Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/5fwBDfD_QYLkcM0VwHz_wLX76Vs.roa
File: 5fwBDfD_QYLkcM0VwHz_wLX76Vs.roa (raw, json)
Hash identifier: SXRlwwZ4mWlgVSqQozidkdvqVNpMtdQHE0n5qYb/F0Q=
Subject key identifier: E5:FC:01:0D:F0:FF:41:82:E4:70:CD:15:C0:7C:FF:C0:B5:FB:E9:5B
Certificate issuer: /CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Certificate serial: 018FBA95FC47D7C0D42E42CA57AD2A3584C7
Authority key identifier: CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/5fwBDfD_QYLkcM0VwHz_wLX76Vs.roa
Signing time: Mon 27 May 2024 15:05:42 +0000
ROA not before: Mon 27 May 2024 15:05:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212165
IP address blocks: 176.124.192.0/23 maxlen: 23
176.124.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Aug 2024 11:57:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:95:fc:47:d7:c0:d4:2e:42:ca:57:ad:2a:35:84:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cccd583c8d71a2427e0060e3cc924f32dc1a820b
Validity
Not Before: May 27 15:05:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5fc010df0ff4182e470cd15c07cffc0b5fbe95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:6e:1d:61:87:9e:f4:16:35:8c:c0:b7:39:
5c:65:fa:7b:04:08:3d:5e:37:37:a0:58:77:96:98:
82:0d:d5:5c:8f:14:cf:7c:40:1c:8c:60:b2:29:c1:
58:04:07:68:55:38:8f:cb:d3:42:37:81:c8:92:82:
8c:ea:77:18:41:83:3a:d6:55:e5:7c:a1:a7:c1:c6:
e9:a5:38:1b:0e:03:15:bf:88:7d:98:24:6c:7c:9a:
0b:d7:26:73:10:53:23:71:9c:d1:8a:80:cc:5d:09:
bc:5f:a2:59:26:20:89:83:4a:9f:8c:26:01:97:5a:
20:e1:24:e1:29:6e:75:26:3e:57:1f:58:12:ae:f6:
53:ce:ee:35:43:ec:8d:75:79:b9:66:12:fb:37:24:
cd:54:43:b3:f0:c2:b5:30:56:6f:a1:c8:3e:72:b1:
a8:ac:a7:21:96:a9:46:d8:5b:cc:97:86:19:c6:49:
61:d4:86:30:ae:7d:15:63:1a:f2:a2:01:de:89:27:
58:2a:95:c8:3b:c2:c6:d1:bd:74:01:6a:e1:84:7b:
11:a1:c5:40:9d:83:f7:a0:97:b0:f3:a2:f1:0a:1c:
bd:3f:da:b4:c9:f0:f4:cb:fd:d6:2a:55:1e:9f:3b:
28:d0:88:7d:83:b6:e6:19:0c:33:67:03:83:74:ab:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FC:01:0D:F0:FF:41:82:E4:70:CD:15:C0:7C:FF:C0:B5:FB:E9:5B
X509v3 Authority Key Identifier:
keyid:CC:CD:58:3C:8D:71:A2:42:7E:00:60:E3:CC:92:4F:32:DC:1A:82:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zM1YPI1xokJ-AGDjzJJPMtwaggs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/5fwBDfD_QYLkcM0VwHz_wLX76Vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56a02a-c5fd-4119-8c5f-f48502d13948/1/zM1YPI1xokJ-AGDjzJJPMtwaggs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.192.0/23
