Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/N8SsQcaH3Aq4g2fzQ2OcM3A3q8U.roa
File: N8SsQcaH3Aq4g2fzQ2OcM3A3q8U.roa (raw, json)
Hash identifier: mXiJFo7uJX2YXpdW2rYnrTAe3AXynHY3fHOcd/6fPn4=
Subject key identifier: 37:C4:AC:41:C6:87:DC:0A:B8:83:67:F3:43:63:9C:33:70:37:AB:C5
Certificate issuer: /CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Certificate serial: 018CE8740B4220183B2E3CBB205A340C8B3D
Authority key identifier: 12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/N8SsQcaH3Aq4g2fzQ2OcM3A3q8U.roa
Signing time: Mon 08 Jan 2024 09:42:48 +0000
ROA not before: Mon 08 Jan 2024 09:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39888
IP address blocks: 5.83.41.0/24 maxlen: 24
185.75.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Feb 2024 12:47:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:74:0b:42:20:18:3b:2e:3c:bb:20:5a:34:0c:8b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12694f6945a21d08d30192cfc1a6b780de728e3b
Validity
Not Before: Jan 8 09:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37c4ac41c687dc0ab88367f343639c337037abc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:6f:23:d5:64:0c:60:93:1a:64:cf:4d:1d:
c3:0e:57:50:73:4a:32:f4:59:59:90:c6:c3:8e:76:
a9:7b:d3:91:ae:1b:ad:5b:1e:07:78:84:28:c6:cc:
93:f1:48:8e:ac:9e:14:ae:0a:a1:3e:5e:eb:23:fc:
25:5f:71:b2:d2:37:c4:8a:22:e4:a4:bc:6b:9e:95:
8e:9d:1c:04:a0:45:e5:bf:19:e3:e2:74:64:e9:b4:
19:c3:47:2c:36:b3:92:0b:c1:5a:3a:45:81:3d:96:
1f:76:7a:7e:10:f4:e4:0e:16:75:34:2c:dc:24:47:
0d:01:91:8a:aa:c2:f4:98:74:06:d3:08:81:73:1e:
c4:13:67:04:06:f2:ed:f9:a4:d8:23:45:19:9c:2a:
2d:22:de:0d:80:47:a3:48:87:6b:d4:e3:3c:22:ae:
aa:cc:31:2a:87:e1:7c:fa:de:dc:e9:4f:92:38:cd:
6f:d1:99:26:7e:bf:8c:77:b2:fe:ef:21:31:71:c8:
4c:75:95:dc:e8:ca:e6:1f:49:c8:9d:35:80:c9:e3:
38:a5:b6:bd:a1:d0:22:3f:ed:15:b1:b3:51:04:b3:
69:73:93:09:39:07:7f:c6:4f:65:6b:b5:fc:0a:14:
db:d2:92:ff:0f:85:0f:e4:d9:df:89:88:e4:69:79:
50:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:AC:41:C6:87:DC:0A:B8:83:67:F3:43:63:9C:33:70:37:AB:C5
X509v3 Authority Key Identifier:
keyid:12:69:4F:69:45:A2:1D:08:D3:01:92:CF:C1:A6:B7:80:DE:72:8E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmlPaUWiHQjTAZLPwaa3gN5yjjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/N8SsQcaH3Aq4g2fzQ2OcM3A3q8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/EmlPaUWiHQjTAZLPwaa3gN5yjjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.41.0/24
185.75.53.0/24
