Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/5zyRfoE4t20F0NTgTFVgNS-YVKk.roa
File: 5zyRfoE4t20F0NTgTFVgNS-YVKk.roa (raw, json)
Hash identifier: z86O5YquHliIlfT46YVT/rQJS5klUqpPtr+SjWTqiyo=
Subject key identifier: E7:3C:91:7E:81:38:B7:6D:05:D0:D4:E0:4C:55:60:35:2F:98:54:A9
Certificate issuer: /CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Certificate serial: 018CC5008C0D99F313C11F49F9A172D4C158
Authority key identifier: 8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/5zyRfoE4t20F0NTgTFVgNS-YVKk.roa
Signing time: Mon 01 Jan 2024 12:29:56 +0000
ROA not before: Mon 01 Jan 2024 12:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50304
IP address blocks: 86.111.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 Jan 2025 05:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:8c:0d:99:f3:13:c1:1f:49:f9:a1:72:d4:c1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8abdc26cddc0bbcfa354f11a01e6ff01296b3c7b
Validity
Not Before: Jan 1 12:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e73c917e8138b76d05d0d4e04c5560352f9854a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:56:55:df:00:8b:3c:1f:fd:98:a7:f7:dd:5e:
5f:11:59:32:6b:17:bd:d1:18:1d:17:c8:02:79:43:
03:ad:21:ed:74:d7:ca:79:cc:51:b7:94:75:23:2c:
f5:52:c6:05:8c:b2:24:fb:5c:a3:9f:4a:3a:56:35:
c9:f5:ef:4c:54:fc:cf:ae:91:09:79:3d:9f:0e:14:
f2:90:85:2a:3b:0f:cb:b5:85:3d:2a:19:e6:42:e5:
0d:70:41:a7:47:15:b3:18:ae:90:8e:c3:38:c6:0f:
23:b3:a3:cc:f5:fa:0a:00:a2:52:49:c6:de:c5:84:
83:de:af:07:16:61:f2:ee:eb:7d:9e:2f:a9:51:4d:
eb:3f:b2:16:db:34:14:99:b5:ad:34:0d:5f:40:b5:
85:67:4b:c8:a0:c1:12:bb:9a:63:50:8f:6f:be:65:
e4:32:a0:92:ac:5c:db:f5:93:f0:27:7b:23:78:ba:
16:8a:12:5f:51:07:56:21:d3:a1:1b:86:29:57:14:
53:73:0c:6a:52:c0:29:53:dc:3d:b3:d0:99:df:65:
27:1d:bb:95:e2:7e:17:36:37:a6:37:f3:64:ca:36:
4a:9f:b7:c7:b9:5a:6a:07:8c:07:72:14:94:3c:94:
57:ab:f2:6b:68:2c:d4:b2:a3:64:1c:2c:a5:d2:6a:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3C:91:7E:81:38:B7:6D:05:D0:D4:E0:4C:55:60:35:2F:98:54:A9
X509v3 Authority Key Identifier:
keyid:8A:BD:C2:6C:DD:C0:BB:CF:A3:54:F1:1A:01:E6:FF:01:29:6B:3C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ir3CbN3Au8-jVPEaAeb_ASlrPHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/5zyRfoE4t20F0NTgTFVgNS-YVKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/05c0a3-7378-4542-897d-d3a58b5cb0c0/1/ir3CbN3Au8-jVPEaAeb_ASlrPHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.48.0/23
