Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/dAR7q32Z1aT6Kwb1xnd2J7aLOtg.roa
File: dAR7q32Z1aT6Kwb1xnd2J7aLOtg.roa (raw, json)
Hash identifier: YwfkvbNTSKekAjMJl7y2WKZmrOsjX+NxP/GceC7NlIo=
Subject key identifier: 74:04:7B:AB:7D:99:D5:A4:FA:2B:06:F5:C6:77:76:27:B6:8B:3A:D8
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 01856C4A7039B411CE0400BC003C218FF0C2
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/dAR7q32Z1aT6Kwb1xnd2J7aLOtg.roa
Signing time: Sun 01 Jan 2023 07:44:55 +0000
ROA not before: Sun 01 Jan 2023 07:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47787
IP address blocks: 5.154.174.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:4a:70:39:b4:11:ce:04:00:bc:00:3c:21:8f:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 07:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74047bab7d99d5a4fa2b06f5c6777627b68b3ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:55:8b:82:c7:4a:c2:60:ab:9a:62:72:fb:cc:
c2:cb:ae:06:a6:f0:c3:77:cf:2e:71:92:b5:fa:ac:
df:12:8a:c5:31:62:a9:d5:77:73:9c:92:14:7c:e3:
2d:29:7d:2b:20:17:4a:17:f8:8b:a1:4c:62:37:45:
a2:b2:2b:98:45:f2:82:44:77:75:21:ec:f9:e0:6a:
54:53:e5:88:f5:c4:81:5b:47:17:a5:11:1e:eb:82:
e0:94:19:c6:e5:56:1a:ef:fd:c1:e8:4d:bd:73:36:
7f:0f:63:02:be:9f:10:8e:3f:53:ca:e9:bc:f7:05:
51:4e:a5:8f:65:79:a6:ea:18:c4:6a:ba:1e:0f:2c:
d7:9a:4b:53:60:ae:9d:7c:ce:d1:16:32:71:00:2e:
d0:7c:ef:7a:0c:ba:dc:4b:38:c4:c8:8b:e2:11:79:
82:1a:fe:68:11:8d:17:19:70:db:3d:49:36:fa:75:
15:aa:c0:75:03:99:b4:a5:d4:ba:ea:ac:dc:1a:3b:
dc:06:05:11:ce:10:83:4b:3c:41:10:a3:43:42:11:
6b:7f:99:0e:2e:4a:1d:8b:da:26:9d:8d:1d:9c:37:
df:e3:f4:22:23:7b:e4:25:25:06:9e:53:a7:44:82:
97:74:4a:78:ba:0b:fe:c1:57:eb:e6:74:86:d4:31:
eb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:04:7B:AB:7D:99:D5:A4:FA:2B:06:F5:C6:77:76:27:B6:8B:3A:D8
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/dAR7q32Z1aT6Kwb1xnd2J7aLOtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:90:cb:07:29:c3:af:8f:65:ac:c9:6e:1f:4b:d0:98:5c:50:
b3:63:99:2a:45:94:68:d2:0c:84:5f:ec:97:70:d6:55:1c:7d:
ad:48:7f:9e:a9:63:21:4d:91:8b:53:64:ef:2a:f5:e3:d9:b5:
67:f1:55:81:14:06:b6:f8:3c:be:fd:13:85:f4:00:51:8f:75:
e8:61:e2:8c:10:95:87:70:a0:66:8b:0e:a9:a4:13:8b:45:db:
77:58:ce:39:ca:35:ba:a1:d6:19:87:6e:b5:de:18:b6:ed:de:
92:f9:14:57:c8:3d:08:0e:7f:f9:2b:6f:f6:ea:6c:b9:a1:55:
81:11:97:6b:16:d7:aa:b7:97:c9:c1:46:c7:72:96:f7:06:42:
f1:52:f6:8a:ad:aa:48:c3:0d:33:28:65:7c:84:55:f8:72:f1:
d9:a8:fd:4e:ab:6e:fa:6e:97:11:87:cb:28:5b:80:62:cd:44:
76:d2:1e:5e:fd:75:49:b2:70:29:15:57:bf:ae:74:92:e2:41:
6f:75:6c:13:2e:bb:f5:df:06:51:97:ca:4b:d6:34:d4:c8:b2:
18:ff:15:ff:32:60:e9:a5:57:79:c2:6c:4f:94:04:b8:93:60:
cf:15:da:07:85:80:d6:19:57:13:9f:e5:de:d2:7a:17:69:48:
1a:3d:76:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsSnA5tBHOBAC8ADwhj/DCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjMwMTAxMDc0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDA0N2JhYjdkOTlkNWE0ZmEyYjA2ZjVjNjc3NzYyN2I2OGIzYWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1WLgsdKwmCrmmJy+8zCy64GpvDD
d88ucZK1+qzfEorFMWKp1XdznJIUfOMtKX0rIBdKF/iLoUxiN0WisiuYRfKCRHd1
Iez54GpUU+WI9cSBW0cXpREe64LglBnG5VYa7/3B6E29czZ/D2MCvp8Qjj9Tyum8
9wVRTqWPZXmm6hjEaroeDyzXmktTYK6dfM7RFjJxAC7QfO96DLrcSzjEyIviEXmC
Gv5oEY0XGXDbPUk2+nUVqsB1A5m0pdS66qzcGjvcBgURzhCDSzxBEKNDQhFrf5kO
Lkodi9omnY0dnDff4/QiI3vkJSUGnlOnRIKXdEp4ugv+wVfr5nSG1DHrswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHQEe6t9mdWk+isG9cZ3die2izrYMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvZEFSN3EzMloxYVQ2S3diMXhuZDJKN2FMT3RnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZquMA0G
CSqGSIb3DQEBCwUAA4IBAQDBkMsHKcOvj2WsyW4fS9CYXFCzY5kqRZRo0gyEX+yX
cNZVHH2tSH+eqWMhTZGLU2TvKvXj2bVn8VWBFAa2+Dy+/ROF9ABRj3XoYeKMEJWH
cKBmiw6ppBOLRdt3WM45yjW6odYZh2613hi27d6S+RRXyD0IDn/5K2/26my5oVWB
EZdrFteqt5fJwUbHcpb3BkLxUvaKrapIww0zKGV8hFX4cvHZqP1Oq276bpcRh8so
W4BizUR20h5e/XVJsnApFVe/rnSS4kFvdWwTLrv13wZRl8pL1jTUyLIY/xX/MmDp
pVd5wmxPlAS4k2DPFdoHhYDWGVcTn+Xe0noXaUgaPXY4
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org