Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/TLUfwgYgFzaG_JNJ8RkyNYupfeM.roa
File: TLUfwgYgFzaG_JNJ8RkyNYupfeM.roa (raw, json)
Hash identifier: i9hVWxHx+cyX9htHZ12caCht1jwgkgyzWu0aw9Ybdu0=
Subject key identifier: 4C:B5:1F:C2:06:20:17:36:86:FC:93:49:F1:19:32:35:8B:A9:7D:E3
Certificate issuer: /CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Certificate serial: 018E754C678964ACCC8F339C8965CBB22571
Authority key identifier: 42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/TLUfwgYgFzaG_JNJ8RkyNYupfeM.roa
Signing time: Mon 25 Mar 2024 11:08:45 +0000
ROA not before: Mon 25 Mar 2024 11:08:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29386
IP address blocks: 5.0.160.0/21 maxlen: 21
5.0.168.0/21 maxlen: 21
5.0.176.0/21 maxlen: 21
5.0.184.0/21 maxlen: 21
Validation: Failed, certificate revoked on Thu 19 Sep 2024 10:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:75:4c:67:89:64:ac:cc:8f:33:9c:89:65:cb:b2:25:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4283696716dbcc360b9a62ef7d84b4d28f958bdd
Validity
Not Before: Mar 25 11:08:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4cb51fc20620173686fc9349f11932358ba97de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:fb:5f:e1:39:ce:82:6e:f0:1c:84:5a:06:
24:28:9a:b2:f6:08:ad:e2:c3:40:a3:22:4b:c1:8c:
7b:ba:96:3b:37:c4:bb:a7:61:0c:93:08:be:ca:28:
8d:3e:38:60:55:43:b3:1a:6f:ee:db:53:69:76:b1:
e8:68:65:b4:f4:d3:4c:ac:96:33:d6:e1:7d:4c:78:
15:32:dd:67:0e:d4:82:2e:a6:2b:c3:30:65:8b:04:
9f:22:8f:0d:7d:69:2c:2d:a4:a2:05:88:1f:b1:d9:
a2:00:d2:32:23:c2:20:f9:d0:48:29:28:e1:f9:15:
b4:45:66:76:f0:c1:d8:29:69:9d:33:bf:d8:40:aa:
a8:80:9d:0e:db:ee:98:5a:85:17:4c:35:c7:e9:c7:
cc:1d:c0:8c:e3:f1:90:2e:ab:8a:cb:65:94:7f:62:
8e:d3:e2:1a:83:41:5a:01:6f:94:c0:90:23:7c:66:
99:47:fd:1c:42:4f:42:db:2c:62:37:b7:e9:33:4b:
e5:88:2a:43:00:b1:6f:35:83:67:de:57:20:5d:37:
4e:c8:ac:f5:45:9c:ab:a2:99:8a:25:e8:6e:3e:48:
43:4d:2d:0a:cc:69:b8:80:e2:8a:f7:31:01:f2:45:
5c:9c:d7:75:8e:7d:42:bd:cb:cc:df:c2:84:8a:04:
30:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:B5:1F:C2:06:20:17:36:86:FC:93:49:F1:19:32:35:8B:A9:7D:E3
X509v3 Authority Key Identifier:
keyid:42:83:69:67:16:DB:CC:36:0B:9A:62:EF:7D:84:B4:D2:8F:95:8B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QoNpZxbbzDYLmmLvfYS00o-Vi90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/TLUfwgYgFzaG_JNJ8RkyNYupfeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/5442ce-48bc-4164-9350-9240d9f75ae6/1/QoNpZxbbzDYLmmLvfYS00o-Vi90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.0.160.0/19
