Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/L5SFW0bytNxyn5t0DEeSP-FTd3w.roa
File: L5SFW0bytNxyn5t0DEeSP-FTd3w.roa (raw, json)
Hash identifier: de5MPGGEEoiKRaQBLKFFY6aJQJEAztNKqQBZRbmbW3g=
Subject key identifier: 2F:94:85:5B:46:F2:B4:DC:72:9F:9B:74:0C:47:92:3F:E1:53:77:7C
Certificate issuer: /CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Certificate serial: 01898D02EF073B0DF0AFC8D449B4C59E16B9
Authority key identifier: E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/L5SFW0bytNxyn5t0DEeSP-FTd3w.roa
Signing time: Tue 25 Jul 2023 12:25:26 +0000
ROA not before: Tue 25 Jul 2023 12:25:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57152
IP address blocks: 185.122.15.0/24 maxlen: 24
185.122.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 12:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8d:02:ef:07:3b:0d:f0:af:c8:d4:49:b4:c5:9e:16:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4ccd73508a9b59985d5597868e3a5d5ec745f5e
Validity
Not Before: Jul 25 12:25:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f94855b46f2b4dc729f9b740c47923fe153777c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:00:52:0d:ec:d4:02:ca:17:52:2a:08:9d:6f:
58:6d:0d:13:a0:c5:56:34:26:08:e4:61:da:5d:dc:
b3:fe:ce:75:ee:03:af:40:38:c2:e6:8e:98:af:f0:
06:c3:cb:53:69:b6:67:7c:73:b0:ee:6c:5e:85:5a:
61:ce:81:72:c6:d9:3f:10:c4:18:34:79:14:4b:39:
8e:ea:a9:ac:7e:5e:81:7f:f1:49:f7:e0:39:f7:d2:
c2:a3:53:5e:9c:6d:be:4a:20:df:a3:28:9b:57:3b:
51:de:c8:a1:6e:0d:5c:8e:da:ec:96:b1:7c:a3:3b:
63:83:c1:ac:21:28:5f:27:dc:8a:dd:85:d4:3f:b4:
78:66:50:b1:db:6b:69:b2:26:83:8b:d6:37:03:2b:
98:34:a2:5d:10:dd:6f:6d:aa:fc:0b:03:97:37:3b:
85:54:82:fe:34:0f:b9:93:5e:da:bd:2c:fe:bc:a0:
4e:de:ee:39:f5:c3:51:db:57:cc:36:4a:7a:3a:fd:
ae:1c:d7:46:28:9f:05:e4:69:64:62:e2:f2:bd:b8:
63:fd:6c:d2:5a:48:be:2c:a9:6d:85:56:05:6b:de:
8d:73:3b:bc:35:d9:a1:22:84:20:c6:fb:fd:82:a2:
78:0f:cf:94:cf:c3:00:8d:c8:62:d6:96:9a:f3:3a:
4b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:94:85:5B:46:F2:B4:DC:72:9F:9B:74:0C:47:92:3F:E1:53:77:7C
X509v3 Authority Key Identifier:
keyid:E4:CC:D7:35:08:A9:B5:99:85:D5:59:78:68:E3:A5:D5:EC:74:5F:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5MzXNQiptZmF1Vl4aOOl1ex0X14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/L5SFW0bytNxyn5t0DEeSP-FTd3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/453aed-7645-459d-85d8-85d80a544beb/1/5MzXNQiptZmF1Vl4aOOl1ex0X14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.14.0/23