Signature Algorithm: sha256WithRSAEncryption
61:d6:29:66:79:32:48:c4:2d:e8:47:37:99:2e:98:20:93:81:
8b:88:7a:4a:d8:45:8d:5e:64:7c:fd:bf:78:bf:4f:44:c8:02:
0b:99:d1:07:8d:c5:e4:c9:e4:c2:22:c5:55:73:5d:3e:de:13:
b9:ac:4a:36:17:88:1c:7a:02:f4:c8:64:5d:9c:71:43:78:c2:
ca:76:04:22:fc:a9:ee:e4:04:b0:fa:c6:12:c1:60:5b:9d:f9:
c6:cf:23:14:70:d6:60:f6:b0:4c:d5:45:6e:fa:6c:9f:fb:f6:
ba:95:83:ea:0e:a5:97:79:db:d9:4d:b3:b0:49:fb:ef:e8:71:
33:cc:f1:2c:51:72:d7:c8:d1:c4:80:47:ff:01:bc:72:78:5e:
a3:59:ea:ee:56:99:63:7d:a5:92:a2:5d:be:f2:09:ea:c5:d0:
11:7d:fc:f8:38:ac:b2:6f:a8:be:a0:be:72:3c:14:d1:01:9e:
86:2e:7a:23:bb:b0:43:1c:50:b5:e1:37:f2:ed:3f:89:b5:36:
e6:ac:6d:04:c0:d2:14:57:c5:5c:93:6f:43:d5:c7:d3:08:b2:
05:eb:a8:be:9a:9c:55:1f:00:a7:ee:7d:eb:7d:14:4e:32:15:
9a:26:39:12:96:48:99:0a:14:b7:1c:c6:26:d1:e1:18:34:5a:
ff:5c:09:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAIwNmfMTwR9J+aFy1MFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYmRjMjZjZGRjMGJiY2ZhMzU0ZjExYTAxZTZmZjAxMjk2
YjNjN2IwHhcNMjQwMTAxMTIyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzNjOTE3ZTgxMzhiNzZkMDVkMGQ0ZTA0YzU1NjAzNTJmOTg1NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1ZV3wCLPB/9mKf33V5fEVkyaxe9
0RgdF8gCeUMDrSHtdNfKecxRt5R1Iyz1UsYFjLIk+1yjn0o6VjXJ9e9MVPzPrpEJ
eT2fDhTykIUqOw/LtYU9KhnmQuUNcEGnRxWzGK6QjsM4xg8js6PM9foKAKJSScbe
xYSD3q8HFmHy7ut9ni+pUU3rP7IW2zQUmbWtNA1fQLWFZ0vIoMESu5pjUI9vvmXk
MqCSrFzb9ZPwJ3sjeLoWihJfUQdWIdOhG4YpVxRTcwxqUsApU9w9s9CZ32UnHbuV
4n4XNjemN/NkyjZKn7fHuVpqB4wHchSUPJRXq/JraCzUsqNkHCyl0mpdWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOc8kX6BOLdtBdDU4ExVYDUvmFSpMB8GA1UdIwQY
MBaAFIq9wmzdwLvPo1TxGgHm/wEpazx7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2Qt
ZDNhNThiNWNiMGMwLzEvNXp5UmZvRTR0MjBGME5UZ1RGVmdOUy1ZVktrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8wNWMwYTMtNzM3OC00NTQyLTg5N2QtZDNhNThiNWNiMGMw
LzEvaXIzQ2JOM0F1OC1qVlBFYUFlYl9BU2xyUEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVm8wMA0G
CSqGSIb3DQEBCwUAA4IBAQBh1ilmeTJIxC3oRzeZLpggk4GLiHpK2EWNXmR8/b94
v09EyAILmdEHjcXkyeTCIsVVc10+3hO5rEo2F4gcegL0yGRdnHFDeMLKdgQi/Knu
5ASw+sYSwWBbnfnGzyMUcNZg9rBM1UVu+myf+/a6lYPqDqWXedvZTbOwSfvv6HEz
zPEsUXLXyNHEgEf/AbxyeF6jWeruVpljfaWSol2+8gnqxdARffz4OKyyb6i+oL5y
PBTRAZ6GLnoju7BDHFC14Tfy7T+JtTbmrG0EwNIUV8Vck29D1cfTCLIF66i+mpxV
HwCn7n3rfRROMhWaJjkSlkiZChS3HMYm0eEYNFr/XAkl
-----END CERTIFICATE-----
Generated at Thu Apr 17 09:44:37 2025 by rpki-client