Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ml5_rf9cewrvytnT0UcIPkYJvjY.roa
File: ml5_rf9cewrvytnT0UcIPkYJvjY.roa (raw, json)
Hash identifier: rD8D7r+sjqM2DiVIyBwI4uFf62OUSZrAu6sIJQPx3p4=
Subject key identifier: 9A:5E:7F:AD:FF:5C:7B:0A:EF:CA:D9:D3:D1:47:08:3E:46:09:BE:36
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018C5775B49D4C917A9018D9CCC3AA167027
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ml5_rf9cewrvytnT0UcIPkYJvjY.roa
Signing time: Mon 11 Dec 2023 05:59:40 +0000
ROA not before: Mon 11 Dec 2023 05:59:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201150
IP address blocks: 5.202.96.0/22 maxlen: 22
5.202.132.0/22 maxlen: 22
185.180.52.0/22 maxlen: 22
5.202.29.0/24 maxlen: 24
5.202.28.0/24 maxlen: 24
5.202.58.0/23 maxlen: 23
5.202.60.0/22 maxlen: 22
5.202.64.0/23 maxlen: 23
185.169.20.0/22 maxlen: 22
185.169.36.0/22 maxlen: 22
5.202.0.0/19 maxlen: 19
185.103.128.0/22 maxlen: 22
5.202.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:75:b4:9d:4c:91:7a:90:18:d9:cc:c3:aa:16:70:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Dec 11 05:59:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a5e7fadff5c7b0aefcad9d3d147083e4609be36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a6:da:3d:66:3d:e1:a7:0e:fe:e9:51:a0:4e:
ab:a3:8a:7f:44:84:72:20:de:3d:0c:d3:ba:6b:6a:
d1:18:03:e0:a2:d1:ba:9f:8d:e9:1a:3c:af:5a:cb:
07:af:55:75:61:71:1d:fa:50:bb:97:86:c9:61:3a:
2f:b3:cd:16:78:25:6d:28:6f:41:de:32:ad:f3:43:
af:05:22:14:54:78:a3:eb:c8:d7:fc:54:c4:53:88:
3a:33:be:af:43:a3:f6:08:a6:c4:b6:8c:44:01:50:
f0:a7:de:c1:d7:6e:b0:42:5a:75:0e:bb:f3:b1:5b:
a7:4e:90:7b:2b:87:bf:cf:d1:a5:e9:d5:6a:ae:ec:
99:a2:49:b7:88:ad:4f:5e:10:34:16:1f:cb:3e:6a:
e1:cb:3e:43:83:75:5c:bf:48:28:d6:b4:b8:1e:71:
e2:4a:08:77:e2:c6:e5:c1:7e:1b:12:26:fe:ab:44:
0c:31:82:65:54:2f:ea:a8:ae:d3:0d:3c:1e:69:5d:
d8:df:fd:53:d6:e3:68:0f:fb:d0:fd:14:b6:ac:d8:
5b:b0:ba:32:91:5d:1b:42:02:dd:51:50:44:99:a9:
be:f9:63:dc:0c:1c:38:f0:82:24:f7:bc:25:68:7d:
b1:55:2c:81:c3:04:61:7f:37:15:2a:86:1c:27:6a:
0e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5E:7F:AD:FF:5C:7B:0A:EF:CA:D9:D3:D1:47:08:3E:46:09:BE:36
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ml5_rf9cewrvytnT0UcIPkYJvjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.0.0/19
5.202.58.0-5.202.65.255
5.202.96.0/22
5.202.132.0/22
185.103.128.0/22
185.169.20.0/22
185.169.36.0/22
185.180.52.0/22
Signature Algorithm: sha256WithRSAEncryption
36:bb:04:61:c5:1a:c1:74:81:98:14:4b:f1:7a:07:b2:62:3a:
07:75:c3:35:13:9c:32:e5:c7:b0:c0:11:3e:de:5a:6e:ad:a6:
a0:8d:71:05:85:a3:a6:2d:02:56:8c:4d:d6:f0:8e:a4:7a:cb:
0b:78:b1:93:d5:5d:f9:d9:3f:e1:0c:94:27:26:aa:d5:70:50:
4b:77:c7:8e:5a:27:b8:b5:21:91:aa:ed:10:5a:90:db:4c:44:
b7:8f:55:ed:94:ae:8a:79:69:32:e7:e1:e3:87:a5:5a:e8:ff:
36:c0:f9:cd:9a:9b:d3:32:c2:f8:9c:c6:a1:98:76:de:f2:0f:
eb:eb:62:cf:a8:e2:4d:db:36:87:b0:32:d6:51:06:e9:3e:53:
30:1f:ef:cf:29:7c:9a:9f:b4:d8:d5:ea:1d:9a:d1:39:0d:4b:
58:e0:eb:e5:4d:b5:56:f6:66:80:02:89:b8:ee:aa:d6:04:b2:
ea:b0:2d:b8:a4:e2:ff:7f:b6:a8:92:3a:90:0b:34:48:48:9d:
74:0a:21:57:ad:20:2c:f9:cd:be:f3:54:54:ed:0d:13:12:29:
ab:be:2b:ca:fa:3e:5d:e2:7a:23:1d:66:21:51:80:d0:a6:9b:
17:ae:9c:a2:8f:d4:1d:04:43:86:5c:d4:96:1d:85:d2:52:9c:
9f:24:56:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:10 2024 by rpki-client on console-fra.rpki-client.org