Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VO1YdO9N6OxYHMkaVD6h0XiR9kQ.roa
File: VO1YdO9N6OxYHMkaVD6h0XiR9kQ.roa (raw, json)
Hash identifier: 9mjF1SwDrHBiFAkWdkzi2Fwb1ERgEpHLpMr5+kHj83c=
Subject key identifier: 54:ED:58:74:EF:4D:E8:EC:58:1C:C9:1A:54:3E:A1:D1:78:91:F6:44
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018C02307E087E0A2471FC8FAE52AB87020F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VO1YdO9N6OxYHMkaVD6h0XiR9kQ.roa
Signing time: Fri 24 Nov 2023 16:36:21 +0000
ROA not before: Fri 24 Nov 2023 16:36:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56630
IP address blocks: 185.232.168.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.40.5.0/24 maxlen: 24
194.53.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:02:30:7e:08:7e:0a:24:71:fc:8f:ae:52:ab:87:02:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Nov 24 16:36:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54ed5874ef4de8ec581cc91a543ea1d17891f644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:48:45:c6:c2:da:64:14:6a:37:17:82:d6:
03:82:8f:24:3c:40:6c:b7:ae:79:b6:d5:c1:4e:19:
2a:d1:1f:fb:63:de:3e:74:6c:b2:c3:35:81:da:c3:
12:10:f3:ca:31:b7:13:d2:f4:ef:76:c3:ab:e5:5c:
cb:f1:93:03:f2:fd:0b:93:31:5b:36:4d:b8:f4:ef:
bf:3d:17:66:58:00:6f:f7:50:af:4f:f4:79:2e:65:
5b:90:62:ee:e5:07:be:24:00:5b:b7:c6:75:62:2a:
ad:b1:90:4b:0e:7f:14:02:56:50:f1:88:2a:97:35:
63:8e:8b:45:b5:d0:f7:d3:8a:37:31:1c:c9:8c:6e:
34:dc:42:10:12:87:9e:1d:55:2e:6c:e2:44:26:eb:
80:be:10:33:65:b7:10:6e:95:73:35:1c:fc:ff:cc:
1d:5c:51:46:98:07:16:28:6f:05:a8:51:78:c9:2e:
d4:01:15:29:3b:b9:73:a2:dd:9f:47:0d:69:4b:4a:
94:a6:32:6b:dc:4b:b1:7a:26:c7:16:f5:05:3c:d7:
f9:9a:9f:7f:f1:22:a4:10:48:f7:67:2a:51:ef:c0:
47:77:ea:8b:06:55:f0:23:5f:05:b2:9b:f8:b8:74:
38:66:f7:b3:e0:13:72:5d:53:58:94:df:de:53:d6:
96:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:ED:58:74:EF:4D:E8:EC:58:1C:C9:1A:54:3E:A1:D1:78:91:F6:44
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/VO1YdO9N6OxYHMkaVD6h0XiR9kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.5.0/24
185.117.117.0/24
185.232.168.0/24
194.53.55.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ac:79:59:71:d1:5e:5e:d0:f0:be:d4:17:0c:33:47:c8:26:
3c:9d:05:d2:74:f8:5d:da:66:94:87:e2:5f:fb:fc:de:be:b9:
65:2c:47:d4:b7:eb:e6:89:88:e3:88:26:c3:15:ef:5c:4f:0f:
88:6a:44:9e:c7:eb:88:48:67:3c:83:46:7c:74:3d:4c:39:8c:
6e:33:91:42:f5:7d:41:7c:dc:27:a0:3b:24:3c:cf:fd:52:97:
13:22:c8:a3:19:93:01:27:02:f2:f0:0b:af:f4:34:15:cd:35:
eb:23:5a:78:53:97:75:c4:4a:b4:9a:f6:50:9f:50:98:8a:68:
c8:ba:70:f6:40:69:5e:3d:93:92:f1:98:db:7a:ad:0e:f4:4a:
6d:3c:a1:d6:ea:41:fc:e2:fc:26:6e:06:9f:87:27:58:fb:f9:
6d:22:b0:c7:20:c8:92:39:43:1a:22:2b:9f:c5:e3:dd:9b:42:
ff:a6:9e:ca:ee:2d:cc:56:d9:db:0c:c6:25:b2:a4:f9:2c:09:
7c:00:de:cd:84:04:10:c9:d7:0d:77:03:3f:7a:4a:b4:38:cb:
48:50:6f:ae:a0:86:38:67:ea:b2:88:bd:77:08:07:20:c1:fd:
51:15:33:cf:86:8e:66:35:99:18:66:b2:2b:68:0f:36:d5:4b:
18:10:a7:99
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYwCMH4IfgokcfyPrlKrhwIPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMxMTI0MTYzNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NGVkNTg3NGVmNGRlOGVjNTgxY2M5MWE1NDNlYTFkMTc4OTFmNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtVIRcbC2mQUajcXgtYDgo8kPEBs
t655ttXBThkq0R/7Y94+dGyywzWB2sMSEPPKMbcT0vTvdsOr5VzL8ZMD8v0LkzFb
Nk249O+/PRdmWABv91CvT/R5LmVbkGLu5Qe+JABbt8Z1YiqtsZBLDn8UAlZQ8Ygq
lzVjjotFtdD304o3MRzJjG403EIQEoeeHVUubOJEJuuAvhAzZbcQbpVzNRz8/8wd
XFFGmAcWKG8FqFF4yS7UARUpO7lzot2fRw1pS0qUpjJr3EuxeibHFvUFPNf5mp9/
8SKkEEj3ZypR78BHd+qLBlXwI18Fspv4uHQ4Zvez4BNyXVNYlN/eU9aW4QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFFTtWHTvTejsWBzJGlQ+odF4kfZEMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvVk8xWWRPOU42T3hZSE1rYVZENmgwWGlSOWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuSgFAwQA
uXV1AwQAueioAwQAwjU3MA0GCSqGSIb3DQEBCwUAA4IBAQBdrHlZcdFeXtDwvtQX
DDNHyCY8nQXSdPhd2maUh+Jf+/zevrllLEfUt+vmiYjjiCbDFe9cTw+IakSex+uI
SGc8g0Z8dD1MOYxuM5FC9X1BfNwnoDskPM/9UpcTIsijGZMBJwLy8Auv9DQVzTXr
I1p4U5d1xEq0mvZQn1CYimjIunD2QGlePZOS8Zjbeq0O9EptPKHW6kH84vwmbgaf
hydY+/ltIrDHIMiSOUMaIiufxePdm0L/pp7K7i3MVtnbDMYlsqT5LAl8AN7NhAQQ
ydcNdwM/ekq0OMtIUG+uoIY4Z+qyiL13CAcgwf1RFTPPho5mNZkYZrIraA821UsY
EKeZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org