4aveJuACsFsPDltdjd57gtj9F5s
vAMv/XpIq873N1dfQQaIdUuLwfGo3sWoJIeyGiT+KlW+o5l0nl5ssDhZdJPIZEZb
0gnA/GZqW8ov4BTuThDw0iTkh/CEPmfzW4DBYUfW+7ySwKIXd5Qc5WYUDyaBZGQa
Q0a2d1wUwn2oixTXunuwQP0p1/nCqFZLTcV1ayEiWfigfhrwAgEtORbfxkMkUBHJ
QxV3GQdg2j5UbWyhbeMFBXovNuSxuykQyvIZ2j2Pq/q+OnNvUsGUkzU46CUxHt7D
frYqq+oj5kZALkxU2Kju2SPhu6iP5o7MhZNtj1uBB0nLYl1RowtN/FJ9xQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFAy3pDnwn2fu+d0sYZWMYSX0ynAMB8GA1UdIwQY
MBaAFHFbiFw7MC/VDmwiZHoz3Edyf+qVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYt
MmE5MjMzM2Y5ZGY2LzEvVURMZWtPZkNmWi03NTNTeGhsWXhoSmZUS2NBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYtMmE5MjMzM2Y5ZGY2
LzEvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBBT4WAwQA
BT4hAwQABT4jMA0GCSqGSIb3DQEBCwUAA4IBAQBeazthWhB/Bn3UTEKpr/rnmwpx
kW5OJVbBHQOMz0YLdLz0hgw6adbLKQH39V6PnjCiRYXD44N8DNfv9hAYPDUFf0xS
V5kYs01uXmNShrg/z+40eH+vs6q0akchav1p1jMq5CapW7pWkfRL8mUhrfLFpDP9
xe6OFuZiqDy40qCib5WfgKo3CDC8XdMMFvjlDepJdLz/RyYgAmuffxg2aMG0Qj86
9gTefCNcO9J5bT/tQ/8tw1c4mAPPowiGF/12d5SNg4Lt19oFYIY/X0hanD2axob0
c5pdBNcq9LetJjI8ajN3WKB6ev/ImTZlt77kQLCt8itAnaZrJCQYdDFn7YgH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:36 2024 by rpki-client on console-ams.rpki-client.org