Signature Algorithm: sha256WithRSAEncryption
93:21:77:d1:ec:d6:0e:b9:a9:67:b7:2c:c5:cc:0f:2f:14:a3:
3c:d2:03:f1:9a:a9:d0:ba:ba:71:a2:2d:f5:4a:31:e7:5a:13:
76:96:27:ff:41:70:ca:63:6b:52:17:e0:01:1e:e1:d2:e2:8c:
36:35:94:ab:df:0a:8c:1f:2c:07:0d:f1:9f:20:da:b0:fd:46:
6b:2a:47:0b:a1:eb:b5:52:c7:39:8f:45:e8:6a:4b:80:cb:a5:
35:3c:f3:4e:31:cf:e6:ac:10:bf:ee:24:ed:d4:74:9a:51:a9:
30:37:08:8e:a5:fb:32:cc:b3:95:a8:75:ba:25:42:8b:d2:ff:
86:16:df:e1:1a:c5:96:cd:80:9d:ad:f2:a5:5b:9b:3e:fc:90:
0f:89:0a:b3:9d:81:c3:6e:7b:91:1f:1c:c8:34:8b:48:91:35:
a3:d3:1c:9c:58:b4:0a:5d:2f:0c:17:93:0a:c5:3d:fc:ce:ce:
f3:11:ba:28:66:13:dc:21:cc:34:92:0f:5f:f6:db:cc:6c:ea:
11:5a:81:1a:6c:76:57:94:da:e9:af:86:5c:6d:f2:6d:6b:c2:
b2:e3:0c:00:93:e1:f7:23:36:03:74:49:86:5c:63:b8:34:1d:
b5:7c:ce:fe:bf:56:7d:6b:38:ac:57:b2:e6:05:84:e1:57:f7:
9d:0f:c2:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYmNAu8HOw3wr8jUSbTFnha5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0Y2NkNzM1MDhhOWI1OTk4NWQ1NTk3ODY4ZTNhNWQ1ZWM3
NDVmNWUwHhcNMjMwNzI1MTIyNTI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjk0ODU1YjQ2ZjJiNGRjNzI5ZjliNzQwYzQ3OTIzZmUxNTM3NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiABSDezUAsoXUioInW9YbQ0ToMVW
NCYI5GHaXdyz/s517gOvQDjC5o6Yr/AGw8tTabZnfHOw7mxehVphzoFyxtk/EMQY
NHkUSzmO6qmsfl6Bf/FJ9+A599LCo1NenG2+SiDfoyibVztR3sihbg1cjtrslrF8
oztjg8GsIShfJ9yK3YXUP7R4ZlCx22tpsiaDi9Y3AyuYNKJdEN1vbar8CwOXNzuF
VIL+NA+5k17avSz+vKBO3u459cNR21fMNkp6Ov2uHNdGKJ8F5GlkYuLyvbhj/WzS
Wki+LKlthVYFa96Nczu8NdmhIoQgxvv9gqJ4D8+Uz8MAjchi1paa8zpLkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC+UhVtG8rTccp+bdAxHkj/hU3d8MB8GA1UdIwQY
MBaAFOTM1zUIqbWZhdVZeGjjpdXsdF9eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgt
ODVkODBhNTQ0YmViLzEvTDVTRlcwYnl0Tnh5bjV0MERFZVNQLUZUZDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC80NTNhZWQtNzY0NS00NTlkLTg1ZDgtODVkODBhNTQ0YmVi
LzEvNU16WE5RaXB0Wm1GMVZsNGFPT2wxZXgwWDE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXoOMA0G
CSqGSIb3DQEBCwUAA4IBAQCTIXfR7NYOualntyzFzA8vFKM80gPxmqnQurpxoi31
SjHnWhN2lif/QXDKY2tSF+ABHuHS4ow2NZSr3wqMHywHDfGfINqw/UZrKkcLoeu1
Usc5j0XoakuAy6U1PPNOMc/mrBC/7iTt1HSaUakwNwiOpfsyzLOVqHW6JUKL0v+G
Ft/hGsWWzYCdrfKlW5s+/JAPiQqznYHDbnuRHxzINItIkTWj0xycWLQKXS8MF5MK
xT38zs7zEbooZhPcIcw0kg9f9tvMbOoRWoEabHZXlNrpr4ZcbfJta8Ky4wwAk+H3
IzYDdEmGXGO4NB21fM7+v1Z9azisV7LmBYThV/edD8LR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:28 2024 by rpki-client on console-fra.rpki-client.org