Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/E5J3NHNR7M0YAfcu5IBtoIRGIwI.roa
File: E5J3NHNR7M0YAfcu5IBtoIRGIwI.roa (raw, json)
Hash identifier: Lz3gHvDYd3ynZbJ69CLYdCMdIuUMvS3eeqV5Tcmzzkk=
Subject key identifier: 13:92:77:34:73:51:EC:CD:18:01:F7:2E:E4:80:6D:A0:84:46:23:02
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01862769C9CE2385B4DCA357401B7551B7DA
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/E5J3NHNR7M0YAfcu5IBtoIRGIwI.roa
Signing time: Mon 06 Feb 2023 15:48:09 +0000
ROA not before: Mon 06 Feb 2023 15:48:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2856
IP address blocks: 45.81.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 06:03:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:27:69:c9:ce:23:85:b4:dc:a3:57:40:1b:75:51:b7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Feb 6 15:48:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=139277347351eccd1801f72ee4806da084462302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:76:b2:c1:c7:a1:aa:db:a7:91:e3:08:e0:30:
42:00:06:e0:d1:55:25:17:0f:20:a0:89:00:88:36:
32:51:36:4e:fb:4a:0d:29:b4:f6:ad:b4:9f:39:15:
c6:14:58:4b:a7:01:28:ee:87:80:22:3a:80:c9:53:
d0:ae:6e:73:63:31:2a:e7:64:1b:12:64:51:84:71:
b5:54:7b:e4:b6:13:4b:bb:8e:ff:d1:1b:96:8c:5d:
b4:62:f2:3b:02:3c:e6:ef:83:7e:70:76:b2:74:9a:
fd:69:be:f0:a4:37:40:b2:4c:c8:4e:98:32:51:85:
10:69:0a:d4:37:88:cd:96:5c:97:83:e8:7d:f2:40:
44:fd:c3:b4:41:59:23:e0:22:8c:66:33:7d:be:6d:
c8:55:89:d2:1c:b6:fb:f2:55:3a:49:91:e2:ea:f1:
4b:45:e3:db:0f:9e:12:7e:3e:1e:11:c7:1d:23:fa:
63:4d:0e:fe:9e:73:11:d8:63:ca:6d:14:29:13:d6:
80:ee:f1:9c:d6:59:13:70:6b:a4:06:80:02:a2:69:
5c:ea:47:06:3b:83:ad:0c:4e:bf:32:16:2f:a9:35:
a0:e9:41:80:e6:d8:ad:e3:a9:c5:14:85:99:eb:8f:
69:fd:02:a9:e0:a4:ba:31:38:1a:ea:93:53:72:8b:
4b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:92:77:34:73:51:EC:CD:18:01:F7:2E:E4:80:6D:A0:84:46:23:02
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/E5J3NHNR7M0YAfcu5IBtoIRGIwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.253.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:1f:ce:43:3d:82:49:e0:a7:88:3f:d6:92:a5:a7:4e:64:50:
79:e0:02:aa:b1:f1:ae:40:d4:7e:38:8c:da:7d:11:a1:10:7d:
ae:55:5a:04:29:6b:bc:5d:85:6f:d7:f6:92:f8:09:38:d8:f5:
6a:c8:99:a0:76:a6:5e:9c:4a:65:66:2b:ad:95:62:bd:73:43:
8a:a0:f8:02:d4:ef:47:3a:d9:41:76:cd:c9:19:0b:5e:99:62:
20:9b:03:9d:de:a9:b4:6b:e5:de:d1:f7:82:63:63:b0:4c:e0:
f8:b3:76:69:dc:a1:2e:7d:82:d1:19:3a:58:81:e3:d8:1c:ae:
36:e3:d6:0f:31:3c:b0:e6:fc:52:d7:df:c0:56:dd:03:d0:69:
ac:34:66:ac:bf:87:a4:d0:10:bc:17:58:c1:ae:de:01:c8:01:
2b:da:ac:14:10:45:b0:43:61:75:09:65:a0:2f:a2:e6:b6:2c:
74:88:f1:57:6f:ff:4a:0c:a2:07:15:c1:bd:76:9f:fb:6a:96:
fd:b5:8d:04:e7:c8:fe:7c:03:b5:21:12:04:71:a2:1b:06:8f:
3e:9e:ad:5c:f5:22:8a:4e:25:ba:50:fd:8a:e4:a8:24:b1:60:
aa:f4:6b:ae:1a:e7:41:0f:84:fd:a6:f9:b6:6b:5c:fe:19:6d:
60:6e:76:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYnacnOI4W03KNXQBt1UbfaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0
NzhjYjEwHhcNMjMwMjA2MTU0ODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzkyNzczNDczNTFlY2NkMTgwMWY3MmVlNDgwNmRhMDg0NDYyMzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3aywcehqtunkeMI4DBCAAbg0VUl
Fw8goIkAiDYyUTZO+0oNKbT2rbSfORXGFFhLpwEo7oeAIjqAyVPQrm5zYzEq52Qb
EmRRhHG1VHvkthNLu47/0RuWjF20YvI7Ajzm74N+cHaydJr9ab7wpDdAskzITpgy
UYUQaQrUN4jNllyXg+h98kBE/cO0QVkj4CKMZjN9vm3IVYnSHLb78lU6SZHi6vFL
RePbD54Sfj4eEccdI/pjTQ7+nnMR2GPKbRQpE9aA7vGc1lkTcGukBoAComlc6kcG
O4OtDE6/MhYvqTWg6UGA5tit46nFFIWZ649p/QKp4KS6MTga6pNTcotLtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOSdzRzUezNGAH3LuSAbaCERiMCMB8GA1UdIwQY
MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt
YTM4YjY3OTVmYjI0LzEvRTVKM05ITlI3TTBZQWZjdTVJQnRvSVJHSXdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0
LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVH9MA0G
CSqGSIb3DQEBCwUAA4IBAQCLH85DPYJJ4KeIP9aSpadOZFB54AKqsfGuQNR+OIza
fRGhEH2uVVoEKWu8XYVv1/aS+Ak42PVqyJmgdqZenEplZiutlWK9c0OKoPgC1O9H
OtlBds3JGQtemWIgmwOd3qm0a+Xe0feCY2OwTOD4s3Zp3KEufYLRGTpYgePYHK42
49YPMTyw5vxS19/AVt0D0GmsNGasv4ek0BC8F1jBrt4ByAEr2qwUEEWwQ2F1CWWg
L6Lmtix0iPFXb/9KDKIHFcG9dp/7apb9tY0E58j+fAO1IRIEcaIbBo8+nq1c9SKK
TiW6UP2K5KgksWCq9GuuGudBD4T9pvm2a1z+GW1gbnaO
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org