Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/75WLeI7yi1nkM85AHdJQQic6sWA.roa
File: 75WLeI7yi1nkM85AHdJQQic6sWA.roa (raw, json)
Hash identifier: ksCHWbyS0jyDhQTr2nGHSfJFtfCHABlXGZCZZz67F5E=
Subject key identifier: EF:95:8B:78:8E:F2:8B:59:E4:33:CE:40:1D:D2:50:42:27:3A:B1:60
Certificate issuer: /CN=715b885c3b302fd50e6c22647a33dc47727fea95
Certificate serial: 01856D0AD6D4F87627603961D0E62F89448B
Authority key identifier: 71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/75WLeI7yi1nkM85AHdJQQic6sWA.roa
Signing time: Sun 01 Jan 2023 11:15:04 +0000
ROA not before: Sun 01 Jan 2023 11:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206334
IP address blocks: 5.62.53.0/24 maxlen: 24
5.62.52.0/24 maxlen: 24
5.62.54.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:d6:d4:f8:76:27:60:39:61:d0:e6:2f:89:44:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715b885c3b302fd50e6c22647a33dc47727fea95
Validity
Not Before: Jan 1 11:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef958b788ef28b59e433ce401dd25042273ab160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:d0:6e:2d:76:60:8d:93:0b:2c:c9:70:4b:
20:ee:30:f9:a9:9b:93:85:55:1a:30:4c:18:26:87:
be:47:cc:36:2a:27:66:95:6d:5c:74:d2:f1:1f:95:
e1:58:2a:a9:3c:ff:24:68:37:da:f7:bd:69:38:63:
e0:da:77:61:7c:e5:5b:39:87:cd:68:5f:5e:57:96:
e3:74:38:17:31:a6:cb:b6:0b:c7:6b:91:d7:77:e6:
76:44:f2:1a:34:18:df:19:cd:be:74:e1:b9:2a:83:
32:05:4d:65:e6:e2:a1:0d:6e:25:85:37:f9:82:c3:
e4:01:d3:72:4d:d4:44:e2:dd:36:36:48:78:28:66:
8f:19:bf:9b:6e:da:ee:0e:a2:e2:9b:8c:9f:62:12:
08:1d:a8:25:74:a0:91:18:38:2d:b5:51:3e:24:3a:
c4:9e:0e:a0:eb:67:2c:2b:d9:d5:bc:3d:ae:1c:10:
a9:96:0e:4e:e1:7c:08:ad:31:da:ff:f8:c0:21:16:
ce:3d:d1:bc:27:67:89:71:cf:d7:8d:76:b5:da:96:
75:b6:e3:26:4d:ff:01:6c:69:44:a3:cf:dc:9b:1a:
46:d2:26:07:cb:8f:cd:b9:10:df:8b:9e:9f:bc:b1:
c4:e7:b4:8f:ac:23:0a:ad:d2:92:6b:7d:7c:aa:7b:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:95:8B:78:8E:F2:8B:59:E4:33:CE:40:1D:D2:50:42:27:3A:B1:60
X509v3 Authority Key Identifier:
keyid:71:5B:88:5C:3B:30:2F:D5:0E:6C:22:64:7A:33:DC:47:72:7F:EA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVuIXDswL9UObCJkejPcR3J_6pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/75WLeI7yi1nkM85AHdJQQic6sWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f8999c-040a-424a-8896-2a92333f9df6/1/cVuIXDswL9UObCJkejPcR3J_6pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.62.52.0-5.62.54.255
