Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PV5BsbEDcg8GEtYexuyGBfcf4ws.roa
File: PV5BsbEDcg8GEtYexuyGBfcf4ws.roa (raw, json)
Hash identifier: hQIpWsmRQHd3g9D9zcyJdmKxnTe+xgm4XUJF9K/kuZI=
Subject key identifier: 3D:5E:41:B1:B1:03:72:0F:06:12:D6:1E:C6:EC:86:05:F7:1F:E3:0B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189DA0924DE4E942E788932B24139CB48D6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PV5BsbEDcg8GEtYexuyGBfcf4ws.roa
Signing time: Wed 09 Aug 2023 11:22:59 +0000
ROA not before: Wed 09 Aug 2023 11:22:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 84.54.51.0/24 maxlen: 24
94.103.124.0/24 maxlen: 24
141.98.4.0/24 maxlen: 24
31.13.211.0/24 maxlen: 24
45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:da:09:24:de:4e:94:2e:78:89:32:b2:41:39:cb:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 9 11:22:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d5e41b1b103720f0612d61ec6ec8605f71fe30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:4e:28:cd:73:53:90:99:1e:91:1b:5f:18:
9d:eb:19:b4:3b:da:59:36:14:8c:89:86:d1:0b:1c:
85:13:b0:2a:d3:9f:11:88:2b:39:e9:43:d8:1b:d1:
5c:c7:70:c3:d6:97:dd:d3:d6:7b:31:61:ff:b9:bc:
5b:be:6e:d3:82:f4:64:ca:e0:65:2f:32:ef:a3:cd:
30:e3:f3:5d:ce:4a:1d:3e:69:5f:8a:1f:04:ef:eb:
21:97:fe:84:ce:b8:83:90:00:b9:61:e9:ab:c2:e4:
53:df:64:89:af:92:88:b0:2f:f4:85:d6:33:4c:b6:
20:52:da:06:25:11:7f:f2:2f:8b:51:e1:6b:f4:c4:
e8:8d:15:c0:65:42:e1:2f:f1:65:5b:d5:22:bf:b3:
6d:16:ce:1c:68:a3:e4:56:af:2a:c4:e8:89:39:04:
33:c8:db:59:df:b9:e1:2d:24:e1:75:4e:08:60:49:
50:29:6f:1d:5a:e4:bc:65:0e:38:9e:5f:95:5c:41:
01:d1:c9:35:a7:eb:3c:a8:15:09:c2:ef:ef:a9:58:
4f:b7:2b:07:fb:cc:86:f8:40:fa:a2:cd:5a:a8:5f:
98:b6:db:63:ee:67:60:2b:ef:81:07:4a:22:7a:f3:
f9:3a:47:31:4e:69:00:28:03:73:66:06:23:76:e3:
bd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5E:41:B1:B1:03:72:0F:06:12:D6:1E:C6:EC:86:05:F7:1F:E3:0B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PV5BsbEDcg8GEtYexuyGBfcf4ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.211.0/24
45.128.232.0/24
84.54.51.0/24
94.103.124.0/24
141.98.4.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:26:96:24:5a:b2:75:43:12:89:6f:04:c4:53:34:58:1e:fa:
61:3c:69:14:55:d3:c2:28:4f:ec:a8:13:e0:fe:66:1e:6c:1f:
af:80:37:be:4e:5c:bd:8e:0e:50:2f:0b:b1:f3:12:06:89:cb:
4f:fd:e1:70:1a:72:76:68:a3:8d:4b:35:13:7c:da:42:fe:ac:
35:6e:9a:80:d6:1d:eb:31:e6:37:66:08:e1:83:e3:47:29:b6:
bc:8b:ea:2f:1f:07:f5:aa:20:2d:2d:64:0d:c7:02:9d:28:17:
c2:de:ed:c2:43:f1:8a:31:30:25:e8:b8:a6:64:a4:62:e6:78:
ce:4a:bc:17:80:83:d0:1e:18:ea:30:d0:8b:81:c2:9c:e4:b0:
eb:ca:ee:40:8b:1d:19:aa:4b:7f:64:07:f1:9a:1d:6b:c6:9c:
e2:85:dd:f3:5c:3b:19:7a:1d:10:47:20:7a:4a:ce:a9:fb:f8:
a4:44:2c:17:9e:49:b9:82:6d:a9:80:db:62:f4:a1:07:7b:c2:
6b:a4:f0:82:55:de:53:1a:61:64:c2:15:b2:84:e7:51:ba:42:
96:ed:26:24:1d:69:c6:3b:be:30:4a:ff:5f:42:b2:fb:7d:3b:
43:9c:d9:ea:53:8b:b8:1f:f1:34:a2:93:72:85:f8:90:c2:c3:
43:41:28:1b
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYnaCSTeTpQueIkyskE5y0jWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODA5MTEyMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDVlNDFiMWIxMDM3MjBmMDYxMmQ2MWVjNmVjODYwNWY3MWZlMzBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUhOKM1zU5CZHpEbXxid6xm0O9pZ
NhSMiYbRCxyFE7Aq058RiCs56UPYG9Fcx3DD1pfd09Z7MWH/ubxbvm7TgvRkyuBl
LzLvo80w4/NdzkodPmlfih8E7+shl/6EzriDkAC5YemrwuRT32SJr5KIsC/0hdYz
TLYgUtoGJRF/8i+LUeFr9MTojRXAZULhL/FlW9Uiv7NtFs4caKPkVq8qxOiJOQQz
yNtZ37nhLSThdU4IYElQKW8dWuS8ZQ44nl+VXEEB0ck1p+s8qBUJwu/vqVhPtysH
+8yG+ED6os1aqF+Ytttj7mdgK++BB0oievP5OkcxTmkAKANzZgYjduO98wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFD1eQbGxA3IPBhLWHsbshgX3H+MLMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUFY1QnNiRURjZzhHRXRZZXh1eUdCZmNmNHdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAHw3TAwQA
LYDoAwQAVDYzAwQAXmd8AwQAjWIEAwQAwSMSMA0GCSqGSIb3DQEBCwUAA4IBAQCn
JpYkWrJ1QxKJbwTEUzRYHvphPGkUVdPCKE/sqBPg/mYebB+vgDe+Tly9jg5QLwux
8xIGictP/eFwGnJ2aKONSzUTfNpC/qw1bpqA1h3rMeY3Zgjhg+NHKba8i+ovHwf1
qiAtLWQNxwKdKBfC3u3CQ/GKMTAl6LimZKRi5njOSrwXgIPQHhjqMNCLgcKc5LDr
yu5Aix0Zqkt/ZAfxmh1rxpzihd3zXDsZeh0QRyB6Ss6p+/ikRCwXnkm5gm2pgNti
9KEHe8JrpPCCVd5TGmFkwhWyhOdRukKW7SYkHWnGO74wSv9fQrL7fTtDnNnqU4u4
H/E0opNyhfiQwsNDQSgb
-----END CERTIFICATE-----
Generated at Mon Aug 14 06:38:04 2023 by rpki-client on console-ams.rpki-client.org