Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/5TooDrWk7M-gWHoLyQWJyPmT1fo.roa
File: 5TooDrWk7M-gWHoLyQWJyPmT1fo.roa (raw, json)
Hash identifier: KUqsl0zNfL0yoGbm079pZl5ziBDWz9Sk5YjH3ylhA/M=
Subject key identifier: E5:3A:28:0E:B5:A4:EC:CF:A0:58:7A:0B:C9:05:89:C8:F9:93:D5:FA
Certificate issuer: /CN=79d10f728d6499a749ae5902e8fa883f1add4517
Certificate serial: 01856D3851BD6E6B42BC291E96FF522DCDBC
Authority key identifier: 79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/5TooDrWk7M-gWHoLyQWJyPmT1fo.roa
Signing time: Sun 01 Jan 2023 12:04:45 +0000
ROA not before: Sun 01 Jan 2023 12:04:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 185.236.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:51:bd:6e:6b:42:bc:29:1e:96:ff:52:2d:cd:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d10f728d6499a749ae5902e8fa883f1add4517
Validity
Not Before: Jan 1 12:04:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e53a280eb5a4eccfa0587a0bc90589c8f993d5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:19:59:a1:cb:4c:c3:ae:e7:9a:f6:f6:8b:
3d:5e:08:3e:c4:0b:56:8d:0b:d2:c0:32:3c:8f:8d:
01:4a:65:9e:e6:01:4e:f9:33:0e:b4:1a:42:38:4f:
48:fa:7f:15:dc:dd:30:e6:15:71:66:75:eb:86:61:
58:8f:c6:f7:ec:d9:e8:99:f3:22:2b:82:82:43:92:
62:68:12:12:4b:2c:0d:67:d7:3b:c9:d5:73:0f:95:
48:57:88:4d:03:6e:1b:ae:69:33:ed:55:e3:8a:11:
62:c8:47:a5:e2:21:25:3a:1e:29:bb:44:41:81:bf:
5f:0b:6a:75:91:a1:58:e9:8c:22:19:c7:1b:86:09:
c5:91:98:39:75:86:3a:6b:63:84:34:47:d2:7b:02:
73:15:2f:ba:cd:46:50:4b:d6:8f:40:21:a7:b2:57:
82:1b:ff:23:4c:2e:2f:36:24:e6:20:7c:72:32:63:
33:d6:ce:a9:fe:fc:f5:3d:f5:4b:37:1e:9c:f5:b9:
68:8c:ec:b6:b8:33:a7:17:8a:b5:76:76:17:5e:58:
7e:a8:c0:55:fa:cc:ff:b0:99:15:e4:fb:1e:37:f6:
a6:c3:d1:d1:dd:d0:18:9f:a4:0b:6b:a2:4e:12:4b:
ee:6d:00:c4:b2:4e:41:99:2c:a9:0f:81:63:77:c1:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3A:28:0E:B5:A4:EC:CF:A0:58:7A:0B:C9:05:89:C8:F9:93:D5:FA
X509v3 Authority Key Identifier:
keyid:79:D1:0F:72:8D:64:99:A7:49:AE:59:02:E8:FA:88:3F:1A:DD:45:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edEPco1kmadJrlkC6PqIPxrdRRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/5TooDrWk7M-gWHoLyQWJyPmT1fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0b2641-bfb5-4e75-a3e8-b9f05e31523a/1/edEPco1kmadJrlkC6PqIPxrdRRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.142.0/24
Signature Algorithm: sha256WithRSAEncryption
