Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DAVewJ6fOLeEu9jPqILsvQV7Gzs.roa
File: DAVewJ6fOLeEu9jPqILsvQV7Gzs.roa (raw, json)
Hash identifier: MzHMRZZXK51G71Z4nznycsJBlhpmE2UaZ9yYlPdzfYc=
Subject key identifier: 0C:05:5E:C0:9E:9F:38:B7:84:BB:D8:CF:A8:82:EC:BD:05:7B:1B:3B
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018CC64AE0555A7E5028939C88CE88A71D44
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DAVewJ6fOLeEu9jPqILsvQV7Gzs.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60461
IP address blocks: 5.1.74.0/24 maxlen: 32
5.1.81.0/24 maxlen: 24
178.251.228.0/24 maxlen: 32
178.251.228.0/23 maxlen: 32
2a01:367:c1f2::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 14:40:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e0:55:5a:7e:50:28:93:9c:88:ce:88:a7:1d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c055ec09e9f38b784bbd8cfa882ecbd057b1b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f1:4f:14:8d:f4:a2:72:48:93:c2:8d:f3:e3:
10:f8:2d:78:91:80:5a:b7:09:bd:c2:a3:87:e9:ba:
f3:87:e6:83:a2:ed:13:9e:dc:fe:91:e5:79:e6:27:
e5:0f:ce:dd:e8:ea:cc:0c:10:60:27:71:7b:ee:52:
55:f8:bf:22:6a:9d:c4:aa:70:20:44:08:af:8f:0f:
70:ec:2f:2a:aa:38:20:9a:89:9d:a4:87:d9:a5:93:
58:01:c4:5c:55:e9:ad:3f:09:04:b5:c4:db:2f:38:
61:3f:2b:71:12:8c:b3:b3:da:89:0c:09:73:91:12:
b4:74:32:5b:27:ae:47:a5:3d:99:c2:87:4e:dc:2d:
d4:8e:7b:fa:d9:8a:22:5f:30:1a:78:0a:1c:d4:59:
f5:6e:f1:29:d9:60:9d:9b:eb:be:2b:bc:af:a7:d5:
2f:bd:9b:9c:21:e5:62:c8:41:83:e3:8a:01:ff:ca:
a8:e6:0b:ae:00:2d:e3:1e:d2:13:ed:d0:bc:a6:15:
5b:d4:07:57:41:c7:4c:0b:5f:1d:fc:bf:07:da:af:
5b:5e:01:be:3b:64:de:f5:d6:11:ad:a9:a7:0c:be:
8b:c6:80:09:f1:37:e2:f7:56:91:59:c3:f3:3d:9d:
2c:2f:9f:31:71:59:4d:81:11:be:8b:4f:07:31:e6:
fd:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:05:5E:C0:9E:9F:38:B7:84:BB:D8:CF:A8:82:EC:BD:05:7B:1B:3B
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/DAVewJ6fOLeEu9jPqILsvQV7Gzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.74.0/24
5.1.81.0/24
178.251.228.0/23
IPv6:
2a01:367:c1f2::/48
Signature Algorithm: sha256WithRSAEncryption
89:de:49:de:b4:23:ee:b4:0e:4b:b0:a7:6b:51:c7:14:79:56:
b4:1a:91:3a:43:f6:80:13:71:65:fe:26:9c:6a:6a:c0:6d:d3:
05:aa:3c:d7:67:ca:5e:43:8e:08:70:48:b0:52:41:db:e4:e2:
0b:4d:9e:c5:bc:d2:3d:7e:24:90:9a:78:b7:5e:01:97:97:9c:
ba:56:1a:0f:76:39:57:87:6c:c5:81:60:92:33:67:7a:73:dc:
8f:d0:54:a2:9f:5e:7e:3e:5d:fd:a5:fd:91:9d:b0:dc:01:61:
67:17:86:cf:8e:43:9e:13:bc:55:06:5d:8d:d4:2e:ad:da:ba:
6b:3b:67:a1:8b:0f:5a:80:8d:92:20:ce:02:b2:6a:d5:bc:d4:
ed:26:f0:6c:4d:d8:fb:2f:bc:dd:ee:32:fd:ec:87:f4:61:21:
1c:f3:9f:ed:68:bd:14:c7:3d:a2:c4:fe:55:8c:8e:9b:03:09:
15:51:a7:2d:e8:6c:d6:a8:2f:0d:9d:02:af:dc:a0:2b:61:6b:
af:6c:d4:37:b2:78:e6:f6:83:da:e6:b7:3c:cc:b2:ae:d3:3e:
15:69:fc:b4:5f:29:b3:a5:f3:2a:3f:ee:75:f8:9b:97:6e:92:
c2:e6:c4:5d:54:2e:80:03:5a:80:29:97:c3:c8:c6:b5:a7:5e:
81:2f:18:45
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzGSuBVWn5QKJOciM6Ipx1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjQwMTAxMTgzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzA1NWVjMDllOWYzOGI3ODRiYmQ4Y2ZhODgyZWNiZDA1N2IxYjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvFPFI30onJIk8KN8+MQ+C14kYBa
twm9wqOH6brzh+aDou0Tntz+keV55iflD87d6OrMDBBgJ3F77lJV+L8iap3EqnAg
RAivjw9w7C8qqjggmomdpIfZpZNYAcRcVemtPwkEtcTbLzhhPytxEoyzs9qJDAlz
kRK0dDJbJ65HpT2ZwodO3C3Ujnv62YoiXzAaeAoc1Fn1bvEp2WCdm+u+K7yvp9Uv
vZucIeViyEGD44oB/8qo5guuAC3jHtIT7dC8phVb1AdXQcdMC18d/L8H2q9bXgG+
O2Te9dYRramnDL6LxoAJ8Tfi91aRWcPzPZ0sL58xcVlNgRG+i08HMeb9BQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFAwFXsCenzi3hLvYz6iC7L0Fexs7MB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvREFWZXdKNmZPTGVFdTlqUHFJTHN2UVY3R3pzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQABQFKAwQA
BQFRAwQBsvvkMA8EAgACMAkDBwAqAQNnwfIwDQYJKoZIhvcNAQELBQADggEBAIne
Sd60I+60Dkuwp2tRxxR5VrQakTpD9oATcWX+JpxqasBt0wWqPNdnyl5DjghwSLBS
Qdvk4gtNnsW80j1+JJCaeLdeAZeXnLpWGg92OVeHbMWBYJIzZ3pz3I/QVKKfXn4+
Xf2l/ZGdsNwBYWcXhs+OQ54TvFUGXY3ULq3aums7Z6GLD1qAjZIgzgKyatW81O0m
8GxN2PsvvN3uMv3sh/RhIRzzn+1ovRTHPaLE/lWMjpsDCRVRpy3obNaoLw2dAq/c
oCtha69s1DeyeOb2g9rmtzzMsq7TPhVp/LRfKbOl8yo/7nX4m5duksLmxF1ULoAD
WoApl8PIxrWnXoEvGEU=
-----END CERTIFICATE-----
Generated at Fri May 3 16:58:14 2024 by rpki-client on console-ams.rpki-client.org