Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/X09amW_Gc9OOGtKj1c34qCOaWD0.roa
File: X09amW_Gc9OOGtKj1c34qCOaWD0.roa (raw, json)
Hash identifier: y7BrCz+q2tS0SEeEp/Wq5ABo3fmj5SapLL64PGXv09Y=
Subject key identifier: 5F:4F:5A:99:6F:C6:73:D3:8E:1A:D2:A3:D5:CD:F8:A8:23:9A:58:3D
Certificate issuer: /CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Certificate serial: 018570DE442EEC7626259652690D6221308A
Authority key identifier: C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/X09amW_Gc9OOGtKj1c34qCOaWD0.roa
Signing time: Mon 02 Jan 2023 05:04:52 +0000
ROA not before: Mon 02 Jan 2023 05:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36352
IP address blocks: 5.226.171.0/24 maxlen: 24
5.226.173.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:de:44:2e:ec:76:26:25:96:52:69:0d:62:21:30:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c933481d3fa48710dcb973fdcd29340dedb6229a
Validity
Not Before: Jan 2 05:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f4f5a996fc673d38e1ad2a3d5cdf8a8239a583d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:38:65:ef:10:43:96:fe:0e:50:ef:2d:86:7a:
53:8f:4d:1c:6b:78:f0:9f:55:b0:15:dd:5a:c5:cb:
0f:d5:98:e8:77:50:92:c0:f3:71:3e:f4:b2:cb:f0:
ef:31:68:b2:59:45:a8:6a:48:05:d6:ca:f6:9c:7b:
9d:2c:af:cf:d9:bf:04:8b:eb:2a:c7:4d:69:29:2b:
be:25:54:3b:f2:38:34:b8:29:ee:78:66:db:16:53:
2e:ac:b0:d7:dd:7b:7f:cd:6a:1e:67:0a:41:21:e3:
43:64:e2:f2:ea:21:88:87:b1:fb:9b:09:e1:d8:7d:
b5:7e:c5:2d:a1:58:3e:cd:23:5b:16:a5:17:f4:19:
ff:31:6d:a0:53:db:46:5e:51:40:80:53:7d:42:c7:
1c:39:7e:1f:99:03:cf:c6:1d:96:e9:2d:d0:2a:b5:
86:11:bb:80:31:e9:69:fc:51:16:4a:ce:a0:5f:d8:
92:e7:c2:c5:77:0b:f4:0b:ea:e3:fd:13:cc:88:aa:
ee:bd:a4:93:34:5c:b7:86:f5:49:af:a3:7e:f1:2e:
1b:b5:60:34:58:83:9e:7c:86:b0:e8:0a:a7:2d:da:
ac:c2:a9:7a:72:31:da:5c:db:86:89:fa:08:5f:f3:
f2:34:41:65:10:ed:81:5b:41:ed:bd:3d:bf:3d:39:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4F:5A:99:6F:C6:73:D3:8E:1A:D2:A3:D5:CD:F8:A8:23:9A:58:3D
X509v3 Authority Key Identifier:
keyid:C9:33:48:1D:3F:A4:87:10:DC:B9:73:FD:CD:29:34:0D:ED:B6:22:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTNIHT-khxDcuXP9zSk0De22Ipo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/X09amW_Gc9OOGtKj1c34qCOaWD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/732801-6294-412b-955e-fefd37666741/1/yTNIHT-khxDcuXP9zSk0De22Ipo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.226.171.0/24