176.124.222.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:61:a1:85:4e:89:97:56:51:38:6c:13:c0:a4:17:a6:ab:5d:
be:6b:ac:d3:6f:31:6f:1c:56:2f:29:88:30:5b:58:73:88:46:
a5:26:df:ad:c5:fa:7c:99:f0:a0:4e:9b:b6:cd:65:4a:7e:6d:
e9:94:5d:b7:b7:fa:64:67:10:29:dd:f2:a0:62:a9:cb:c2:c7:
89:74:ce:c8:e2:fa:96:e6:27:e1:52:ac:99:88:96:de:bf:ce:
d1:cd:36:42:b2:ff:c3:aa:93:f1:0b:90:e0:16:08:c6:bf:66:
9c:0e:85:a7:2b:0b:c4:4e:db:25:24:f4:5b:10:2a:a4:ac:fb:
55:22:1e:f7:3b:82:b7:a8:38:04:79:61:5c:ad:5c:e4:f5:4f:
25:d9:23:c1:77:a1:fe:3a:e8:21:62:30:80:6e:7e:1e:fd:49:
0b:12:dd:e1:29:6f:52:e5:f9:d1:10:8e:cf:eb:92:61:ea:c9:
7f:82:aa:6c:8f:44:5b:0a:87:38:c3:1a:4a:b1:e3:04:71:bb:
49:06:27:77:cc:ad:3e:26:f2:44:88:99:6d:14:4b:14:2f:4b:
5b:1b:64:5a:ea:10:11:62:f2:bc:e6:c7:3d:f5:43:64:bd:d9:
83:c8:30:27:61:d4:a9:f5:5f:0e:2e:a2:62:40:1e:58:c0:2d:
e4:f9:a6:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+6lfxH18DULkLKV60qNYTHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2Q1ODNjOGQ3MWEyNDI3ZTAwNjBlM2NjOTI0ZjMyZGMx
YTgyMGIwHhcNMjQwNTI3MTUwNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWZjMDEwZGYwZmY0MTgyZTQ3MGNkMTVjMDdjZmZjMGI1ZmJlOTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtStuHWGHnvQWNYzAtzlcZfp7BAg9
Xjc3oFh3lpiCDdVcjxTPfEAcjGCyKcFYBAdoVTiPy9NCN4HIkoKM6ncYQYM61lXl
fKGnwcbppTgbDgMVv4h9mCRsfJoL1yZzEFMjcZzRioDMXQm8X6JZJiCJg0qfjCYB
l1og4SThKW51Jj5XH1gSrvZTzu41Q+yNdXm5ZhL7NyTNVEOz8MK1MFZvocg+crGo
rKchlqlG2FvMl4YZxklh1IYwrn0VYxryogHeiSdYKpXIO8LG0b10AWrhhHsRocVA
nYP3oJew86LxChy9P9q0yfD0y/3WKlUenzso0Ih9g7bmGQwzZwODdKsW9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOX8AQ3w/0GC5HDNFcB8/8C1++lbMB8GA1UdIwQY
MBaAFMzNWDyNcaJCfgBg48ySTzLcGoILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYt
ZjQ4NTAyZDEzOTQ4LzEvNWZ3QkRmRF9RWUxrY00wVndIel93TFg3NlZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81NmEwMmEtYzVmZC00MTE5LThjNWYtZjQ4NTAyZDEzOTQ4
LzEvek0xWVBJMXhva0otQUdEanpKSlBNdHdhZ2dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBsHzAAwQA
sHzeMA0GCSqGSIb3DQEBCwUAA4IBAQBqYaGFTomXVlE4bBPApBemq12+a6zTbzFv
HFYvKYgwW1hziEalJt+txfp8mfCgTpu2zWVKfm3plF23t/pkZxAp3fKgYqnLwseJ
dM7I4vqW5ifhUqyZiJbev87RzTZCsv/DqpPxC5DgFgjGv2acDoWnKwvETtslJPRb
ECqkrPtVIh73O4K3qDgEeWFcrVzk9U8l2SPBd6H+OughYjCAbn4e/UkLEt3hKW9S
5fnREI7P65Jh6sl/gqpsj0RbCoc4wxpKseMEcbtJBid3zK0+JvJEiJltFEsUL0tb
G2Ra6hARYvK85sc99UNkvdmDyDAnYdSp9V8OLqJiQB5YwC3k+aad
-----END CERTIFICATE-----
Generated at Tue Aug 13 14:24:59 2024 by rpki-client on console-ams.rpki-client.org