Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/5jRZniVMXlVj3fAXw3vqzGjIAr0.roa
File: 5jRZniVMXlVj3fAXw3vqzGjIAr0.roa (raw, json)
Hash identifier: mUJh4UFJX7lMa9bvwLMaleqVTmFJLFjdZaflU8jbJu8=
Subject key identifier: E6:34:59:9E:25:4C:5E:55:63:DD:F0:17:C3:7B:EA:CC:68:C8:02:BD
Certificate issuer: /CN=cbd4719d72d288a73218d8c1a498823333297e25
Certificate serial: 019097271D585D5525B0CB08D9A6FA182A78
Authority key identifier: CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/5jRZniVMXlVj3fAXw3vqzGjIAr0.roa
Signing time: Tue 09 Jul 2024 11:00:41 +0000
ROA not before: Tue 09 Jul 2024 11:00:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50597
IP address blocks: 167.160.5.0/24 maxlen: 24
185.98.157.0/24 maxlen: 24
185.181.52.0/23 maxlen: 24
192.161.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 Jul 2024 08:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:97:27:1d:58:5d:55:25:b0:cb:08:d9:a6:fa:18:2a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd4719d72d288a73218d8c1a498823333297e25
Validity
Not Before: Jul 9 11:00:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e634599e254c5e5563ddf017c37beacc68c802bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:80:0d:d2:2e:8f:19:fe:9a:b0:13:ec:81:
3d:6e:d4:5f:13:b8:b7:6f:fc:04:76:14:14:47:24:
ee:e5:0a:8f:8d:99:2f:88:34:9f:cb:d4:ea:7f:6a:
10:88:c0:d8:bd:a2:6b:b3:b4:d5:5b:60:08:b7:b6:
f7:e2:ab:38:43:7a:e7:33:54:b9:a7:96:18:c6:1c:
69:0c:5e:80:7a:99:b9:55:78:72:95:d0:7d:20:72:
1a:f5:5e:f3:65:cc:2f:65:76:ff:98:f4:fe:89:d4:
5c:9a:9c:ec:cf:87:40:69:e4:f5:1e:f3:4e:fc:4f:
ab:92:fd:a6:e7:77:31:6a:81:80:ba:f2:e9:b8:88:
8d:41:ed:05:8e:1e:ce:c1:c3:c8:cb:e7:9a:87:8d:
9e:92:9d:23:b4:20:05:1c:e7:8d:25:f2:0e:ab:f6:
d1:87:40:3f:76:bc:2b:fe:b7:be:ee:4c:90:d6:72:
e7:ad:8c:31:0a:e7:9d:64:b4:fa:ee:63:05:32:4f:
5e:9b:d5:12:ad:45:2c:14:a1:93:fa:b5:b9:7d:db:
14:fd:d9:70:6f:3a:2c:73:8a:f6:1a:ba:ba:59:97:
3a:06:68:97:a5:5c:5e:c8:e2:44:20:88:bc:8e:c2:
f0:20:1c:cc:0c:83:2a:f3:d9:47:4e:fe:17:7a:80:
3f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:34:59:9E:25:4C:5E:55:63:DD:F0:17:C3:7B:EA:CC:68:C8:02:BD
X509v3 Authority Key Identifier:
keyid:CB:D4:71:9D:72:D2:88:A7:32:18:D8:C1:A4:98:82:33:33:29:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9RxnXLSiKcyGNjBpJiCMzMpfiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/5jRZniVMXlVj3fAXw3vqzGjIAr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc8c0d-f8c3-406c-b79e-b492d6ff483f/1/y9RxnXLSiKcyGNjBpJiCMzMpfiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.160.5.0/24
