Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/330ETVTk6JK6r0ssNHU-ySPdMuI.roa
File: 330ETVTk6JK6r0ssNHU-ySPdMuI.roa (raw, json)
Hash identifier: N7QLropmJ1ySkxfqs7GmHem4ypjIM2VBiiPeavdZ8eU=
Subject key identifier: DF:7D:04:4D:54:E4:E8:92:BA:AF:4B:2C:34:75:3E:C9:23:DD:32:E2
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 018BF27C6950A7C391F5B6FC993FCA04FC4C
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/330ETVTk6JK6r0ssNHU-ySPdMuI.roa
Signing time: Tue 21 Nov 2023 15:25:21 +0000
ROA not before: Tue 21 Nov 2023 15:25:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198411
IP address blocks: 5.226.16.0/20 maxlen: 24
5.226.16.0/21 maxlen: 24
45.157.56.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f2:7c:69:50:a7:c3:91:f5:b6:fc:99:3f:ca:04:fc:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Nov 21 15:25:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df7d044d54e4e892baaf4b2c34753ec923dd32e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c4:c6:5e:e5:41:5d:04:92:ce:25:fd:69:46:
b6:69:18:ce:08:74:a1:04:22:27:fa:a0:04:a2:e0:
02:ac:d4:69:b4:7c:07:d4:aa:f5:e1:d8:cb:2f:56:
4f:57:a8:d5:52:fa:ce:ba:39:1d:53:66:67:14:e1:
9e:a4:dc:4e:1f:4c:ef:f1:1e:dc:41:74:ad:00:79:
5d:e6:63:b2:43:51:81:15:be:b7:5c:c4:b8:91:04:
21:63:19:1e:57:03:a5:9c:00:31:16:f7:f9:45:32:
15:31:18:b1:64:4c:6d:2a:03:51:f5:03:e2:89:ef:
cf:4b:e8:64:a3:24:7c:ad:f1:5c:c4:3b:47:df:fd:
73:12:7e:d7:08:1e:32:3e:7c:5e:75:b9:69:28:ba:
0d:1d:f9:1b:88:a1:7e:8c:96:8b:11:d4:25:47:e5:
61:bf:50:d8:df:c1:a6:04:59:73:71:a5:9a:14:df:
ed:58:94:c6:97:24:43:8d:02:e7:c6:b5:98:f3:ea:
45:2a:5b:1f:6c:cd:45:75:f4:80:ce:db:d3:ad:cd:
cf:7c:e2:a4:78:ec:de:22:bb:70:3d:d7:33:8b:80:
e9:99:c7:5a:82:92:7d:2f:b5:7e:32:1c:b8:48:77:
4b:f3:cd:c3:a6:4e:d9:db:60:b5:d4:2c:8c:b6:21:
ba:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7D:04:4D:54:E4:E8:92:BA:AF:4B:2C:34:75:3E:C9:23:DD:32:E2
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/330ETVTk6JK6r0ssNHU-ySPdMuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.16.0/20
45.157.56.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ab:b7:5a:4e:42:f2:39:2f:bb:96:81:7f:e4:aa:a3:34:b4:
89:1a:ca:03:45:e5:88:21:aa:3e:22:b5:50:c4:71:e8:7e:a6:
cd:cd:d0:39:0d:ad:f6:6f:68:ff:7e:3b:d5:a3:59:f0:f3:4c:
81:92:cc:ec:96:b9:09:fa:2e:f7:be:2b:55:7e:85:77:62:fc:
27:72:e5:e6:75:a4:18:dd:ba:53:ec:3a:99:ef:a8:d4:62:66:
24:91:c0:c8:a6:64:f7:36:e7:31:8b:9a:53:06:05:1f:cb:08:
a8:42:a8:ab:f9:97:25:1c:15:b2:a5:ff:89:c5:bc:b2:62:e3:
42:ae:2b:2e:71:bd:d2:1e:a4:00:40:d4:16:04:16:a1:78:c4:
f7:4c:66:52:51:3b:aa:9e:72:61:69:ec:c1:57:6f:d2:d6:f6:
e4:1d:a2:de:22:f7:b7:fe:17:36:ac:39:e7:c3:ad:01:e5:30:
75:5e:d7:da:c3:8c:10:8c:af:36:5f:00:b8:27:03:4e:25:0c:
5e:70:a6:95:92:c3:6a:b0:57:f1:89:d3:60:77:4f:18:27:5d:
27:29:3d:92:65:fb:55:8e:c1:26:9a:76:e1:7d:08:2e:5c:9e:
3f:55:af:b3:74:df:2e:3a:c1:ec:22:88:1c:b6:13:bc:ae:91:
cb:2f:cf:2a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYvyfGlQp8OR9bb8mT/KBPxMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjMxMTIxMTUyNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjdkMDQ0ZDU0ZTRlODkyYmFhZjRiMmMzNDc1M2VjOTIzZGQzMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8TGXuVBXQSSziX9aUa2aRjOCHSh
BCIn+qAEouACrNRptHwH1Kr14djLL1ZPV6jVUvrOujkdU2ZnFOGepNxOH0zv8R7c
QXStAHld5mOyQ1GBFb63XMS4kQQhYxkeVwOlnAAxFvf5RTIVMRixZExtKgNR9QPi
ie/PS+hkoyR8rfFcxDtH3/1zEn7XCB4yPnxedblpKLoNHfkbiKF+jJaLEdQlR+Vh
v1DY38GmBFlzcaWaFN/tWJTGlyRDjQLnxrWY8+pFKlsfbM1FdfSAztvTrc3PfOKk
eOzeIrtwPdczi4DpmcdagpJ9L7V+Mhy4SHdL883Dpk7Z22C11CyMtiG6SwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN99BE1U5OiSuq9LLDR1Pskj3TLiMB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvMzMwRVRWVGs2Sks2cjBzc05IVS15U1BkTXVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEBeIQAwQC
LZ04MA0GCSqGSIb3DQEBCwUAA4IBAQCHq7daTkLyOS+7loF/5KqjNLSJGsoDReWI
Iao+IrVQxHHofqbNzdA5Da32b2j/fjvVo1nw80yBkszslrkJ+i73vitVfoV3Yvwn
cuXmdaQY3bpT7DqZ76jUYmYkkcDIpmT3Nucxi5pTBgUfywioQqir+ZclHBWypf+J
xbyyYuNCrisucb3SHqQAQNQWBBaheMT3TGZSUTuqnnJhaezBV2/S1vbkHaLeIve3
/hc2rDnnw60B5TB1Xtfaw4wQjK82XwC4JwNOJQxecKaVksNqsFfxidNgd08YJ10n
KT2SZftVjsEmmnbhfQguXJ4/Va+zdN8uOsHsIogcthO8rpHLL88q
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org