Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5eC97Az1Blzuwcxqn_OCKMGPx18.roa
File: 5eC97Az1Blzuwcxqn_OCKMGPx18.roa (raw, json)
Hash identifier: SajWjwx0Ja1HDA1X5XhgZzu7rIqK2BLZhF2Xwz22XYk=
Subject key identifier: E5:E0:BD:EC:0C:F5:06:5C:EE:C1:CC:6A:9F:F3:82:28:C1:8F:C7:5F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E0E226E1F8FE6CA20B737A0017E7E4E10
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5eC97Az1Blzuwcxqn_OCKMGPx18.roa
Signing time: Tue 05 Mar 2024 10:22:01 +0000
ROA not before: Tue 05 Mar 2024 10:22:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:a5c0::/29 maxlen: 29
2a06:a600::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0a:1400::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0e:2240::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0e:f500::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:1380::/29 maxlen: 29
2a0f:1580::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:6d80::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:dd40::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:e0c0::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:eb40::/29 maxlen: 29
2a13:200::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:31:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:22:6e:1f:8f:e6:ca:20:b7:37:a0:01:7e:7e:4e:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 5 10:22:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e5e0bdec0cf5065ceec1cc6a9ff38228c18fc75f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:75:22:d2:21:03:67:72:72:e1:d6:6f:a7:87:
2d:b1:d5:a9:21:a8:e4:b8:8f:00:60:54:34:63:a7:
b6:61:d6:98:80:32:ba:d4:21:22:d3:83:67:a9:bc:
a3:d1:34:af:a5:8b:10:70:8a:a5:20:51:de:e3:c5:
68:e4:d8:a5:ec:fe:67:3e:71:97:00:68:de:76:b9:
16:ec:1a:98:e7:b2:8c:4f:0a:de:b3:56:88:9b:d7:
7b:60:dc:d9:54:40:05:08:56:63:60:04:fc:c2:5f:
8b:15:b5:3a:b0:09:35:90:15:d1:6c:6f:5a:37:ef:
f1:47:35:f1:51:ad:08:81:ba:76:99:3b:60:7d:9f:
fe:52:ae:ae:27:77:8e:48:be:03:02:b1:dd:29:04:
be:42:12:d5:60:a6:c7:33:09:96:5a:75:43:7e:12:
20:ad:a1:a9:9b:fe:0f:85:25:33:38:a6:56:a3:88:
d6:39:dd:00:2f:f6:32:91:88:79:e5:cf:f2:89:38:
f6:48:f9:d1:fc:08:c6:58:1a:4c:f1:98:1f:b9:38:
18:fd:c6:dd:b8:09:04:93:1c:de:6e:83:88:77:cf:
43:8b:72:ff:5b:d3:d5:9e:04:13:78:6e:27:f1:91:
6f:a6:f1:08:44:10:79:35:6d:ad:9c:08:6e:67:03:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E0:BD:EC:0C:F5:06:5C:EE:C1:CC:6A:9F:F3:82:28:C1:8F:C7:5F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5eC97Az1Blzuwcxqn_OCKMGPx18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:a5c0::/29
2a06:a600::/29
2a06:dfc0::/29
2a0a:1400::/29
2a0c:4880::/29
2a0e:2240::/29
2a0e:5a80::/29
2a0e:9b00::/29
2a0e:f500::/29
2a0f:a00::/29
2a0f:1380::/29
2a0f:1580::/29
2a0f:3f80::/29
2a0f:6d80::/29
2a0f:7f00::/29
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:b400::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:dd40::/29
