Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5amjpBThJHZe_JplU7V9iH9xHvY.roa
File: 5amjpBThJHZe_JplU7V9iH9xHvY.roa (raw, json)
Hash identifier: fI2MDSdYAGbXWcKNs/aS4X08iGCAxQPqtzU7779kJ84=
Subject key identifier: E5:A9:A3:A4:14:E1:24:76:5E:FC:9A:65:53:B5:7D:88:7F:71:1E:F6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B6B1F9F0DA5E1669438B17905C8C9CD21
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5amjpBThJHZe_JplU7V9iH9xHvY.roa
Signing time: Thu 26 Oct 2023 08:35:16 +0000
ROA not before: Thu 26 Oct 2023 08:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 194.55.227.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:1f:9f:0d:a5:e1:66:94:38:b1:79:05:c8:c9:cd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 08:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5a9a3a414e124765efc9a6553b57d887f711ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:cc:9a:aa:c0:8b:10:27:77:fd:4d:fd:a8:
50:44:7b:42:b0:48:4f:66:75:65:b4:d5:84:11:33:
34:0f:28:ae:ef:9f:bd:56:78:e9:86:1f:e5:49:9f:
b8:20:a5:ff:dd:2b:37:fc:6e:1d:5d:e9:1d:81:96:
9e:7d:9b:47:0c:00:d5:1d:a8:16:a8:33:ea:37:0f:
18:89:e2:d7:ed:d0:04:72:41:40:17:0e:eb:34:37:
29:43:7f:ed:a2:c3:ec:25:e4:84:23:48:bf:d4:f5:
19:00:f4:b0:bc:2f:fb:1a:9d:94:70:88:2d:10:ae:
ec:e8:61:f4:47:f5:00:34:00:95:7e:0e:f5:64:f9:
ca:cb:b9:b0:c2:e9:1f:6d:8c:bd:cc:0c:8a:03:67:
56:88:98:e7:76:98:d9:cc:cc:ae:d6:c3:fc:ca:5c:
98:be:ed:d3:45:f4:68:7f:d5:4c:92:d1:17:4f:26:
37:cf:45:41:40:1e:84:70:12:cc:2c:e5:ad:c7:71:
96:b5:49:cd:00:7b:c8:26:17:48:1d:e8:6b:4d:ad:
04:64:7f:5c:a0:13:02:7f:e6:47:35:fa:b7:e3:7e:
1e:6b:5e:63:b8:51:44:27:08:9a:b3:df:b1:38:ff:
ef:66:ba:f5:93:8b:54:f1:ca:81:88:ee:73:4b:46:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A9:A3:A4:14:E1:24:76:5E:FC:9A:65:53:B5:7D:88:7F:71:1E:F6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5amjpBThJHZe_JplU7V9iH9xHvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
45.88.88.0/24
194.55.227.0/24
Signature Algorithm: sha256WithRSAEncryption
92:8b:04:d1:d4:ac:14:25:45:a0:36:9b:7b:39:89:51:67:b6:
60:89:16:76:c4:62:fa:a2:45:f4:e1:74:54:19:67:88:f1:bb:
45:84:af:39:c0:47:04:22:b9:fc:9c:8b:f6:04:72:86:12:f8:
3d:bb:4b:c7:4d:00:c2:f3:19:fc:a3:3d:7c:f9:04:81:f0:bb:
8d:45:ae:43:4c:3c:c4:eb:22:be:fd:3c:a7:b7:e2:54:86:76:
d4:0c:a8:2b:8b:15:21:72:18:c3:ed:d3:e9:01:15:03:d2:a3:
c4:d6:01:5b:95:8b:c3:df:c4:4d:78:c1:78:24:7f:7c:40:50:
db:6d:69:c6:17:ad:1b:f7:a6:09:6f:20:8b:9d:97:3b:5e:ed:
75:dc:0e:1e:2c:94:50:15:9c:93:88:36:f8:fe:8e:99:c2:a4:
57:17:1f:60:51:e6:05:fa:96:04:c8:41:68:f7:2b:bf:fc:fc:
e5:12:29:4e:6d:b3:5b:e9:44:35:3b:6f:ac:c4:7e:3a:c0:17:
ab:59:60:92:e1:27:c0:2f:ad:77:31:ab:30:09:c1:fa:fd:0c:
a2:55:f3:40:ef:a4:87:9e:1a:4b:c7:05:40:d1:35:e0:9c:0c:
74:3f:19:aa:b2:b3:04:c5:83:65:c7:bd:59:99:47:c5:d4:64:
81:61:48:b2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYtrH58NpeFmlDixeQXIyc0hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDI2MDgzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWE5YTNhNDE0ZTEyNDc2NWVmYzlhNjU1M2I1N2Q4ODdmNzExZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOfMmqrAixAnd/1N/ahQRHtCsEhP
ZnVltNWEETM0Dyiu75+9Vnjphh/lSZ+4IKX/3Ss3/G4dXekdgZaefZtHDADVHagW
qDPqNw8YieLX7dAEckFAFw7rNDcpQ3/tosPsJeSEI0i/1PUZAPSwvC/7Gp2UcIgt
EK7s6GH0R/UANACVfg71ZPnKy7mwwukfbYy9zAyKA2dWiJjndpjZzMyu1sP8ylyY
vu3TRfRof9VMktEXTyY3z0VBQB6EcBLMLOWtx3GWtUnNAHvIJhdIHehrTa0EZH9c
oBMCf+ZHNfq3434ea15juFFEJwias9+xOP/vZrr1k4tU8cqBiO5zS0aiTwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOWpo6QU4SR2XvyaZVO1fYh/cR72MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNWFtanBCVGhKSFplX0pwbFU3VjlpSDl4SHZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQhdAwQA
LVhYAwQAwjfjMA0GCSqGSIb3DQEBCwUAA4IBAQCSiwTR1KwUJUWgNpt7OYlRZ7Zg
iRZ2xGL6okX04XRUGWeI8btFhK85wEcEIrn8nIv2BHKGEvg9u0vHTQDC8xn8oz18
+QSB8LuNRa5DTDzE6yK+/Tynt+JUhnbUDKgrixUhchjD7dPpARUD0qPE1gFblYvD
38RNeMF4JH98QFDbbWnGF60b96YJbyCLnZc7Xu113A4eLJRQFZyTiDb4/o6ZwqRX
Fx9gUeYF+pYEyEFo9yu//PzlEilObbNb6UQ1O2+sxH46wBerWWCS4SfAL613Masw
CcH6/QyiVfNA76SHnhpLxwVA0TXgnAx0PxmqsrMExYNlx71ZmUfF1GSBYUiy
-----END CERTIFICATE-----
Generated at Wed Nov 1 15:22:21 2023 by rpki-client on console-fra.rpki-client.org