Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/tFxoRjo8JP4-i4Sb5YisN5dakP0.roa
File: tFxoRjo8JP4-i4Sb5YisN5dakP0.roa (raw, json)
Hash identifier: OaFDyAZb1V86TEaZHKXPEpyEcllSTY3wMyO1XkzNNaE=
Subject key identifier: B4:5C:68:46:3A:3C:24:FE:3E:8B:84:9B:E5:88:AC:37:97:5A:90:FD
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 018DF538AB4944DD0FDBF408796AD30668DC
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/tFxoRjo8JP4-i4Sb5YisN5dakP0.roa
Signing time: Thu 29 Feb 2024 14:15:48 +0000
ROA not before: Thu 29 Feb 2024 14:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44395
IP address blocks: 5.77.128.0/17 maxlen: 24
37.157.208.0/20 maxlen: 24
37.157.208.0/22 maxlen: 24
37.157.209.0/24 maxlen: 24
37.157.210.0/24 maxlen: 24
37.157.212.0/22 maxlen: 24
37.157.216.0/21 maxlen: 24
37.157.216.0/22 maxlen: 24
37.157.220.0/22 maxlen: 24
37.252.64.0/19 maxlen: 24
46.36.112.0/20 maxlen: 24
46.162.192.0/18 maxlen: 24
46.162.240.0/20 maxlen: 24
46.241.128.0/17 maxlen: 24
81.16.0.0/20 maxlen: 24
82.199.192.0/20 maxlen: 24
92.43.136.0/21 maxlen: 24
92.43.136.0/22 maxlen: 24
92.43.140.0/22 maxlen: 24
109.75.34.0/23 maxlen: 24
109.75.36.0/22 maxlen: 24
109.75.40.0/21 maxlen: 24
141.136.64.0/19 maxlen: 24
178.78.128.0/18 maxlen: 24
185.59.68.0/22 maxlen: 24
185.86.195.0/24 maxlen: 24
188.115.192.0/18 maxlen: 24
212.34.224.0/19 maxlen: 24
212.34.232.0/21 maxlen: 24
212.34.240.0/20 maxlen: 24
212.34.240.0/21 maxlen: 24
2a00:cc40::/29 maxlen: 48
2a00:cc40::/32 maxlen: 32
2a00:cc40::/48 maxlen: 48
2a01:4a00::/32 maxlen: 32
2a03:1080::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 17 Mar 2024 17:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:38:ab:49:44:dd:0f:db:f4:08:79:6a:d3:06:68:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Feb 29 14:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b45c68463a3c24fe3e8b849be588ac37975a90fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c8:f1:07:49:c2:94:78:ad:18:28:c3:65:f1:
3d:4a:62:62:7e:b1:a0:39:da:ed:92:2c:06:8b:23:
ec:86:fb:2d:45:51:de:5f:ef:4b:b7:b1:72:3f:f2:
96:25:09:f9:13:e1:0f:25:5f:ac:31:f5:db:2f:58:
98:1f:90:3f:4b:ff:99:c5:9f:02:11:5a:87:72:59:
0d:bd:fc:c1:ac:5a:c6:d2:64:63:ec:42:16:50:3e:
f2:db:0d:52:14:1c:cb:fc:1c:2b:42:0d:7a:ff:86:
52:95:1d:ef:d1:db:ae:a5:ab:d6:9b:d8:89:92:67:
56:18:fc:0c:22:95:0b:e1:91:e8:19:ba:2e:10:42:
3a:7f:94:76:c9:2e:54:bc:b0:32:bf:c5:77:82:70:
4b:0f:e9:7a:aa:9b:2c:70:b1:26:88:cd:a6:49:f9:
7c:36:c5:c0:c7:34:ec:a1:f5:da:4d:ee:96:c7:92:
97:bd:0a:dd:b1:1b:4f:4f:f3:12:f2:1d:54:37:dc:
a2:b0:ff:db:29:83:aa:fa:2e:2a:25:2c:2e:df:7f:
dd:35:af:aa:fb:e6:d0:f0:2c:c1:78:16:f4:fd:71:
0e:d9:51:19:de:94:3f:1d:24:1e:69:ce:0b:20:03:
25:26:10:d5:e4:93:f8:eb:2e:e7:9f:ea:2a:40:ea:
6c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5C:68:46:3A:3C:24:FE:3E:8B:84:9B:E5:88:AC:37:97:5A:90:FD