Signature Algorithm: sha256WithRSAEncryption
95:b8:56:5a:27:d3:48:5c:43:4c:93:e4:43:40:bb:09:ed:e3:
dc:63:7a:e6:0c:99:35:03:dd:3f:d7:ab:92:ba:09:eb:32:68:
0a:83:eb:2c:6c:6b:9b:ea:1f:ba:0b:90:82:18:4f:6c:e5:8e:
70:ab:63:0a:18:73:6a:9c:11:da:65:5b:94:af:59:6e:de:26:
c8:ef:5e:60:e4:17:24:61:cf:4b:44:2d:d4:e6:d1:54:b1:26:
6f:f4:fe:5d:13:ae:72:b9:2d:25:67:de:ad:36:f6:cf:f8:7c:
b1:9d:8d:f5:54:5a:1a:a3:a1:ed:36:2d:21:23:16:3c:7f:32:
e0:a1:47:c9:56:2f:e5:43:cb:ae:d5:ab:19:e1:1b:ab:c6:f6:
70:83:f1:c7:c2:d2:70:bd:d9:32:84:19:dc:82:85:c1:2f:8c:
fb:5f:d1:86:9a:0d:f8:cf:c4:9c:17:a1:55:44:2e:7e:5b:2a:
6f:4f:6e:34:00:e8:22:a1:8c:4f:0f:df:a5:4d:37:2d:76:be:
2e:72:a5:7e:01:f8:86:14:af:68:f6:5d:d8:0b:2b:01:7f:a5:
51:1f:f6:33:00:33:54:36:0e:38:aa:56:94:6c:f5:46:13:98:
7a:10:0b:ab:7b:a9:b9:cb:29:c7:21:88:82:48:ab:c1:50:a3:
8a:5a:32:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY51TGeJZKzMjzOciWXLsiVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyODM2OTY3MTZkYmNjMzYwYjlhNjJlZjdkODRiNGQyOGY5
NThiZGQwHhcNMjQwMzI1MTEwODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2I1MWZjMjA2MjAxNzM2ODZmYzkzNDlmMTE5MzIzNThiYTk3ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOb7X+E5zoJu8ByEWgYkKJqy9git
4sNAoyJLwYx7upY7N8S7p2EMkwi+yiiNPjhgVUOzGm/u21NpdrHoaGW09NNMrJYz
1uF9THgVMt1nDtSCLqYrwzBliwSfIo8NfWksLaSiBYgfsdmiANIyI8Ig+dBIKSjh
+RW0RWZ28MHYKWmdM7/YQKqogJ0O2+6YWoUXTDXH6cfMHcCM4/GQLquKy2WUf2KO
0+Iag0FaAW+UwJAjfGaZR/0cQk9C2yxiN7fpM0vliCpDALFvNYNn3lcgXTdOyKz1
RZyropmKJehuPkhDTS0KzGm4gOKK9zEB8kVcnNd1jn1CvcvM38KEigQwFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEy1H8IGIBc2hvyTSfEZMjWLqX3jMB8GA1UdIwQY
MBaAFEKDaWcW28w2C5pi732EtNKPlYvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAt
OTI0MGQ5Zjc1YWU2LzEvVExVZndnWWdGemFHX0pOSjhSa3lOWXVwZmVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS81NDQyY2UtNDhiYy00MTY0LTkzNTAtOTI0MGQ5Zjc1YWU2
LzEvUW9OcFp4YmJ6RFlMbW1MdmZZUzAwby1WaTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFBQCgMA0G
CSqGSIb3DQEBCwUAA4IBAQCVuFZaJ9NIXENMk+RDQLsJ7ePcY3rmDJk1A90/16uS
ugnrMmgKg+ssbGub6h+6C5CCGE9s5Y5wq2MKGHNqnBHaZVuUr1lu3ibI715g5Bck
Yc9LRC3U5tFUsSZv9P5dE65yuS0lZ96tNvbP+HyxnY31VFoao6HtNi0hIxY8fzLg
oUfJVi/lQ8uu1asZ4RurxvZwg/HHwtJwvdkyhBncgoXBL4z7X9GGmg34z8ScF6FV
RC5+WypvT240AOgioYxPD9+lTTctdr4ucqV+AfiGFK9o9l3YCysBf6VRH/YzADNU
Ng44qlaUbPVGE5h6EAure6m5yynHIYiCSKvBUKOKWjJv
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:27:27 2025 by rpki-client