5.226.173.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f4:8d:b0:ca:c1:24:56:50:91:c7:f1:0b:f0:83:5b:2c:dc:
e1:06:2a:58:ee:27:62:16:16:18:90:15:60:c9:8a:8d:ac:43:
1d:1b:3c:9d:38:b8:14:24:32:8e:b8:ab:07:84:db:bc:93:58:
70:c9:f4:5d:d7:60:65:c6:ad:e8:50:f6:a3:a5:9c:8a:dd:cf:
48:4c:3a:5c:32:d2:2f:8d:19:6c:5c:4d:71:d2:4a:46:1d:70:
41:0f:8a:3d:6a:dc:e6:98:06:e8:e7:ae:f1:1a:7c:da:eb:bd:
79:d1:f2:ab:ee:a8:17:50:bd:49:dd:b7:30:0d:2a:5e:dc:43:
25:2a:26:47:67:39:db:a1:b8:ce:dc:b6:7a:8f:69:02:ba:75:
c9:9a:fc:31:e5:1d:10:fa:1c:82:59:b9:8e:af:92:78:93:db:
af:25:f9:f7:ab:3e:cf:26:ad:7c:e0:b7:6f:bb:0d:78:25:84:
9e:16:af:2b:f6:7d:9e:e4:f9:a6:95:67:8c:40:02:e2:a5:44:
b5:f6:5a:dd:20:8a:1f:d9:fa:43:9f:4c:3c:a2:b4:a8:53:c3:
2e:19:a8:bc:a8:94:44:64:65:1b:7d:ac:6c:ee:fd:35:22:b1:
00:49:76:3a:8d:9d:5d:8a:97:c9:cf:15:7c:e8:e9:5a:a8:5a:
b1:41:56:cc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw3kQu7HYmJZZSaQ1iITCKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MzM0ODFkM2ZhNDg3MTBkY2I5NzNmZGNkMjkzNDBkZWRi
NjIyOWEwHhcNMjMwMTAyMDUwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjRmNWE5OTZmYzY3M2QzOGUxYWQyYTNkNWNkZjhhODIzOWE1ODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkThl7xBDlv4OUO8thnpTj00ca3jw
n1WwFd1axcsP1Zjod1CSwPNxPvSyy/DvMWiyWUWoakgF1sr2nHudLK/P2b8Ei+sq
x01pKSu+JVQ78jg0uCnueGbbFlMurLDX3Xt/zWoeZwpBIeNDZOLy6iGIh7H7mwnh
2H21fsUtoVg+zSNbFqUX9Bn/MW2gU9tGXlFAgFN9QsccOX4fmQPPxh2W6S3QKrWG
EbuAMelp/FEWSs6gX9iS58LFdwv0C+rj/RPMiKruvaSTNFy3hvVJr6N+8S4btWA0
WIOefIaw6AqnLdqswql6cjHaXNuGifoIX/PyNEFlEO2BW0HtvT2/PTmW+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFF9PWplvxnPTjhrSo9XN+Kgjmlg9MB8GA1UdIwQY
MBaAFMkzSB0/pIcQ3Llz/c0pNA3ttiKaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUt
ZmVmZDM3NjY2NzQxLzEvWDA5YW1XX0djOU9PR3RLajFjMzRxQ09hV0QwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MzI4MDEtNjI5NC00MTJiLTk1NWUtZmVmZDM3NjY2NzQx
LzEveVROSUhULWtoeERjdVhQOXpTazBEZTIySXBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABeKrAwQA
BeKtMA0GCSqGSIb3DQEBCwUAA4IBAQCV9I2wysEkVlCRx/EL8INbLNzhBipY7idi
FhYYkBVgyYqNrEMdGzydOLgUJDKOuKsHhNu8k1hwyfRd12Blxq3oUPajpZyK3c9I
TDpcMtIvjRlsXE1x0kpGHXBBD4o9atzmmAbo567xGnza67150fKr7qgXUL1J3bcw
DSpe3EMlKiZHZznbobjO3LZ6j2kCunXJmvwx5R0Q+hyCWbmOr5J4k9uvJfn3qz7P
Jq184Ldvuw14JYSeFq8r9n2e5PmmlWeMQALipUS19lrdIIof2fpDn0w8orSoU8Mu
Gai8qJREZGUbfaxs7v01IrEASXY6jZ1dipfJzxV86OlaqFqxQVbM
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:25 2024 by rpki-client on console-fra.rpki-client.org