Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5WcZjAkaE8VEW7kZgzXf9co9M3s.roa
File: 5WcZjAkaE8VEW7kZgzXf9co9M3s.roa (raw, json)
Hash identifier: cMchCu3FNS+FBVzL0wI1JDPeIPzxs9FIWEaJShb8Cj8=
Subject key identifier: E5:67:19:8C:09:1A:13:C5:44:5B:B9:19:83:35:DF:F5:CA:3D:33:7B
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0189BD2A1454B827F4670B97F69423887A2F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5WcZjAkaE8VEW7kZgzXf9co9M3s.roa
Signing time: Thu 03 Aug 2023 20:49:58 +0000
ROA not before: Thu 03 Aug 2023 20:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 81.31.244.0/24 maxlen: 24
81.31.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:2a:14:54:b8:27:f4:67:0b:97:f6:94:23:88:7a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 3 20:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e567198c091a13c5445bb9198335dff5ca3d337b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:c8:29:04:1d:4f:96:71:e1:10:47:00:af:
a3:b8:cf:a8:0c:a6:2d:ef:1f:4c:b4:10:4f:22:cf:
e8:e3:35:a8:7b:2c:ce:61:8c:27:3a:0e:43:08:64:
bd:3e:c8:79:fe:b2:c9:3a:e7:76:e9:f3:9a:24:1c:
1b:44:b5:de:e2:a1:98:14:ab:2a:27:9c:63:62:74:
24:71:7c:8f:bb:74:9c:42:fe:bd:d8:08:c2:17:a3:
13:36:3a:68:0d:e6:0d:90:bb:a2:36:cb:fb:0d:d9:
5e:c1:f3:29:4f:72:f6:6c:82:29:02:62:5f:3d:80:
1b:b3:8a:21:29:cc:a5:bd:b3:a3:66:41:34:6a:f4:
91:69:ee:6b:00:b6:b4:ca:f2:a2:ab:a2:1f:e1:4d:
1d:cc:57:09:02:81:10:66:59:ce:cc:97:26:4f:58:
da:47:ff:31:c6:29:3b:c3:24:49:8b:99:29:6f:85:
69:9c:91:76:2e:59:88:a6:08:0e:b3:17:f9:0f:3b:
67:ea:4b:ca:49:09:9a:9d:78:4c:26:16:ce:48:c6:
fe:b1:ca:b4:b8:90:65:e7:06:8d:84:3a:29:ba:cc:
92:f8:94:94:e3:6f:ee:b8:bb:9d:c0:7f:b2:35:fe:
b0:62:78:5d:15:be:e7:4d:9a:29:66:fa:88:2d:d3:
7e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:67:19:8C:09:1A:13:C5:44:5B:B9:19:83:35:DF:F5:CA:3D:33:7B
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5WcZjAkaE8VEW7kZgzXf9co9M3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:60:67:a1:b5:0b:9f:61:bd:8d:78:dd:98:bd:41:53:ef:17:
02:e8:d0:b1:cd:7f:45:7a:5d:77:01:a3:21:7d:dd:53:ec:ba:
6d:9a:36:3e:05:63:ff:f9:e8:24:a8:b8:44:30:9f:87:9b:87:
64:f7:f2:98:d2:35:a5:01:5a:48:cf:02:33:fd:8f:cc:00:f0:
44:d0:be:f6:c5:3a:5d:77:95:b5:66:a3:39:08:a8:f7:48:a8:
de:3f:e6:49:7f:0c:0d:40:a3:67:dd:7a:94:a2:39:30:07:2d:
a1:dc:55:55:75:24:2a:0b:3e:08:55:02:b9:55:82:b1:e8:87:
e5:e8:b0:26:d2:25:0e:d1:ac:20:01:9e:f4:c1:a1:9e:b0:e7:
3d:c3:74:d8:3f:f7:82:47:20:66:9a:2a:9d:c8:0b:1c:30:a5:
e7:50:6f:b8:2b:83:16:48:be:57:ff:44:f2:8c:4a:f2:64:9d:
f7:b1:b5:c4:9b:ec:c5:2c:04:c4:11:3c:0a:f4:93:58:65:81:
ed:21:d0:a1:95:ba:2d:86:fc:39:3a:74:04:de:c3:c1:ed:61:
0f:ec:01:31:dd:d3:f3:d3:66:9c:37:9b:c5:d0:70:5a:3d:68:
6b:5b:ed:c4:4f:9a:99:88:2b:f4:cc:cb:35:5b:52:28:df:3b:
ec:27:33:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm9KhRUuCf0ZwuX9pQjiHovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwODAzMjA0OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTY3MTk4YzA5MWExM2M1NDQ1YmI5MTk4MzM1ZGZmNWNhM2QzMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz/IKQQdT5Zx4RBHAK+juM+oDKYt
7x9MtBBPIs/o4zWoeyzOYYwnOg5DCGS9Psh5/rLJOud26fOaJBwbRLXe4qGYFKsq
J5xjYnQkcXyPu3ScQv692AjCF6MTNjpoDeYNkLuiNsv7DdlewfMpT3L2bIIpAmJf
PYAbs4ohKcylvbOjZkE0avSRae5rALa0yvKiq6If4U0dzFcJAoEQZlnOzJcmT1ja
R/8xxik7wyRJi5kpb4VpnJF2LlmIpggOsxf5Dztn6kvKSQmanXhMJhbOSMb+scq0
uJBl5waNhDopusyS+JSU42/uuLudwH+yNf6wYnhdFb7nTZopZvqILdN+YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVnGYwJGhPFRFu5GYM13/XKPTN7MB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvNVdjWmpBa2FFOFZFVzdrWmd6WGY5Y285TTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUR/0MA0G
CSqGSIb3DQEBCwUAA4IBAQCsYGehtQufYb2NeN2YvUFT7xcC6NCxzX9Fel13AaMh
fd1T7LptmjY+BWP/+egkqLhEMJ+Hm4dk9/KY0jWlAVpIzwIz/Y/MAPBE0L72xTpd
d5W1ZqM5CKj3SKjeP+ZJfwwNQKNn3XqUojkwBy2h3FVVdSQqCz4IVQK5VYKx6Ifl
6LAm0iUO0awgAZ70waGesOc9w3TYP/eCRyBmmiqdyAscMKXnUG+4K4MWSL5X/0Ty
jEryZJ33sbXEm+zFLATEETwK9JNYZYHtIdChlbothvw5OnQE3sPB7WEP7AEx3dPz
02acN5vF0HBaPWhrW+3ET5qZiCv0zMs1W1Io3zvsJzNJ
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:01 2024 by rpki-client on console-ams.rpki-client.org