2a0f:de40::/29
2a0f:e0c0::/29
2a0f:e140::/29
2a0f:e4c0::/29
2a0f:e540::/29
2a0f:e5c0::/29
2a0f:e640::/29
2a0f:e9c0::/29
2a0f:ec00::/29
2a0f:ee00::/29
2a0f:fc00::/29
2a10:67c0::/29
2a12:d540::/29
2a12:eb40::/29
2a13:200::/29
Signature Algorithm: sha256WithRSAEncryption
c0:08:6f:ac:23:55:57:71:16:78:7c:64:5b:22:c3:d0:d8:6f:
cc:6f:fd:44:e0:50:9a:42:3d:13:40:2a:ad:3e:6c:4b:8c:b6:
98:b7:b3:23:10:d4:15:a8:d4:0f:0c:83:7e:d9:3e:1e:dd:f0:
b1:25:91:d5:9a:72:02:91:3d:81:1e:e2:78:5c:91:17:14:19:
ed:e9:6c:b8:03:77:3b:43:1f:96:a6:f1:e9:f6:23:99:a8:04:
3f:61:d4:cd:25:27:e0:6b:bb:fc:06:f6:45:fb:66:ee:18:f1:
87:9f:b6:29:5c:86:5f:bf:97:de:40:38:2f:2f:8a:9d:cd:79:
92:c3:f2:36:ea:a6:d1:23:dd:11:39:36:23:ff:e4:a5:46:d4:
0a:0b:5d:28:fe:59:fd:61:2e:c2:ad:aa:a1:54:25:70:69:36:
30:ed:0f:55:2b:eb:37:7d:28:d4:1c:08:42:00:bc:08:f0:5a:
65:5f:4d:69:bc:7e:e2:ee:5e:a1:6f:69:ed:6e:cf:5c:c7:9c:
a9:93:5f:2f:e6:e6:dd:05:20:e4:c2:d3:17:c1:74:9b:40:de:
61:36:7b:12:e0:ff:d5:14:da:19:bb:36:ef:40:9e:e5:99:ff:
5d:3e:61:90:01:83:f5:8d:f4:90:07:87:ab:f6:76:94:a3:44:
15:b8:be:50
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgISAY4OIm4fj+bKILc3oAF+fk4QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMzA1MTAyMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWUwYmRlYzBjZjUwNjVjZWVjMWNjNmE5ZmYzODIyOGMxOGZjNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHUi0iEDZ3Jy4dZvp4ctsdWpIajk
uI8AYFQ0Y6e2YdaYgDK61CEi04Nnqbyj0TSvpYsQcIqlIFHe48Vo5Nil7P5nPnGX
AGjedrkW7BqY57KMTwres1aIm9d7YNzZVEAFCFZjYAT8wl+LFbU6sAk1kBXRbG9a
N+/xRzXxUa0Igbp2mTtgfZ/+Uq6uJ3eOSL4DArHdKQS+QhLVYKbHMwmWWnVDfhIg
raGpm/4PhSUzOKZWo4jWOd0AL/YykYh55c/yiTj2SPnR/AjGWBpM8ZgfuTgY/cbd
uAkEkxzeboOId89Di3L/W9PVngQTeG4n8ZFvpvEIRBB5NW2tnAhuZwOTmQIDAQAB
o4IDJTCCAyEwHQYDVR0OBBYEFOXgvewM9QZc7sHMap/zgijBj8dfMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvNWVDOTdBejFCbHp1d2N4cW5fT0NLTUdQeDE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBOQYIKwYBBQUHAQcBAf8EggEoMIIBJDCCASAEAgACMIIB
GAMFAyoFswADBQMqBqXAAwUDKgamAAMFAyoG38ADBQMqChQAAwUDKgxIgAMFAyoO
IkADBQMqDlqAAwUDKg6bAAMFAyoO9QADBQMqDwoAAwUDKg8TgAMFAyoPFYADBQMq
Dz+AAwUDKg9tgAMFAyoPfwADBQMqD4EAAwUDKg+DAAMFAyoPlgADBQMqD54AAwUD
Kg+iAAMFAyoPtAADBQMqD9pAAwUDKg/awAMFAyoP3UADBQMqD95AAwUDKg/gwAMF
AyoP4UADBQMqD+TAAwUDKg/lQAMFAyoP5cADBQMqD+ZAAwUDKg/pwAMFAyoP7AAD
BQMqD+4AAwUDKg/8AAMFAyoQZ8ADBQMqEtVAAwUDKhLrQAMFAyoTAgAwDQYJKoZI
hvcNAQELBQADggEBAMAIb6wjVVdxFnh8ZFsiw9DYb8xv/UTgUJpCPRNAKq0+bEuM
tpi3syMQ1BWo1A8Mg37ZPh7d8LElkdWacgKRPYEe4nhckRcUGe3pbLgDdztDH5am
8en2I5moBD9h1M0lJ+Bru/wG9kX7Zu4Y8Yeftilchl+/l95AOC8vip3NeZLD8jbq
ptEj3RE5NiP/5KVG1AoLXSj+Wf1hLsKtqqFUJXBpNjDtD1Ur6zd9KNQcCEIAvAjw
WmVfTWm8fuLuXqFvae1uz1zHnKmTXy/m5t0FIOTC0xfBdJtA3mE2exLg/9UU2hm7
Nu9AnuWZ/10+YZABg/WN9JAHh6v2dpSjRBW4vlA=
-----END CERTIFICATE-----
Generated at Thu May 8 05:54:54 2025 by rpki-client