Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/SWovr5KaVv1oOmk50Fx-PZ44Zac.roa
File: SWovr5KaVv1oOmk50Fx-PZ44Zac.roa (raw, json)
Hash identifier: dw68NSpQ/qS2vOZQYr4PvgmPizhncIFU+tTijoCLxTs=
Subject key identifier: 49:6A:2F:AF:92:9A:56:FD:68:3A:69:39:D0:5C:7E:3D:9E:38:65:A7
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 018CC94BDBBFBE21C30DECFA74E8DA0689EE
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/SWovr5KaVv1oOmk50Fx-PZ44Zac.roa
Signing time: Tue 02 Jan 2024 08:30:41 +0000
ROA not before: Tue 02 Jan 2024 08:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203576
IP address blocks: 5.252.98.0/24 maxlen: 32
5.252.97.0/24 maxlen: 32
5.252.96.0/24 maxlen: 32
5.252.99.0/24 maxlen: 32
Validation: Failed, certificate revoked on Thu 25 Jan 2024 17:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:db:bf:be:21:c3:0d:ec:fa:74:e8:da:06:89:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jan 2 08:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496a2faf929a56fd683a6939d05c7e3d9e3865a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5c:a1:11:0c:8d:c6:8b:f5:36:9d:f9:83:31:
c4:03:3f:47:41:13:71:ab:62:b7:c7:ef:cc:a2:4e:
73:b2:64:07:94:be:5f:8b:da:24:c5:2f:b6:01:00:
81:ca:b5:0c:2c:23:b3:27:bc:dd:b1:59:e4:84:3c:
92:f4:04:2a:1a:55:e6:f0:66:bd:ba:bd:a0:82:53:
e8:85:fd:2c:4d:e4:5a:2b:9b:0b:24:e4:9c:21:95:
ee:3e:79:56:51:57:44:bd:34:2d:70:1b:70:9e:8d:
f0:70:83:35:d9:7f:6d:78:0d:28:7c:30:8f:20:9e:
d6:47:c0:4e:6b:ac:f1:65:6b:94:1d:0b:a1:f3:47:
02:a7:ab:e3:fc:fb:17:c5:c5:38:6c:c8:85:26:e3:
2e:69:df:c1:d7:0f:84:2e:df:31:d2:e2:63:ba:a6:
b4:b6:77:66:6e:09:e9:be:5a:81:e1:31:0f:73:63:
64:9b:0c:ea:68:0b:70:26:fe:b4:b4:04:ed:d7:b3:
77:43:76:df:b9:82:71:e2:00:c0:19:7e:99:fd:89:
39:a8:4c:7e:9e:d7:45:e4:82:8a:17:6d:63:97:06:
48:f3:a2:82:00:f0:87:1b:32:8c:23:78:29:68:12:
3e:5b:c4:48:3f:b1:3b:3a:1e:f5:f6:ee:e7:a4:d6:
e4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:2F:AF:92:9A:56:FD:68:3A:69:39:D0:5C:7E:3D:9E:38:65:A7
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/SWovr5KaVv1oOmk50Fx-PZ44Zac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.96.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:52:2a:27:0e:cc:07:08:8d:52:5a:15:5b:38:4d:9d:ca:4f:
1f:f7:83:43:5c:63:1f:5b:1e:ac:0f:1f:ea:70:63:e3:ec:e0:
6c:30:28:59:9f:91:df:18:29:5c:70:fe:c9:d6:a7:88:97:c5:
49:16:aa:e9:3a:ef:62:cb:b3:9b:0f:e4:9b:2b:ac:ff:2b:74:
60:af:3e:37:06:6e:fb:d8:b3:c7:f2:84:c7:a1:6b:4b:58:6e:
f4:f5:a5:19:d2:70:81:a1:aa:42:3c:94:1d:5b:d7:6d:bd:b2:
22:87:18:12:67:63:4a:51:2a:68:46:7b:b9:2d:0b:34:09:2f:
c2:b2:bf:96:46:61:c6:d1:9f:e3:06:20:8f:62:2a:8c:8e:46:
4c:9b:2d:90:30:ef:a2:06:98:dc:48:1c:5e:13:3c:cf:82:e3:
bf:e9:b6:22:04:da:64:33:ed:07:e4:ff:a5:ff:c1:c6:88:7c:
bd:12:6a:4a:19:ea:7f:f1:dc:72:3b:08:f0:c9:b4:0f:9c:52:
9c:ce:8a:40:b7:cc:81:05:1c:c3:3e:73:62:15:3d:2a:69:44:
9a:a1:be:3e:8b:b8:a0:0b:04:15:a0:14:03:fb:1b:4e:44:f3:
f2:b9:94:e6:ba:cc:04:3a:0c:93:ae:79:43:99:44:f6:03:96:
66:c3:4a:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJS9u/viHDDez6dOjaBonuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy
ODlmOWUwHhcNMjQwMTAyMDgzMDQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTZhMmZhZjkyOWE1NmZkNjgzYTY5MzlkMDVjN2UzZDllMzg2NWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFyhEQyNxov1Np35gzHEAz9HQRNx
q2K3x+/Mok5zsmQHlL5fi9okxS+2AQCByrUMLCOzJ7zdsVnkhDyS9AQqGlXm8Ga9
ur2gglPohf0sTeRaK5sLJOScIZXuPnlWUVdEvTQtcBtwno3wcIM12X9teA0ofDCP
IJ7WR8BOa6zxZWuUHQuh80cCp6vj/PsXxcU4bMiFJuMuad/B1w+ELt8x0uJjuqa0
tndmbgnpvlqB4TEPc2NkmwzqaAtwJv60tATt17N3Q3bfuYJx4gDAGX6Z/Yk5qEx+
ntdF5IKKF21jlwZI86KCAPCHGzKMI3gpaBI+W8RIP7E7Oh719u7npNbkqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFElqL6+Smlb9aDppOdBcfj2eOGWnMB8GA1UdIwQY
MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt
NDhiMTY2NGQ0MGQ1LzEvU1dvdnI1S2FWdjFvT21rNTBGeC1QWjQ0WmFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1
LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCBfxgMA0G
CSqGSIb3DQEBCwUAA4IBAQCLUionDswHCI1SWhVbOE2dyk8f94NDXGMfWx6sDx/q
cGPj7OBsMChZn5HfGClccP7J1qeIl8VJFqrpOu9iy7ObD+SbK6z/K3Rgrz43Bm77
2LPH8oTHoWtLWG709aUZ0nCBoapCPJQdW9dtvbIihxgSZ2NKUSpoRnu5LQs0CS/C
sr+WRmHG0Z/jBiCPYiqMjkZMmy2QMO+iBpjcSBxeEzzPguO/6bYiBNpkM+0H5P+l
/8HGiHy9EmpKGep/8dxyOwjwybQPnFKczopAt8yBBRzDPnNiFT0qaUSaob4+i7ig
CwQVoBQD+xtORPPyuZTmuswEOgyTrnlDmUT2A5Zmw0qs
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:17 2024 by rpki-client on console-fra.rpki-client.org