185.98.157.0/24
185.181.52.0/23
192.161.7.0/24
Signature Algorithm: sha256WithRSAEncryption
76:62:e9:18:a5:4e:76:a2:90:f1:4d:db:a7:81:5a:9b:8c:4f:
36:a6:11:b7:96:18:a4:fa:3e:49:96:1e:81:0f:c6:46:50:1b:
d4:a9:c3:b8:55:5f:58:2c:be:9a:14:37:3d:34:8e:b6:31:e3:
89:b6:d6:b0:c0:4a:06:86:ab:02:7f:a6:1b:58:ed:d4:b2:f6:
a4:16:36:2b:ef:3e:be:02:8c:51:7b:66:94:26:b0:95:02:c2:
e1:ed:b3:47:58:c8:21:57:1a:bc:66:ed:c0:57:98:7d:6b:47:
2e:b4:1c:86:8f:62:e3:1d:13:fa:a4:e5:fb:b5:f3:fb:dd:74:
0b:4a:fa:aa:0f:ca:69:8c:f7:9b:82:ac:c3:2b:c7:f8:3e:2c:
11:b8:cc:09:5f:f2:e7:eb:ad:c1:5e:9a:d7:77:be:a3:6f:af:
64:0e:f3:17:da:3b:10:31:f3:02:97:ef:3a:cd:d6:bb:4b:4b:
cc:7d:10:b9:7e:75:70:25:44:95:82:10:2e:f0:66:77:41:b7:
b6:f2:d5:38:d0:82:1f:b0:5d:ef:f2:c7:9b:fd:cb:fc:51:b9:
48:57:03:64:8e:f9:a5:db:59:f1:0c:58:ef:d2:37:4c:fc:51:
94:21:f8:41:0c:58:53:61:c0:c0:8c:34:53:0f:76:2f:e4:cd:
1a:2d:16:1d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZCXJx1YXVUlsMsI2ab6GCp4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQ3MTlkNzJkMjg4YTczMjE4ZDhjMWE0OTg4MjMzMzMy
OTdlMjUwHhcNMjQwNzA5MTEwMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjM0NTk5ZTI1NGM1ZTU1NjNkZGYwMTdjMzdiZWFjYzY4YzgwMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdqADdIujxn+mrAT7IE9btRfE7i3
b/wEdhQURyTu5QqPjZkviDSfy9Tqf2oQiMDYvaJrs7TVW2AIt7b34qs4Q3rnM1S5
p5YYxhxpDF6Aepm5VXhyldB9IHIa9V7zZcwvZXb/mPT+idRcmpzsz4dAaeT1HvNO
/E+rkv2m53cxaoGAuvLpuIiNQe0Fjh7OwcPIy+eah42ekp0jtCAFHOeNJfIOq/bR
h0A/drwr/re+7kyQ1nLnrYwxCuedZLT67mMFMk9em9USrUUsFKGT+rW5fdsU/dlw
bzosc4r2Grq6WZc6BmiXpVxeyOJEIIi8jsLwIBzMDIMq89lHTv4XeoA/qQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOY0WZ4lTF5VY93wF8N76sxoyAK9MB8GA1UdIwQY
MBaAFMvUcZ1y0oinMhjYwaSYgjMzKX4lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUt
YjQ5MmQ2ZmY0ODNmLzEvNWpSWm5pVk1YbFZqM2ZBWHczdnF6R2pJQXIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzhjMGQtZjhjMy00MDZjLWI3OWUtYjQ5MmQ2ZmY0ODNm
LzEveTlSeG5YTFNpS2N5R05qQnBKaUNNek1wZmlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAp6AFAwQA
uWKdAwQBubU0AwQAwKEHMA0GCSqGSIb3DQEBCwUAA4IBAQB2YukYpU52opDxTdun
gVqbjE82phG3lhik+j5Jlh6BD8ZGUBvUqcO4VV9YLL6aFDc9NI62MeOJttawwEoG
hqsCf6YbWO3UsvakFjYr7z6+AoxRe2aUJrCVAsLh7bNHWMghVxq8Zu3AV5h9a0cu
tByGj2LjHRP6pOX7tfP73XQLSvqqD8ppjPebgqzDK8f4PiwRuMwJX/Ln663BXprX
d76jb69kDvMX2jsQMfMCl+86zda7S0vMfRC5fnVwJUSVghAu8GZ3Qbe28tU40IIf
sF3v8seb/cv8UblIVwNkjvml21nxDFjv0jdM/FGUIfhBDFhTYcDAjDRTD3Yv5M0a
LRYd
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:01:34 2025 by rpki-client