Signature Algorithm: sha256WithRSAEncryption
88:5b:65:f1:75:90:ea:5e:4e:a0:43:b1:10:e5:54:43:d8:4c:
b4:62:a2:8e:4a:2d:26:47:a9:52:a7:5c:ea:71:38:00:e6:9b:
93:6f:62:3c:31:8a:02:95:f4:96:02:f9:f3:c1:ea:bb:bc:69:
e9:d4:90:be:c0:b7:7e:5a:69:bd:8a:37:8d:e9:99:3c:6f:68:
ff:a1:da:7e:9c:76:ca:d8:4f:07:d6:cf:bb:06:1d:df:f4:58:
a5:29:a1:31:cd:e5:29:1c:4e:c1:b1:65:d5:c6:f2:4e:9a:89:
fb:47:62:c8:50:27:6f:ce:e5:c8:72:18:1c:29:80:dc:09:4a:
db:f8:49:1e:9b:0c:8a:df:a5:47:92:03:11:36:90:00:7f:8e:
34:b0:1a:16:ef:12:0e:11:51:b0:89:78:ac:f6:a6:c8:27:3c:
67:84:62:90:91:5f:02:96:2f:0e:22:73:3c:9e:64:9d:0e:6a:
b7:d1:81:25:0e:5f:1d:5a:3a:cf:4f:91:41:4a:e5:05:6b:52:
50:c5:a7:f3:32:27:90:c3:55:c0:75:ef:6d:9a:63:1b:1e:e1:
9f:12:2d:52:ca:8c:7c:24:83:e6:d6:ac:93:dc:69:c0:cb:b2:
82:a9:56:f9:2f:59:fb:dc:1c:3f:51:00:ea:aa:4d:6c:c6:81:
15:ee:ee:4c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzodAtCIBg7Ljy7IFo0DIs9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNjk0ZjY5NDVhMjFkMDhkMzAxOTJjZmMxYTZiNzgwZGU3
MjhlM2IwHhcNMjQwMTA4MDk0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzN2M0YWM0MWM2ODdkYzBhYjg4MzY3ZjM0MzYzOWMzMzcwMzdhYmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W5vI9VkDGCTGmTPTR3DDldQc0oy
9FlZkMbDjnape9ORrhutWx4HeIQoxsyT8UiOrJ4UrgqhPl7rI/wlX3Gy0jfEiiLk
pLxrnpWOnRwEoEXlvxnj4nRk6bQZw0csNrOSC8FaOkWBPZYfdnp+EPTkDhZ1NCzc
JEcNAZGKqsL0mHQG0wiBcx7EE2cEBvLt+aTYI0UZnCotIt4NgEejSIdr1OM8Iq6q
zDEqh+F8+t7c6U+SOM1v0Zkmfr+Md7L+7yExcchMdZXc6MrmH0nInTWAyeM4pba9
odAiP+0VsbNRBLNpc5MJOQd/xk9la7X8ChTb0pL/D4UP5NnfiYjkaXlQIQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDfErEHGh9wKuINn80NjnDNwN6vFMB8GA1UdIwQY
MBaAFBJpT2lFoh0I0wGSz8Gmt4Deco47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDkt
NjU5OGI0Y2ViMDY5LzEvTjhTc1FjYUgzQXE0ZzJmelEyT2NNM0EzcThVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNzMwMGYtZGUwNi00ZjdiLWE5MDktNjU5OGI0Y2ViMDY5
LzEvRW1sUGFVV2lIUWpUQVpMUHdhYTNnTjV5ampzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABVMpAwQA
uUs1MA0GCSqGSIb3DQEBCwUAA4IBAQCIW2XxdZDqXk6gQ7EQ5VRD2Ey0YqKOSi0m
R6lSp1zqcTgA5puTb2I8MYoClfSWAvnzweq7vGnp1JC+wLd+Wmm9ijeN6Zk8b2j/
odp+nHbK2E8H1s+7Bh3f9FilKaExzeUpHE7BsWXVxvJOmon7R2LIUCdvzuXIchgc
KYDcCUrb+EkemwyK36VHkgMRNpAAf440sBoW7xIOEVGwiXis9qbIJzxnhGKQkV8C
li8OInM8nmSdDmq30YElDl8dWjrPT5FBSuUFa1JQxafzMieQw1XAde9tmmMbHuGf
Ei1Syox8JIPm1qyT3GnAy7KCqVb5L1n73Bw/UQDqqk1sxoEV7u5M
-----END CERTIFICATE-----
Generated at Thu Feb 15 15:57:09 2024 by rpki-client on console-ams.rpki-client.org