Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ePiclquqcdE_1moWwFeDyJUV1v0.roa
File: ePiclquqcdE_1moWwFeDyJUV1v0.roa (raw, json)
Hash identifier: zhy8whapOjMsb/Ml/Vnx9VQdsoCdRtF2qSsa4OQeeP0=
Subject key identifier: 78:F8:9C:96:AB:AA:71:D1:3F:D6:6A:16:C0:57:83:C8:95:15:D6:FD
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE6183B9EFC793DC55D350903E45184
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ePiclquqcdE_1moWwFeDyJUV1v0.roa
Signing time: Sun 01 Jan 2023 10:34:56 +0000
ROA not before: Sun 01 Jan 2023 10:34:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.137.69.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
45.91.251.0/24 maxlen: 24
5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
5.253.244.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:18:3b:9e:fc:79:3d:c5:5d:35:09:03:e4:51:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:34:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78f89c96abaa71d13fd66a16c05783c89515d6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:e3:88:f2:57:52:14:f0:55:c7:60:c1:c7:
01:dd:f6:8c:ec:b4:8d:df:62:bb:37:61:64:e8:14:
46:69:51:28:d5:4e:c7:f9:5a:c5:e2:55:3d:af:33:
16:ea:70:cc:61:1d:dd:ed:cc:23:2d:51:78:ed:e3:
4d:8c:de:e8:98:f5:cd:3b:50:97:c0:0c:20:a1:aa:
6a:3b:9f:c2:56:6e:17:22:66:2f:49:a8:76:8e:f4:
6a:19:ae:33:f0:7a:9a:a4:b9:8b:3f:ce:c8:21:bb:
98:26:42:69:29:b4:33:89:7d:82:24:e5:23:ed:29:
0c:c9:dc:68:fd:48:37:6f:40:dd:d2:9e:b3:e2:0b:
bb:72:59:91:00:9b:fb:8e:94:e2:03:0c:c2:d6:5a:
e4:a7:a9:b4:d9:a6:5f:aa:9f:f1:1d:f3:d3:f6:8c:
bc:2c:88:f6:93:f5:fa:88:50:34:3c:58:35:83:7c:
af:a2:1a:f7:44:0d:4c:3d:77:ee:65:eb:d2:97:29:
30:0c:ff:e0:c1:f5:c0:e4:ee:fa:e6:89:bc:79:4c:
d8:a7:ca:a8:a8:95:d9:e3:b1:52:74:fd:e8:6a:ff:
4b:b6:25:e6:07:67:f9:e0:40:45:7c:a7:ab:96:4c:
17:eb:52:6f:80:27:79:41:cb:8b:65:34:69:fc:54:
b8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:9C:96:AB:AA:71:D1:3F:D6:6A:16:C0:57:83:C8:95:15:D6:FD
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ePiclquqcdE_1moWwFeDyJUV1v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.137.69.0/24
45.137.71.0/24
45.145.224.0/23
45.145.227.0/24
185.132.54.0/23
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
28:f4:9b:67:62:23:5e:9c:18:f6:6a:6f:ae:b3:c0:1b:d8:24:
94:d6:f5:47:e6:c1:1b:f3:6f:71:48:62:9f:fe:6f:d3:40:5e:
72:0e:96:25:d4:63:37:30:87:e1:f2:ce:b0:28:9b:0d:9f:aa:
07:c1:53:28:a5:ea:49:03:ff:a6:a3:d2:77:25:e3:7e:98:08:
88:20:6a:43:20:22:88:22:0f:f7:fc:6f:0e:3e:f0:e0:76:af:
37:67:fd:77:cd:4a:5c:c9:c8:8a:67:47:88:6b:6f:50:4d:63:
1c:31:3b:c5:f2:9a:af:aa:40:37:a9:f2:dc:65:08:11:00:ea:
3e:42:db:70:72:d5:22:e0:09:ff:be:36:82:10:31:ac:24:7e:
59:ee:ad:c9:b6:2e:d2:f9:98:69:7e:37:8e:bb:77:26:25:26:
99:85:08:c2:22:09:91:18:37:79:a7:85:4a:10:ef:68:93:96:
a3:bb:62:f3:3d:b8:6b:5f:70:ca:00:06:b5:36:81:46:fd:45:
cf:42:fb:5d:18:40:50:d9:05:79:38:29:7b:08:aa:dc:e3:79:
22:ec:33:b8:8f:ec:d4:07:26:32:66:c2:05:d5:f9:ca:e2:26:
5f:94:4c:b9:3b:08:18:27:70:aa:64:9e:64:0a:7d:8c:3a:2f:
78:a1:1c:e5
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAYVs5hg7nvx5PcVdNQkD5FGEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMwMTAxMTAzNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGY4OWM5NmFiYWE3MWQxM2ZkNjZhMTZjMDU3ODNjODk1MTVkNmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2PjiPJXUhTwVcdgwccB3faM7LSN
32K7N2Fk6BRGaVEo1U7H+VrF4lU9rzMW6nDMYR3d7cwjLVF47eNNjN7omPXNO1CX
wAwgoapqO5/CVm4XImYvSah2jvRqGa4z8HqapLmLP87IIbuYJkJpKbQziX2CJOUj
7SkMydxo/Ug3b0Dd0p6z4gu7clmRAJv7jpTiAwzC1lrkp6m02aZfqp/xHfPT9oy8
LIj2k/X6iFA0PFg1g3yvohr3RA1MPXfuZevSlykwDP/gwfXA5O765om8eUzYp8qo
qJXZ47FSdP3oav9LtiXmB2f54EBFfKerlkwX61JvgCd5QcuLZTRp/FS4VQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFHj4nJarqnHRP9ZqFsBXg8iVFdb9MB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvZVBpY2xxdXFjZEVfMW1vV3dGZUR5SlVWMXYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQCBbT8AwQA
Bf30AwQALVTHAwQALVv7AwQALYNtAwQALYlFAwQALYlHAwQBLZHgAwQALZHjAwQB
uYQ2AwQB1FfWMA0GCSqGSIb3DQEBCwUAA4IBAQAo9JtnYiNenBj2am+us8Ab2CSU
1vVH5sEb829xSGKf/m/TQF5yDpYl1GM3MIfh8s6wKJsNn6oHwVMopepJA/+mo9J3
JeN+mAiIIGpDICKIIg/3/G8OPvDgdq83Z/13zUpcyciKZ0eIa29QTWMcMTvF8pqv
qkA3qfLcZQgRAOo+QttwctUi4An/vjaCEDGsJH5Z7q3Jti7S+ZhpfjeOu3cmJSaZ
hQjCIgmRGDd5p4VKEO9ok5aju2LzPbhrX3DKAAa1NoFG/UXPQvtdGEBQ2QV5OCl7
CKrc43ki7DO4j+zUByYyZsIF1fnK4iZflEy5OwgYJ3CqZJ5kCn2MOi94oRzl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org