Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/5_PESQOOvHknYYJm6saAI7K0akQ.roa
File: 5_PESQOOvHknYYJm6saAI7K0akQ.roa (raw, json)
Hash identifier: u1RS59fOcppQF7BjueN1ym4AIWZVUC3jEmbExcTo/LU=
Subject key identifier: E7:F3:C4:49:03:8E:BC:79:27:61:82:66:EA:C6:80:23:B2:B4:6A:44
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 01941F2AB09B31D91EFDFA44FFE6F7F6C373
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/5_PESQOOvHknYYJm6saAI7K0akQ.roa
Signing time: Wed 01 Jan 2025 00:01:18 +0000
ROA not before: Wed 01 Jan 2025 00:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24641
IP address blocks: 77.240.176.0/20 maxlen: 24
81.19.0.0/20 maxlen: 24
85.132.144.0/20 maxlen: 24
95.129.96.0/21 maxlen: 21
185.146.4.0/22 maxlen: 22
2a02:e98::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:47:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:2a:b0:9b:31:d9:1e:fd:fa:44:ff:e6:f7:f6:c3:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 1 00:01:18 2025 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7f3c449038ebc7927618266eac68023b2b46a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:0b:31:63:2a:37:0f:65:82:1a:47:38:7c:
37:c4:1c:f1:5f:c6:ae:79:7c:7d:af:5a:5c:2f:c0:
5f:1f:5e:cb:c1:12:3e:4f:43:83:7d:17:69:22:16:
69:72:ad:0a:83:6b:8e:a4:db:4a:fa:41:91:fe:08:
fc:48:7c:5a:e7:35:40:74:a5:a0:4e:5c:61:68:d5:
87:ad:a3:9c:5d:91:31:34:3d:ea:48:e2:83:96:df:
85:e7:65:5c:86:40:ab:4d:c6:88:89:f6:be:73:b5:
a3:7e:aa:87:66:17:a1:bf:62:2d:3a:c7:07:ed:22:
87:e6:27:4c:9f:74:a7:40:c9:f6:4f:a7:ed:8c:84:
37:fd:d7:03:50:05:4e:62:b2:f0:9f:46:20:df:ab:
1a:84:f0:ff:a1:d8:9d:4c:2a:f9:3f:67:11:ae:55:
4a:29:03:8c:e2:eb:93:47:e5:80:35:9a:5d:b3:02:
17:00:59:02:46:94:d3:7a:fe:03:28:35:ad:de:77:
9f:27:07:7e:03:9e:38:f2:08:93:07:d3:4f:99:0d:
dc:87:e4:ca:a3:18:33:65:80:7b:c7:5b:cf:0b:a0:
0c:df:f4:51:3f:2b:7e:88:3b:b1:ea:91:e4:3c:1c:
9f:03:87:9d:af:b2:d6:37:82:2b:1b:db:d8:3f:b9:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:C4:49:03:8E:BC:79:27:61:82:66:EA:C6:80:23:B2:B4:6A:44
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/5_PESQOOvHknYYJm6saAI7K0akQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.176.0/20
81.19.0.0/20
85.132.144.0/20
95.129.96.0/21
185.146.4.0/22
IPv6:
2a02:e98::/32
Signature Algorithm: sha256WithRSAEncryption
8a:77:c7:61:f6:30:d8:17:d7:f5:f6:3e:2c:a5:76:e2:0d:ad:
