Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/pdJJj4US0QtRm6pc0elfCyZKNjw.roa
File: pdJJj4US0QtRm6pc0elfCyZKNjw.roa (raw, json)
Hash identifier: Zvdb2Gd5RbaAbB1MfdIXYvYRRb9ChR+CefUfQlEC6I0=
Subject key identifier: A5:D2:49:8F:85:12:D1:0B:51:9B:AA:5C:D1:E9:5F:0B:26:4A:36:3C
Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Certificate serial: 018CC5010F787166B107F80B372C6CB7CFB2
Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/pdJJj4US0QtRm6pc0elfCyZKNjw.roa
Signing time: Mon 01 Jan 2024 12:30:30 +0000
ROA not before: Mon 01 Jan 2024 12:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.255.5.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Jan 2024 06:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0f:78:71:66:b1:07:f8:0b:37:2c:6c:b7:cf:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38
Validity
Not Before: Jan 1 12:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5d2498f8512d10b519baa5cd1e95f0b264a363c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e7:2d:09:ab:49:92:60:21:49:20:19:2c:df:
5d:74:8d:e9:3b:07:25:f0:c3:ad:e0:e6:c9:63:43:
ab:a1:37:16:5a:b6:7e:cc:f7:35:e7:3a:7e:fe:69:
50:7f:e8:fc:6c:15:4b:9c:c0:26:9c:45:f6:ae:35:
5e:61:aa:4f:9d:12:cf:4d:2d:5e:80:55:23:c4:57:
f7:ef:1a:7e:b0:d7:96:0e:25:5f:d3:76:17:e4:ac:
e3:6a:b5:96:de:5a:71:7e:4a:28:75:1d:b9:63:2c:
f2:39:d2:0e:f7:88:98:92:c5:97:86:35:4f:e1:25:
d6:fc:6d:6b:24:25:79:aa:f0:bc:e5:1f:1b:b4:ca:
29:c9:a7:d2:15:58:42:b5:e0:46:39:a2:72:2d:40:
a9:fe:cd:92:e3:f5:58:71:9e:83:56:ec:f1:28:9d:
1d:6a:87:b9:8e:7c:1c:9a:dc:01:e4:ef:89:3d:c3:
3f:a2:f0:aa:81:1b:63:0c:22:16:98:4f:4d:1f:eb:
19:3b:d6:d5:74:81:3e:d1:ed:5a:43:fc:b8:65:40:
eb:fc:ca:ba:2a:fa:05:3f:cf:15:67:52:26:53:99:
dc:39:09:b9:8c:30:f0:50:1e:55:1b:e6:53:fc:40:
6c:a9:c0:63:41:d8:09:63:71:3c:59:a2:54:69:0c:
c5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D2:49:8F:85:12:D1:0B:51:9B:AA:5C:D1:E9:5F:0B:26:4A:36:3C
X509v3 Authority Key Identifier:
keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/pdJJj4US0QtRm6pc0elfCyZKNjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.5.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:3e:ec:2e:0d:82:9e:ca:ea:b2:90:e9:62:92:89:7d:a5:45:
ca:ea:25:09:db:48:6e:20:89:42:06:75:1b:bf:25:26:28:05:
dc:36:e1:7a:b3:58:02:97:45:0e:bc:63:37:f3:bb:a6:76:b4:
4f:32:35:43:f4:6d:ba:e9:90:3c:db:23:86:1f:f2:c9:b3:f4:
45:a2:e1:7e:49:38:6b:7e:1e:49:42:2c:bc:d6:f4:76:e0:41:
0e:c6:7e:68:f4:36:48:e6:bc:b0:00:cb:7e:f5:a4:b6:ed:b5:
73:8e:03:04:ec:17:a6:6d:21:61:f1:08:7c:0a:c3:b5:ee:f4:
18:1e:cd:37:cd:d2:d3:ac:6b:c0:b0:16:b2:53:e1:29:f4:d0:
5d:b1:c5:02:a8:69:e6:f8:1b:29:5e:f0:1b:df:a9:d6:8b:d4:
8f:3a:a3:87:1a:a7:04:99:c9:13:9a:58:12:d4:2a:ec:d1:67:
31:20:75:fe:1d:0d:ed:17:c7:2e:24:39:c5:c1:a8:86:af:ae:
9c:cf:99:d4:30:90:6a:c3:83:b9:24:31:48:cf:8f:fc:00:40:
92:18:ee:78:74:34:59:d2:c9:d1:65:72:c3:21:7d:eb:62:d2:
8c:e2:ae:7f:c0:27:b4:29:e0:68:8d:fc:3b:dd:a8:01:b8:9f:
02:a0:8d:a5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAQ94cWaxB/gLNyxst8+yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl
ZWFmMzgwHhcNMjQwMTAxMTIzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWQyNDk4Zjg1MTJkMTBiNTE5YmFhNWNkMWU5NWYwYjI2NGEzNjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoectCatJkmAhSSAZLN9ddI3pOwcl
8MOt4ObJY0OroTcWWrZ+zPc15zp+/mlQf+j8bBVLnMAmnEX2rjVeYapPnRLPTS1e
gFUjxFf37xp+sNeWDiVf03YX5KzjarWW3lpxfkoodR25YyzyOdIO94iYksWXhjVP
4SXW/G1rJCV5qvC85R8btMopyafSFVhCteBGOaJyLUCp/s2S4/VYcZ6DVuzxKJ0d
aoe5jnwcmtwB5O+JPcM/ovCqgRtjDCIWmE9NH+sZO9bVdIE+0e1aQ/y4ZUDr/Mq6
KvoFP88VZ1ImU5ncOQm5jDDwUB5VG+ZT/EBsqcBjQdgJY3E8WaJUaQzFxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKXSSY+FEtELUZuqXNHpXwsmSjY8MB8GA1UdIwQY
MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct
NjJiYjZkNjNlNTlkLzEvcGRKSmo0VVMwUXRSbTZwYzBlbGZDeVpLTmp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk
LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf8FMA0G
CSqGSIb3DQEBCwUAA4IBAQC6PuwuDYKeyuqykOlikol9pUXK6iUJ20huIIlCBnUb
vyUmKAXcNuF6s1gCl0UOvGM387umdrRPMjVD9G266ZA82yOGH/LJs/RFouF+SThr
fh5JQiy81vR24EEOxn5o9DZI5rywAMt+9aS27bVzjgME7BembSFh8Qh8CsO17vQY
Hs03zdLTrGvAsBayU+Ep9NBdscUCqGnm+BspXvAb36nWi9SPOqOHGqcEmckTmlgS
1Crs0WcxIHX+HQ3tF8cuJDnFwaiGr66cz5nUMJBqw4O5JDFIz4/8AECSGO54dDRZ
0snRZXLDIX3rYtKM4q5/wCe0KeBojfw73agBuJ8CoI2l
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org