Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/FekKHvOGm0gFVITBtWUs-5ycXGw.roa
File: FekKHvOGm0gFVITBtWUs-5ycXGw.roa (raw, json)
Hash identifier: Tw7W8+Kx18kGvSz6XzGzh8YK558l5fRelTBeH1u1P7s=
Subject key identifier: 15:E9:0A:1E:F3:86:9B:48:05:54:84:C1:B5:65:2C:FB:9C:9C:5C:6C
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018EA2B6AF64C0F797E12A4EA7013CD667C8
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/FekKHvOGm0gFVITBtWUs-5ycXGw.roa
Signing time: Wed 03 Apr 2024 06:47:45 +0000
ROA not before: Wed 03 Apr 2024 06:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12332
IP address blocks: 5.143.112.0/20 maxlen: 20
77.34.0.0/15 maxlen: 24
82.162.0.0/16 maxlen: 18
86.102.0.0/16 maxlen: 18
Validation: Failed, certificate revoked on Wed 03 Apr 2024 08:19:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a2:b6:af:64:c0:f7:97:e1:2a:4e:a7:01:3c:d6:67:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Apr 3 06:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15e90a1ef3869b48055484c1b5652cfb9c9c5c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0f:63:42:f9:0c:73:52:f5:fb:25:75:dd:91:
37:b7:49:f1:d4:21:48:65:bc:48:ee:cd:3a:a6:47:
11:5d:3e:41:8f:1a:a5:0c:dc:fd:e0:0d:4b:69:d9:
54:fb:6f:07:5f:cd:9c:72:a4:5f:a3:39:89:a7:48:
c3:94:46:a8:17:22:04:db:c9:ef:31:9f:5e:f7:6f:
45:b4:49:42:b8:78:31:2f:c3:b0:ac:cd:e4:ec:cb:
8f:7f:25:f6:19:73:27:db:07:ae:a1:50:24:ae:1e:
ae:60:1d:6d:74:6a:49:4d:59:8d:d1:f1:cf:c8:4c:
e4:f8:bd:d1:de:2b:d0:b7:df:0e:fd:71:ce:ad:7d:
56:e5:1d:82:44:5c:23:43:db:90:c4:55:d7:a8:85:
a6:7b:55:63:4e:5b:90:2f:42:33:36:08:15:5e:0b:
09:a4:19:9e:31:12:66:dd:38:86:60:3a:05:5d:dd:
bf:aa:e5:b9:c1:e7:ef:45:aa:78:e5:59:4b:32:8b:
e1:8f:a2:2d:8e:55:1b:b1:30:44:d0:4f:ab:d0:29:
4a:ee:86:40:de:4a:a7:d6:ec:25:d3:9a:2e:80:ca:
2f:15:30:0f:1d:79:93:5a:9e:a7:4d:67:84:56:07:
0e:8e:9c:c4:b3:1b:fa:f8:97:66:ed:b3:85:7b:42:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E9:0A:1E:F3:86:9B:48:05:54:84:C1:B5:65:2C:FB:9C:9C:5C:6C
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/FekKHvOGm0gFVITBtWUs-5ycXGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.143.112.0/20
77.34.0.0/15
82.162.0.0/16
86.102.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0f:a1:34:26:ca:eb:60:32:a2:92:42:00:b4:54:c4:61:34:85:
05:0f:e6:dd:42:c1:ba:2b:88:21:bb:30:b6:1b:9a:26:32:f3:
89:3a:d7:38:9b:5b:17:9e:a0:ff:45:ab:6f:41:c8:e0:76:35:
58:44:87:f2:a6:b5:15:35:a1:5b:3f:22:6a:e7:1c:30:81:55:
03:61:92:88:37:1b:cc:27:22:f5:8b:9e:4c:e6:f5:b6:26:57:
60:1a:c4:54:61:0a:b9:2c:90:39:9d:1c:23:6f:7c:4e:80:4a:
0d:9a:0e:25:dc:04:63:88:e4:c7:c8:61:1d:50:4b:11:9f:b3:
45:73:f4:66:ad:b3:14:7b:8b:77:e3:f6:74:f5:c8:8c:2b:e5:
49:6e:d4:ab:41:8c:d2:c2:8c:26:dd:14:04:95:92:88:c4:96:
5d:ad:ea:8f:25:6a:49:2b:97:d9:03:98:5d:5a:eb:7e:7f:2a:
72:c0:18:13:ef:40:f4:2c:b4:3a:08:be:1e:1d:7b:e9:f8:01:
0b:16:71:73:26:33:a3:aa:19:47:77:4b:1e:d6:d6:55:55:25:
84:95:2f:5f:d0:52:3b:7c:34:d3:79:eb:44:d6:4e:d1:78:58:
23:77:80:53:36:82:5d:fb:7a:03:2f:d2:04:02:a5:b0:f3:fe:
14:78:10:55
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY6itq9kwPeX4SpOpwE81mfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx
ZTZjMDkwHhcNMjQwNDAzMDY0NzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWU5MGExZWYzODY5YjQ4MDU1NDg0YzFiNTY1MmNmYjljOWM1YzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArw9jQvkMc1L1+yV13ZE3t0nx1CFI
ZbxI7s06pkcRXT5BjxqlDNz94A1LadlU+28HX82ccqRfozmJp0jDlEaoFyIE28nv
MZ9e929FtElCuHgxL8OwrM3k7MuPfyX2GXMn2weuoVAkrh6uYB1tdGpJTVmN0fHP
yEzk+L3R3ivQt98O/XHOrX1W5R2CRFwjQ9uQxFXXqIWme1VjTluQL0IzNggVXgsJ
pBmeMRJm3TiGYDoFXd2/quW5wefvRap45VlLMovhj6ItjlUbsTBE0E+r0ClK7oZA
3kqn1uwl05ougMovFTAPHXmTWp6nTWeEVgcOjpzEsxv6+Jdm7bOFe0I09wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBXpCh7zhptIBVSEwbVlLPucnFxsMB8GA1UdIwQY
MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt
NWE4NmMyNzU3YzFlLzEvRmVrS0h2T0dtMGdGVklUQnRXVXMtNXljWEd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl
LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAATAVAwQEBY9wAwMB
TSIDAwBSogMDAFZmMA0GCSqGSIb3DQEBCwUAA4IBAQAPoTQmyutgMqKSQgC0VMRh
NIUFD+bdQsG6K4ghuzC2G5omMvOJOtc4m1sXnqD/RatvQcjgdjVYRIfyprUVNaFb
PyJq5xwwgVUDYZKINxvMJyL1i55M5vW2JldgGsRUYQq5LJA5nRwjb3xOgEoNmg4l
3ARjiOTHyGEdUEsRn7NFc/RmrbMUe4t34/Z09ciMK+VJbtSrQYzSwowm3RQElZKI
xJZdreqPJWpJK5fZA5hdWut+fypywBgT70D0LLQ6CL4eHXvp+AELFnFzJjOjqhlH
d0se1tZVVSWElS9f0FI7fDTTeetE1k7ReFgjd4BTNoJd+3oDL9IEAqWw8/4UeBBV
-----END CERTIFICATE-----
Generated at Thu Apr 17 10:30:01 2025 by rpki-client