Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/voMpEe21KIBHfpMD3Reps2UZeFQ.roa
File: voMpEe21KIBHfpMD3Reps2UZeFQ.roa (raw, json)
Hash identifier: GzhCcyIHEDq24sbCqrsF3QKmiHBSg9aygbcCfUTv8l8=
Subject key identifier: BE:83:29:11:ED:B5:28:80:47:7E:93:03:DD:17:A9:B3:65:19:78:54
Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial: 01933E73651AF1599EFCA9D68EB8FEDC4E61
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/voMpEe21KIBHfpMD3Reps2UZeFQ.roa
Signing time: Mon 18 Nov 2024 08:46:10 +0000
ROA not before: Mon 18 Nov 2024 08:46:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42705
IP address blocks: 5.11.16.0/22 maxlen: 22
5.11.16.0/23 maxlen: 23
5.11.16.0/24 maxlen: 24
5.11.17.0/24 maxlen: 24
5.11.18.0/23 maxlen: 23
5.11.18.0/24 maxlen: 24
5.11.21.0/24 maxlen: 24
5.11.22.0/24 maxlen: 24
5.11.24.0/21 maxlen: 21
5.11.24.0/22 maxlen: 22
5.11.24.0/23 maxlen: 23
5.11.24.0/24 maxlen: 24
5.11.25.0/24 maxlen: 24
5.11.26.0/23 maxlen: 23
5.11.26.0/24 maxlen: 24
5.11.27.0/24 maxlen: 24
5.11.28.0/23 maxlen: 23
5.11.29.0/24 maxlen: 24
80.251.10.0/24 maxlen: 24
80.251.11.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 07:57:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:73:65:1a:f1:59:9e:fc:a9:d6:8e:b8:fe:dc:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
Validity
Not Before: Nov 18 08:46:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=be832911edb52880477e9303dd17a9b365197854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1b:cb:55:13:42:0c:f9:a4:f2:df:28:91:3b:
f7:48:44:ca:c5:f0:81:e1:03:97:ee:86:a4:bd:cf:
9d:27:ee:17:30:5d:8f:05:88:4b:11:b5:99:a0:ec:
96:21:a8:94:93:cd:3b:25:0c:74:64:69:f4:2f:f1:
aa:5e:98:ce:aa:f3:20:2f:3e:8b:53:3e:d1:8c:e7:
0c:98:aa:89:2c:b8:61:c0:48:25:f1:9b:c1:d0:c4:
9f:57:73:5f:6e:34:2b:a5:25:70:8b:d8:2b:30:d4:
6f:6d:87:6b:eb:b0:25:e3:98:82:64:a1:25:ad:5a:
09:2b:9d:fe:20:df:e3:23:cc:f6:5f:c5:cf:9c:43:
11:41:7c:01:03:6b:49:9c:91:64:4c:f9:f3:ff:73:
39:a1:cf:f3:9b:53:d2:81:70:f8:90:44:ac:56:28:
36:27:38:cd:ae:fd:77:b1:cd:d9:34:15:3a:6c:3a:
25:93:cc:0c:65:59:13:8a:61:7b:05:9b:1c:76:a7:
da:ae:17:bb:88:d2:fa:9c:a1:75:8f:78:61:b6:0b:
af:96:2a:ee:96:db:af:5c:95:40:bf:83:ad:a4:f9:
e0:9d:3b:b0:a7:22:98:18:d3:d2:05:62:ef:0c:b3:
8d:82:22:42:a7:e9:8b:d5:6c:44:84:34:1d:6e:4a:
68:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:83:29:11:ED:B5:28:80:47:7E:93:03:DD:17:A9:B3:65:19:78:54
X509v3 Authority Key Identifier:
keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/voMpEe21KIBHfpMD3Reps2UZeFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.11.16.0/22
5.11.21.0-5.11.22.255
5.11.24.0/21
80.251.10.0/23
Signature Algorithm: sha256WithRSAEncryption
14:f3:05:af:c0:2c:a2:e5:46:7e:0e:ea:84:0f:b6:93:99:ee:
29:aa:14:bf:14:b8:2b:9c:1b:28:05:0f:fc:6d:57:6c:3e:f0:
32:2f:72:6c:84:5f:b3:ec:8a:ab:5e:25:12:9b:c6:05:53:3e:
f6:ec:ac:2f:ea:ba:f2:92:a0:74:85:dc:69:4e:e6:49:f6:c8:
4d:84:03:db:f9:5c:1a:a0:ac:5d:cb:ae:a9:cf:e5:5f:22:f1:
0f:95:f1:98:0a:37:48:aa:5c:2f:77:34:4c:61:41:08:c7:a7:
01:22:1f:7c:ce:aa:28:42:b2:d9:1e:f9:1b:a1:80:a7:36:e7:
52:80:bd:55:1c:5d:75:53:2b:ee:eb:92:f2:64:65:5f:8d:65:
74:d5:0c:92:dd:e7:a0:c7:3c:01:92:c0:d7:e7:97:f2:7d:42:
30:45:ed:71:d8:26:79:66:0f:bb:40:85:de:0b:35:ba:c9:23:
93:b6:45:38:d8:9b:69:ad:b3:80:03:03:90:21:93:96:c3:bc:
da:55:ee:1d:47:25:6e:76:24:28:eb:cd:a5:78:da:4f:dd:21:
af:cc:84:1a:c1:19:04:55:46:31:dc:43:47:eb:91:a4:57:75:
db:90:57:f3:82:b7:d3:c2:a6:32:bb:d0:c0:f9:99:a2:9a:c1:
f8:1d:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 19 09:21:15 2024 by rpki-client on console-fra.rpki-client.org