Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/xQDGEvYdu3DOGWG7q5eRI-3S1JA.roa
File: xQDGEvYdu3DOGWG7q5eRI-3S1JA.roa (raw, json)
Hash identifier: FXGxrR2G95/K9IAE2XiXDH4/5Q5g9qEm4lOKHhVocDE=
Subject key identifier: C5:00:C6:12:F6:1D:BB:70:CE:19:61:BB:AB:97:91:23:ED:D2:D4:90
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C62B7B5D984BADD6C773593B2613B65BE
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/xQDGEvYdu3DOGWG7q5eRI-3S1JA.roa
Signing time: Wed 13 Dec 2023 10:27:35 +0000
ROA not before: Wed 13 Dec 2023 10:27:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60609
IP address blocks: 37.16.77.0/24 maxlen: 24
5.181.98.0/24 maxlen: 24
134.255.250.0/24 maxlen: 24
45.10.130.0/24 maxlen: 24
194.63.147.0/24 maxlen: 24
5.183.148.0/23 maxlen: 23
5.183.149.0/24 maxlen: 24
46.254.104.0/24 maxlen: 24
185.204.186.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:b7:b5:d9:84:ba:dd:6c:77:35:93:b2:61:3b:65:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 13 10:27:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c500c612f61dbb70ce1961bbab979123edd2d490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:b3:e6:a9:70:43:f3:fe:0c:a8:bd:a4:c1:
34:5b:99:28:27:5d:8d:5d:bd:6e:21:27:d2:0a:73:
4c:03:8e:87:35:d4:00:8b:cd:a6:68:bc:19:b0:29:
b4:e1:0e:3f:aa:5a:3c:38:92:79:c7:06:f5:77:08:
e2:33:7a:51:98:73:3e:ba:a3:33:f1:94:07:e7:8b:
28:b4:88:c0:86:59:43:87:3e:4e:05:81:72:7d:99:
d5:19:7a:58:cf:7b:bf:ba:83:d3:90:6a:9f:46:13:
5b:d0:aa:fd:31:bb:15:14:16:73:4d:a8:63:93:af:
e1:a1:9e:09:9e:a2:7b:35:6a:5c:13:ea:74:39:e6:
e2:b8:e0:c7:04:66:8b:8c:4f:14:dc:0f:33:f1:6d:
a2:bc:53:a0:4c:5a:48:cf:5d:90:90:3e:8a:e3:03:
17:54:43:e8:f4:6d:f2:c4:6d:ae:b9:9d:fb:1e:e5:
6e:da:fe:09:41:88:bf:13:de:66:67:f7:57:ca:ba:
54:ed:bd:bd:cc:47:8c:9a:c0:23:42:90:81:2f:32:
09:fd:5d:d9:27:ce:26:ed:2c:81:74:df:5c:c6:6d:
1b:64:46:e5:f4:23:2b:57:48:f9:0c:67:d5:ec:b8:
81:9a:56:7a:87:f0:f5:b2:bb:f5:a5:f4:81:c7:66:
aa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:C6:12:F6:1D:BB:70:CE:19:61:BB:AB:97:91:23:ED:D2:D4:90
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/xQDGEvYdu3DOGWG7q5eRI-3S1JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.98.0/24
5.183.148.0/23
37.16.77.0/24
45.10.130.0/24
46.254.104.0/24
134.255.250.0/24
185.204.186.0/24
194.63.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:c6:de:77:1d:ed:40:bd:a5:f7:1d:a3:74:9f:d3:de:d2:9a:
85:30:dd:37:26:c4:00:82:84:a5:c2:75:ee:2e:69:c5:3e:a6:
01:83:6c:59:53:b9:15:ef:f4:49:4e:af:41:5d:24:95:b5:1b:
77:60:ce:90:7e:4f:ed:83:3b:be:51:d2:bd:27:2c:4f:5e:91:
de:5c:8f:78:aa:30:5c:78:d1:d7:de:1b:48:af:37:c3:19:5d:
49:d2:43:be:48:e4:58:33:bd:e4:a0:d5:d2:b2:62:bd:08:86:
25:ad:01:7e:96:2d:87:69:ab:53:2c:74:06:7e:fa:ad:a1:0a:
31:1e:79:68:6c:d9:9d:9d:d7:64:cc:ce:5e:43:4c:8e:49:06:
69:d8:7d:d8:d0:88:04:68:6a:0b:02:3d:a1:44:b3:e0:15:f2:
ea:ae:eb:ab:bc:5d:fc:54:aa:6d:80:b5:f6:5d:34:50:26:ab:
74:75:5a:3b:f5:f7:90:b3:e0:fd:fd:eb:1d:5b:04:1a:5e:46:
ec:26:78:fb:45:a9:09:94:d9:56:f7:2b:cc:76:21:4b:31:b2:
ff:d1:a1:5d:ca:bf:60:72:78:fb:db:b6:60:fb:2a:ae:e7:4a:
85:68:0b:b0:81:cd:2f:55:e2:fa:94:ee:fe:27:d2:eb:22:43:
6e:3a:2d:55
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYxit7XZhLrdbHc1k7JhO2W+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw
ZWY5MDMwHhcNMjMxMjEzMTAyNzM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTAwYzYxMmY2MWRiYjcwY2UxOTYxYmJhYjk3OTEyM2VkZDJkNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWKz5qlwQ/P+DKi9pME0W5koJ12N
Xb1uISfSCnNMA46HNdQAi82maLwZsCm04Q4/qlo8OJJ5xwb1dwjiM3pRmHM+uqMz
8ZQH54sotIjAhllDhz5OBYFyfZnVGXpYz3u/uoPTkGqfRhNb0Kr9MbsVFBZzTahj
k6/hoZ4JnqJ7NWpcE+p0OebiuODHBGaLjE8U3A8z8W2ivFOgTFpIz12QkD6K4wMX
VEPo9G3yxG2uuZ37HuVu2v4JQYi/E95mZ/dXyrpU7b29zEeMmsAjQpCBLzIJ/V3Z
J84m7SyBdN9cxm0bZEbl9CMrV0j5DGfV7LiBmlZ6h/D1srv1pfSBx2aqUwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMUAxhL2Hbtwzhlhu6uXkSPt0tSQMB8GA1UdIwQY
MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt
ZmRmNjYzOGQyYzA0LzEveFFER0V2WWR1M0RPR1dHN3E1ZVJJLTNTMUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0
LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQABbViAwQB
BbeUAwQAJRBNAwQALQqCAwQALv5oAwQAhv/6AwQAucy6AwQAwj+TMA0GCSqGSIb3
DQEBCwUAA4IBAQC3xt53He1AvaX3HaN0n9Pe0pqFMN03JsQAgoSlwnXuLmnFPqYB
g2xZU7kV7/RJTq9BXSSVtRt3YM6Qfk/tgzu+UdK9JyxPXpHeXI94qjBceNHX3htI
rzfDGV1J0kO+SORYM73koNXSsmK9CIYlrQF+li2HaatTLHQGfvqtoQoxHnlobNmd
nddkzM5eQ0yOSQZp2H3Y0IgEaGoLAj2hRLPgFfLqruurvF38VKptgLX2XTRQJqt0
dVo79feQs+D9/esdWwQaXkbsJnj7RakJlNlW9yvMdiFLMbL/0aFdyr9gcnj727Zg
+yqu50qFaAuwgc0vVeL6lO7+J9LrIkNuOi1V
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:54 2024 by rpki-client on console-ams.rpki-client.org