e7:0e:97:1a:99:57:0b:8f:62:c7:ae:47:38:ce:a8:12:dd:91:
de:eb:fc:70:81:4e:c1:89:03:59:7e:6a:a8:2d:74:63:81:d3:
bd:a5:98:05:7e:d3:1e:2a:e5:c6:28:7b:ba:f1:8c:ef:3f:e0:
40:f3:d0:5e:ac:10:ef:ff:53:23:76:63:de:22:f9:7f:9d:e6:
7a:82:35:19:4e:a2:92:a9:d8:fd:58:e7:41:f1:b4:97:48:b9:
54:e1:a3:ea:b6:b7:88:3c:19:fa:b5:03:c6:ac:87:8b:98:63:
73:c3:89:a9:c8:df:fa:7c:a4:c1:62:4c:24:0d:90:8a:02:53:
c1:9b:75:95:cf:e0:2b:3c:0f:3b:77:83:d5:5f:d7:00:f7:4b:
1b:a4:93:d7:fc:9b:7b:85:b4:da:54:a1:fb:7d:df:c7:43:a4:
d2:1a:5a:af:4b:f2:b3:f8:b1:54:7f:4a:a7:a6:09:c1:2a:14:
35:75:a8:b4:97:3d:82:f7:b8:b7:2d:87:1b:01:7a:71:66:fd:
d5:b5:21:0f:6f:64:2a:20:7e:81:04:e4:4b:d2:fd:26:03:1f:
2a:eb:47:74:b8:6f:0d:65:64:74:cf:32:f9:61:44:36:14:a1:
9a:eb:21:11
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZQfKrCbMdke/fpE/+b39sNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwYTE1NDQ0MWRmOTYyM2VlYjVhMTk2MTM4ZDIxYmVmNTgy
NGI0NDEwHhcNMjUwMTAxMDAwMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2YzYzQ0OTAzOGViYzc5Mjc2MTgyNjZlYWM2ODAyM2IyYjQ2YTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07ALMWMqNw9lghpHOHw3xBzxX8au
eXx9r1pcL8BfH17LwRI+T0ODfRdpIhZpcq0Kg2uOpNtK+kGR/gj8SHxa5zVAdKWg
TlxhaNWHraOcXZExND3qSOKDlt+F52VchkCrTcaIifa+c7WjfqqHZhehv2ItOscH
7SKH5idMn3SnQMn2T6ftjIQ3/dcDUAVOYrLwn0Yg36sahPD/odidTCr5P2cRrlVK
KQOM4uuTR+WANZpdswIXAFkCRpTTev4DKDWt3nefJwd+A5448giTB9NPmQ3ch+TK
oxgzZYB7x1vPC6AM3/RRPyt+iDux6pHkPByfA4edr7LWN4IrG9vYP7lkwQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFOfzxEkDjrx5J2GCZurGgCOytGpEMB8GA1UdIwQY
MBaAFKChVEQd+WI+61oZYTjSG+9YJLRBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmIt
OWQ5NDM2NzFhOGEzLzEvNV9QRVNRT092SGtuWVlKbTZzYUFJN0swYWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81YjNkNmQtZTZmMS00N2FkLWI1MmItOWQ5NDM2NzFhOGEz
LzEvb0tGVVJCMzVZajdyV2hsaE9OSWI3MWdrdEVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQETfCwAwQE
URMAAwQEVYSQAwQDX4FgAwQCuZIEMA0EAgACMAcDBQAqAg6YMA0GCSqGSIb3DQEB
CwUAA4IBAQCKd8dh9jDYF9f19j4spXbiDa3nDpcamVcLj2LHrkc4zqgS3ZHe6/xw
gU7BiQNZfmqoLXRjgdO9pZgFftMeKuXGKHu68YzvP+BA89BerBDv/1MjdmPeIvl/
neZ6gjUZTqKSqdj9WOdB8bSXSLlU4aPqtreIPBn6tQPGrIeLmGNzw4mpyN/6fKTB
YkwkDZCKAlPBm3WVz+ArPA87d4PVX9cA90sbpJPX/Jt7hbTaVKH7fd/HQ6TSGlqv
S/Kz+LFUf0qnpgnBKhQ1dai0lz2C97i3LYcbAXpxZv3VtSEPb2QqIH6BBORL0v0m
Ax8q60d0uG8NZWR0zzL5YUQ2FKGa6yER
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:43 2025 by rpki-client