Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/VlDXx0CiJnfb57OFwW_AFToF8vI.roa
File: VlDXx0CiJnfb57OFwW_AFToF8vI.roa (raw, json)
Hash identifier: Z8J98fx/kBorimh6LKnViUsDQV0I215Jyz2B7IObGtk=
Subject key identifier: 56:50:D7:C7:40:A2:26:77:DB:E7:B3:85:C1:6F:C0:15:3A:05:F2:F2
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 018570DE434E61D4D59E817575E2655C214D
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/VlDXx0CiJnfb57OFwW_AFToF8vI.roa
Signing time: Mon 02 Jan 2023 05:04:52 +0000
ROA not before: Mon 02 Jan 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32875
IP address blocks: 185.48.205.0/24 maxlen: 24
185.48.207.0/24 maxlen: 24
5.226.169.0/24 maxlen: 24
5.226.170.0/24 maxlen: 24
5.226.174.0/24 maxlen: 24
5.226.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:43:4e:61:d4:d5:9e:81:75:75:e2:65:5c:21:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jan 2 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5650d7c740a22677dbe7b385c16fc0153a05f2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:e1:0a:d4:46:60:5d:7e:9e:0f:85:42:d7:
2b:64:14:a5:4c:3b:f3:eb:9e:34:0f:7a:a6:78:c9:
68:12:e6:94:ab:dd:89:a4:a6:96:26:7c:4a:3e:de:
a6:64:b7:c3:f1:cf:03:90:ba:16:2d:09:cd:5b:2e:
92:04:be:6b:1a:07:28:e2:e1:18:88:4d:22:58:66:
73:3f:16:6e:2c:a1:2a:00:ad:74:c5:2a:d0:7d:b3:
5c:98:7c:84:17:bd:b2:af:c5:d4:10:b7:a3:88:db:
19:ed:ef:b3:5e:0a:d0:85:ed:cd:ec:a4:9d:c4:8c:
92:a1:b9:76:3e:ca:b8:63:aa:b2:54:26:a9:44:d5:
e0:dc:2d:43:df:32:80:4e:5b:31:f3:c8:e9:bb:97:
08:20:3d:d2:b8:38:7e:34:27:88:14:81:d5:81:9d:
25:00:97:0c:32:24:52:db:19:70:73:2f:22:b6:4b:
91:10:43:d8:5b:6b:e8:0a:60:cd:bb:b9:7d:4d:ea:
2a:f1:7c:41:b3:35:8c:85:22:85:90:1a:4d:8d:b5:
d6:ed:d4:d0:0b:c3:10:d5:a5:77:d7:01:d0:66:17:
59:97:6e:fd:f5:5b:6d:13:91:5a:05:c8:17:2b:a8:
54:b9:cc:73:f2:06:74:4c:9b:f7:43:7f:e0:93:a9:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:50:D7:C7:40:A2:26:77:DB:E7:B3:85:C1:6F:C0:15:3A:05:F2:F2
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/VlDXx0CiJnfb57OFwW_AFToF8vI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.169.0-5.226.170.255
5.226.174.0/23
185.48.205.0/24
185.48.207.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:67:97:e8:5a:64:86:a7:e6:bc:c3:5f:88:f1:c2:43:70:c8:
38:22:a0:ba:15:18:ab:5b:77:eb:95:eb:df:d6:b1:57:f8:f4:
15:69:8e:37:80:5f:9d:b5:1a:a5:ab:43:f9:f6:3b:9e:2a:1b:
c7:6a:02:91:6e:d6:c4:b8:85:29:68:7d:5b:30:15:be:61:04:
b9:d9:fb:b7:16:c2:ba:11:21:6d:cd:c7:9d:92:ec:28:3a:4a:
b1:3d:4c:56:3e:54:84:40:6d:de:00:0e:50:22:36:fb:00:a7:
89:a0:55:63:1f:e9:3f:9f:e6:4a:13:7f:bb:7c:31:b4:f4:f9:
7a:23:23:cf:b6:d4:e0:d7:f1:d9:cd:59:5a:df:4a:fe:f3:0d:
5c:97:c5:ff:de:e1:2c:3c:6e:d3:ea:f3:c1:bc:a7:2e:18:e8:
f4:b2:84:17:bb:08:23:ab:cd:fe:2e:53:97:a4:e6:21:0d:24:
dd:8f:6f:a9:80:12:9d:4c:64:88:4f:d0:5c:be:63:79:85:1c:
eb:88:f6:3e:7e:dd:c7:cf:7b:81:0a:5e:5d:64:f1:25:e0:aa:
93:ef:80:3f:bb:0f:98:af:04:b4:a7:f8:62:5e:54:62:7c:b2:
6c:e6:04:d2:8a:d2:7b:b7:f2:dd:7e:a6:9f:4c:b2:4b:ec:56:
dd:04:8b:1e
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVw3kNOYdTVnoF1deJlXCFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi
NjIyOWEwHhcNMjMwMTAyMDUwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjUwZDdjNzQwYTIyNjc3ZGJlN2IzODVjMTZmYzAxNTNhMDVmMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9bhCtRGYF1+ng+FQtcrZBSlTDvz
6540D3qmeMloEuaUq92JpKaWJnxKPt6mZLfD8c8DkLoWLQnNWy6SBL5rGgco4uEY
iE0iWGZzPxZuLKEqAK10xSrQfbNcmHyEF72yr8XUELejiNsZ7e+zXgrQhe3N7KSd
xIySobl2Psq4Y6qyVCapRNXg3C1D3zKATlsx88jpu5cIID3SuDh+NCeIFIHVgZ0l
AJcMMiRS2xlwcy8itkuREEPYW2voCmDNu7l9Teoq8XxBszWMhSKFkBpNjbXW7dTQ
C8MQ1aV31wHQZhdZl2799VttE5FaBcgXK6hUucxz8gZ0TJv3Q3/gk6l2VwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFFZQ18dAoiZ32+ezhcFvwBU6BfLyMB8GA1UdIwQY
MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt
ZmVmZDM3NjY2NzQxLzEvVmxEWHgwQ2lKbmZiNTdPRndXX0FGVG9GOHZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx
LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAAF4qkD
BAAF4qoDBAEF4q4DBAC5MM0DBAC5MM8wDQYJKoZIhvcNAQELBQADggEBAF1nl+ha
ZIan5rzDX4jxwkNwyDgioLoVGKtbd+uV69/WsVf49BVpjjeAX521GqWrQ/n2O54q
G8dqApFu1sS4hSlofVswFb5hBLnZ+7cWwroRIW3Nx52S7Cg6SrE9TFY+VIRAbd4A
DlAiNvsAp4mgVWMf6T+f5koTf7t8MbT0+XojI8+21ODX8dnNWVrfSv7zDVyXxf/e
4Sw8btPq88G8py4Y6PSyhBe7CCOrzf4uU5ek5iENJN2Pb6mAEp1MZIhP0Fy+Y3mF
HOuI9j5+3cfPe4EKXl1k8SXgqpPvgD+7D5ivBLSn+GJeVGJ8smzmBNKK0nu38t1+
pp9MskvsVt0Eix4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org