38:13:03:52:21:3b:40:73:ef:9b:04:e0:22:21:1f:9f:b3:63:
1d:4f:3f:bf:a5:a2:43:5a:d7:18:55:e9:5a:34:9f:e6:16:80:
0b:e1:8b:ed:17:e3:69:70:b2:dd:1f:a6:60:f3:49:eb:b0:eb:
2c:c5:76:93:f9:d1:d4:fb:25:f9:b0:41:9d:78:6e:2a:f8:b9:
40:92:3e:81:e9:7a:a6:46:3b:55:81:de:e8:29:e6:f6:23:c3:
aa:81:e6:a0:b5:c3:46:19:06:f8:15:87:6d:3f:be:82:b7:9b:
2a:49:d3:cb:1c:2c:56:3b:ec:c4:91:63:75:68:17:fa:38:16:
0f:00:3d:77:49:29:01:3b:9c:c7:39:26:6a:f8:4f:d1:be:7b:
48:aa:4c:9e:65:93:57:b5:87:11:84:ef:16:46:16:bf:df:97:
1f:d2:cd:dd:61:15:b5:c8:81:dd:78:9a:02:6a:6d:70:9f:84:
b6:0a:35:2e:57:9c:52:9f:04:66:bc:85:27:80:55:a1:b1:48:
8b:a3:3f:4b:37:39:a6:1b:af:e1:6b:d5:8c:a7:17:38:45:5a:
70:6c:81:2f:5b:27:7b:1c:3d:f9:bd:0c:fb:d7:c3:27:c8:83:
13:23:fc:b9:73:99:94:f2:7a:24:c2:88:24:a2:64:c6:a1:c3:
3d:d2:bf:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtOFG9bmtCvCkelv9SLc28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDEwZjcyOGQ2NDk5YTc0OWFlNTkwMmU4ZmE4ODNmMWFk
ZDQ1MTcwHhcNMjMwMTAxMTIwNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTNhMjgwZWI1YTRlY2NmYTA1ODdhMGJjOTA1ODljOGY5OTNkNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO4ZWaHLTMOu55r29os9Xgg+xAtW
jQvSwDI8j40BSmWe5gFO+TMOtBpCOE9I+n8V3N0w5hVxZnXrhmFYj8b37NnomfMi
K4KCQ5JiaBISSywNZ9c7ydVzD5VIV4hNA24brmkz7VXjihFiyEel4iElOh4pu0RB
gb9fC2p1kaFY6YwiGccbhgnFkZg5dYY6a2OENEfSewJzFS+6zUZQS9aPQCGnsleC
G/8jTC4vNiTmIHxyMmMz1s6p/vz1PfVLNx6c9blojOy2uDOnF4q1dnYXXlh+qMBV
+sz/sJkV5PseN/amw9HR3dAYn6QLa6JOEkvubQDEsk5BmSypD4Fjd8EU0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOU6KA61pOzPoFh6C8kFicj5k9X6MB8GA1UdIwQY
MBaAFHnRD3KNZJmnSa5ZAuj6iD8a3UUXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgt
YjlmMDVlMzE1MjNhLzEvNVRvb0RyV2s3TS1nV0hvTHlRV0p5UG1UMWZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8wYjI2NDEtYmZiNS00ZTc1LWEzZTgtYjlmMDVlMzE1MjNh
LzEvZWRFUGNvMWttYWRKcmxrQzZQcUlQeHJkUlJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueyOMA0G
CSqGSIb3DQEBCwUAA4IBAQA4EwNSITtAc++bBOAiIR+fs2MdTz+/paJDWtcYVela
NJ/mFoAL4YvtF+NpcLLdH6Zg80nrsOssxXaT+dHU+yX5sEGdeG4q+LlAkj6B6Xqm
RjtVgd7oKeb2I8OqgeagtcNGGQb4FYdtP76Ct5sqSdPLHCxWO+zEkWN1aBf6OBYP
AD13SSkBO5zHOSZq+E/RvntIqkyeZZNXtYcRhO8WRha/35cf0s3dYRW1yIHdeJoC
am1wn4S2CjUuV5xSnwRmvIUngFWhsUiLoz9LNzmmG6/ha9WMpxc4RVpwbIEvWyd7
HD35vQz718MnyIMTI/y5c5mU8nokwogkomTGocM90r84
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:43 2024 by rpki-client on console-ams.rpki-client.org