Signature Algorithm: sha256WithRSAEncryption
20:84:34:1a:55:95:14:d6:c3:16:59:5a:c1:15:8d:e1:f1:c7:
ae:15:c7:24:5a:b1:4e:8d:1b:37:56:53:de:54:e1:54:eb:01:
bb:d0:a7:40:20:bc:ec:5a:7d:55:d0:c9:f1:cf:66:d1:f8:25:
76:5c:15:43:4d:d6:89:6c:74:de:4f:9f:f4:35:95:db:7e:ef:
77:9a:67:55:52:f2:d3:b6:1b:22:25:01:1f:f4:5d:8a:5b:d4:
50:e6:4c:8f:f9:29:8e:af:22:28:5c:9b:d6:24:17:ef:af:f7:
8a:2d:38:cf:98:dc:e4:8a:5d:48:9c:0f:fa:01:1b:45:6d:bf:
c9:5b:ed:67:1c:cf:5e:ac:6b:4a:c5:3e:cf:3f:dc:8c:45:f0:
9f:26:b8:2d:65:ac:fd:94:50:7a:51:f6:7e:5f:49:43:7e:7d:
90:59:33:48:37:57:3c:5d:ac:c3:1c:7e:f9:5e:f8:3d:18:4d:
92:82:b7:73:2e:03:71:b9:a4:4d:3b:ba:b6:6c:ac:7f:55:d1:
ca:dc:6c:ef:23:87:fd:6e:33:08:4a:9f:ab:c5:c4:bf:a1:05:
02:7f:c2:78:56:7a:68:c1:b6:61:24:b6:01:26:86:06:70:2a:
1b:e8:20:e4:32:2f:b0:02:20:10:0e:a0:3b:52:cc:6e:0f:f6:
ce:01:f1:1a
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVtCtbU+HYnYDlh0OYviUSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNWI4ODVjM2IzMDJmZDUwZTZjMjI2NDdhMzNkYzQ3NzI3
ZmVhOTUwHhcNMjMwMTAxMTExNTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjk1OGI3ODhlZjI4YjU5ZTQzM2NlNDAxZGQyNTA0MjI3M2FiMTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq87Qbi12YI2TCyzJcEsg7jD5qZuT
hVUaMEwYJoe+R8w2KidmlW1cdNLxH5XhWCqpPP8kaDfa971pOGPg2ndhfOVbOYfN
aF9eV5bjdDgXMabLtgvHa5HXd+Z2RPIaNBjfGc2+dOG5KoMyBU1l5uKhDW4lhTf5
gsPkAdNyTdRE4t02Nkh4KGaPGb+bbtruDqLim4yfYhIIHagldKCRGDgttVE+JDrE
ng6g62csK9nVvD2uHBCplg5O4XwIrTHa//jAIRbOPdG8J2eJcc/XjXa12pZ1tuMm
Tf8BbGlEo8/cmxpG0iYHy4/NuRDfi56fvLHE57SPrCMKrdKSa318qnvc9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFO+Vi3iO8otZ5DPOQB3SUEInOrFgMB8GA1UdIwQY
MBaAFHFbiFw7MC/VDmwiZHoz3Edyf+qVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYt
MmE5MjMzM2Y5ZGY2LzEvNzVXTGVJN3lpMW5rTTg1QUhkSlFRaWM2c1dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9mODk5OWMtMDQwYS00MjRhLTg4OTYtMmE5MjMzM2Y5ZGY2
LzEvY1Z1SVhEc3dMOVVPYkNKa2VqUGNSM0pfNnBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFPjQD
BAAFPjYwDQYJKoZIhvcNAQELBQADggEBACCENBpVlRTWwxZZWsEVjeHxx64VxyRa
sU6NGzdWU95U4VTrAbvQp0AgvOxafVXQyfHPZtH4JXZcFUNN1olsdN5Pn/Q1ldt+
73eaZ1VS8tO2GyIlAR/0XYpb1FDmTI/5KY6vIihcm9YkF++v94otOM+Y3OSKXUic
D/oBG0Vtv8lb7Wccz16sa0rFPs8/3IxF8J8muC1lrP2UUHpR9n5fSUN+fZBZM0g3
VzxdrMMcfvle+D0YTZKCt3MuA3G5pE07urZsrH9V0crcbO8jh/1uMwhKn6vFxL+h
BQJ/wnhWemjBtmEktgEmhgZwKhvoIOQyL7ACIBAOoDtSzG4P9s4B8Ro=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:21 2024 by rpki-client on console-fra.rpki-client.org