Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/sM3nOu3uucSAi2aLx2xz_vrSkYE.roa
File: sM3nOu3uucSAi2aLx2xz_vrSkYE.roa (raw, json)
Hash identifier: I5KJDdU+CSKo30mQ2QFS25JeDFqrTLWfYIWo/KxZ1qs=
Subject key identifier: B0:CD:E7:3A:ED:EE:B9:C4:80:8B:66:8B:C7:6C:73:FE:FA:D2:91:81
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945EB423E6BAC3ADFD2A456C47C795
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/sM3nOu3uucSAi2aLx2xz_vrSkYE.roa
Signing time: Tue 02 Jan 2024 00:30:38 +0000
ROA not before: Tue 02 Jan 2024 00:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209046
IP address blocks: 5.59.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 17 Oct 2024 12:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5e:b4:23:e6:ba:c3:ad:fd:2a:45:6c:47:c7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0cde73aedeeb9c4808b668bc76c73fefad29181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:e2:76:ca:e0:ee:c1:b3:e0:4a:27:0d:a8:a7:
e4:73:da:ec:6f:79:0d:9c:13:df:5d:8a:a8:4a:22:
07:f2:9f:05:4f:7c:b9:39:bc:1c:47:82:5f:9e:b0:
cd:44:b0:b9:40:5c:30:d0:14:4b:ea:2f:b4:42:a3:
93:2c:83:38:15:df:cc:e5:3c:b6:a0:80:34:6c:fa:
58:1b:71:e3:80:3d:bd:fe:a2:73:71:19:ce:a0:50:
44:80:d3:60:d1:c1:f6:cf:ce:48:52:28:1a:12:8b:
f0:f5:11:38:16:07:39:7a:0b:d0:d9:80:fd:14:de:
a6:dd:3d:be:b4:37:29:00:b6:66:b5:35:b8:1d:91:
4c:b1:7e:2c:0c:e0:40:ba:1e:8e:5f:8a:59:de:8e:
51:a6:cb:f3:b8:5f:b8:fe:86:1d:90:c1:1c:16:6c:
47:46:cb:b0:5c:1a:74:86:0a:a7:a2:8e:b6:94:2c:
33:f5:81:bc:86:b1:20:5b:49:0b:3b:d4:9e:97:98:
7c:74:d7:7f:89:7a:f1:5c:6e:94:2e:3f:ff:eb:4b:
ee:62:f4:14:dd:14:8a:df:05:88:61:92:32:cc:45:
f2:20:97:64:8e:97:75:55:b2:59:99:7a:1d:d9:fd:
a8:2d:39:99:ea:64:a1:16:53:d9:d1:5e:4c:12:f8:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CD:E7:3A:ED:EE:B9:C4:80:8B:66:8B:C7:6C:73:FE:FA:D2:91:81
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/sM3nOu3uucSAi2aLx2xz_vrSkYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:6c:59:bd:8e:cf:60:b3:32:e8:5e:61:8e:04:63:49:57:8b:
33:40:46:c7:27:d5:d4:ee:a0:67:8a:68:d2:5b:d2:4a:58:15:
02:ee:be:3a:c6:2c:94:ed:36:78:69:07:db:19:9a:70:1a:25:
3d:8c:5d:fa:9b:c9:ea:18:b6:41:57:cf:7e:ab:c9:c6:e5:8e:
22:41:01:d2:0c:da:23:74:d8:d8:4c:da:96:72:de:65:4d:42:
7b:73:80:c2:ad:d0:61:46:3e:38:26:3f:5a:36:66:6f:49:ee:
10:ea:82:81:a4:dc:b3:57:f7:33:31:ab:7f:c5:a0:d6:15:28:
ef:04:74:3e:bf:a4:95:80:f6:d8:00:ad:60:04:be:48:7c:b0:
3c:53:80:0b:c8:de:84:3d:4f:3f:a2:69:df:3c:e5:c6:4a:a8:
cf:e1:c6:bd:e2:60:0e:cf:6f:61:17:87:91:c2:2d:9f:11:9d:
b8:e4:0a:ea:a0:b2:f2:98:5c:93:6a:88:a3:df:4a:9f:e5:5e:
c6:b5:d4:bb:a4:59:c0:cc:8d:55:46:04:9e:1f:9a:a8:01:39:
19:65:b2:59:69:e4:79:4f:4e:14:eb:8a:9e:da:55:1d:91:e1:
0e:c7:7f:95:b9:f1:4e:6b:76:fa:23:60:21:ab:85:ed:c7:c5:
be:6b:f2:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlF60I+a6w639KkVsR8eVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh
YmVhZjIwHhcNMjQwMTAyMDAzMDM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGNkZTczYWVkZWViOWM0ODA4YjY2OGJjNzZjNzNmZWZhZDI5MTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuJ2yuDuwbPgSicNqKfkc9rsb3kN
nBPfXYqoSiIH8p8FT3y5ObwcR4JfnrDNRLC5QFww0BRL6i+0QqOTLIM4Fd/M5Ty2
oIA0bPpYG3HjgD29/qJzcRnOoFBEgNNg0cH2z85IUigaEovw9RE4Fgc5egvQ2YD9
FN6m3T2+tDcpALZmtTW4HZFMsX4sDOBAuh6OX4pZ3o5RpsvzuF+4/oYdkMEcFmxH
RsuwXBp0hgqnoo62lCwz9YG8hrEgW0kLO9Sel5h8dNd/iXrxXG6ULj//60vuYvQU
3RSK3wWIYZIyzEXyIJdkjpd1VbJZmXod2f2oLTmZ6mShFlPZ0V5MEvhj/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLDN5zrt7rnEgItmi8dsc/760pGBMB8GA1UdIwQY
MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt
OWI5YmNlMTVlMGM2LzEvc00zbk91M3V1Y1NBaTJhTHgyeHpfdnJTa1lFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAtOWI5YmNlMTVlMGM2
LzEvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTs4MA0G
CSqGSIb3DQEBCwUAA4IBAQBPbFm9js9gszLoXmGOBGNJV4szQEbHJ9XU7qBnimjS
W9JKWBUC7r46xiyU7TZ4aQfbGZpwGiU9jF36m8nqGLZBV89+q8nG5Y4iQQHSDNoj
dNjYTNqWct5lTUJ7c4DCrdBhRj44Jj9aNmZvSe4Q6oKBpNyzV/czMat/xaDWFSjv
BHQ+v6SVgPbYAK1gBL5IfLA8U4ALyN6EPU8/omnfPOXGSqjP4ca94mAOz29hF4eR
wi2fEZ245ArqoLLymFyTaoij30qf5V7GtdS7pFnAzI1VRgSeH5qoATkZZbJZaeR5
T04U64qe2lUdkeEOx3+VufFOa3b6I2Ahq4Xtx8W+a/JN
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:33 2025 by rpki-client