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/tFxoRjo8JP4-i4Sb5YisN5dakP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.77.128.0/17
37.157.208.0/20
37.252.64.0/19
46.36.112.0/20
46.162.192.0/18
46.241.128.0/17
81.16.0.0/20
82.199.192.0/20
92.43.136.0/21
109.75.34.0-109.75.47.255
141.136.64.0/19
178.78.128.0/18
185.59.68.0/22
185.86.195.0/24
188.115.192.0/18
212.34.224.0/19
IPv6:
2a00:cc40::/29
2a01:4a00::/32
2a03:1080::/32
Signature Algorithm: sha256WithRSAEncryption
1b:c3:69:b9:3b:ec:2f:e6:4f:e3:ef:04:5f:04:94:8f:ad:e6:
48:05:8a:a5:f8:c4:bc:44:88:67:c8:97:a3:b2:d4:43:fe:6e:
c3:e9:5a:88:f5:84:34:bc:85:9b:d7:6a:9d:a3:11:d5:5c:00:
15:18:50:bb:ca:ab:08:c2:34:b2:66:36:62:70:38:67:a4:e0:
8f:a3:8c:b2:67:97:45:43:96:d6:84:95:fb:5b:42:54:d3:dd:
fb:a3:56:9c:3f:61:99:a4:0c:37:e9:1f:86:8b:f9:85:40:89:
fb:5d:15:40:6a:d9:da:07:6c:f9:a5:1d:cc:a5:6c:85:00:a8:
9a:87:06:40:90:86:08:74:d8:8f:cb:70:6b:77:bf:9f:7a:b3:
b4:2d:03:d0:a8:74:59:e3:61:75:3c:a0:6a:16:0c:d7:30:60:
5f:c0:eb:0d:39:88:9b:e7:72:6d:8e:b1:c2:e9:0b:ec:70:8b:
26:95:6a:4f:0b:96:d7:56:13:28:16:24:f5:3e:48:27:2a:d9:
c6:64:3b:89:0d:84:e4:e7:5b:a1:02:17:bf:7c:7e:57:cc:33:
1e:3c:5c:3f:e3:a5:d5:e6:6b:ac:cb:ed:6b:f7:c8:aa:bc:6a:
7d:52:81:d6:61:b4:84:ac:55:bc:d8:73:e9:28:ec:a0:1e:ca:
70:17:f1:0d
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgISAY31OKtJRN0P2/QIeWrTBmjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjQwMjI5MTQxNTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDVjNjg0NjNhM2MyNGZlM2U4Yjg0OWJlNTg4YWMzNzk3NWE5MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cjxB0nClHitGCjDZfE9SmJifrGg
OdrtkiwGiyPshvstRVHeX+9Lt7FyP/KWJQn5E+EPJV+sMfXbL1iYH5A/S/+ZxZ8C
EVqHclkNvfzBrFrG0mRj7EIWUD7y2w1SFBzL/BwrQg16/4ZSlR3v0duupavWm9iJ
kmdWGPwMIpUL4ZHoGbouEEI6f5R2yS5UvLAyv8V3gnBLD+l6qpsscLEmiM2mSfl8
NsXAxzTsofXaTe6Wx5KXvQrdsRtPT/MS8h1UN9yisP/bKYOq+i4qJSwu33/dNa+q
++bQ8CzBeBb0/XEO2VEZ3pQ/HSQeac4LIAMlJhDV5JP46y7nn+oqQOpsCwIDAQAB
o4ICizCCAocwHQYDVR0OBBYEFLRcaEY6PCT+PouEm+WIrDeXWpD9MB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvdEZ4b1JqbzhKUDQtaTRTYjVZaXNONWRha1AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTBuBAIAATBoAwQHBU2A
AwQEJZ3QAwQFJfxAAwQELiRwAwQGLqLAAwQHLvGAAwQEURAAAwQEUsfAAwQDXCuI
MAwDBAFtSyIDBARtSyADBAWNiEADBAayToADBAK5O0QDBAC5VsMDBAa8c8ADBAXU
IuAwGwQCAAIwFQMFAyoAzEADBQAqAUoAAwUAKgMQgDANBgkqhkiG9w0BAQsFAAOC
AQEAG8NpuTvsL+ZP4+8EXwSUj63mSAWKpfjEvESIZ8iXo7LUQ/5uw+laiPWENLyF
m9dqnaMR1VwAFRhQu8qrCMI0smY2YnA4Z6Tgj6OMsmeXRUOW1oSV+1tCVNPd+6NW
nD9hmaQMN+kfhov5hUCJ+10VQGrZ2gds+aUdzKVshQComocGQJCGCHTYj8twa3e/
n3qztC0D0Kh0WeNhdTygahYM1zBgX8DrDTmIm+dybY6xwukL7HCLJpVqTwuW11YT
KBYk9T5IJyrZxmQ7iQ2E5OdboQIXv3x+V8wzHjxcP+Ol1eZrrMvta/fIqrxqfVKB
1mG0hKxVvNhz6SjsoB7KcBfxDQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:07 2025 by rpki-client