Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ECCeAU1hg2LfPGKIb2kNFO0mw5s.roa
File: ECCeAU1hg2LfPGKIb2kNFO0mw5s.roa (raw, json)
Hash identifier: zwkj395JegmHzKKIxolio2mb6nfc+IvaKh3rC9BHMdk=
Subject key identifier: 10:20:9E:01:4D:61:83:62:DF:3C:62:88:6F:69:0D:14:ED:26:C3:9B
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018AF45F2A4A60A907F1D65E27FB604EE4D4
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ECCeAU1hg2LfPGKIb2kNFO0mw5s.roa
Signing time: Tue 03 Oct 2023 07:09:51 +0000
ROA not before: Tue 03 Oct 2023 07:09:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44881
IP address blocks: 46.161.12.0/23 maxlen: 23
5.8.56.0/23 maxlen: 23
46.161.20.0/22 maxlen: 22
37.139.48.0/23 maxlen: 23
5.188.222.0/24 maxlen: 24
146.185.244.0/23 maxlen: 23
91.243.62.0/23 maxlen: 23
31.184.238.0/23 maxlen: 23
5.8.19.0/24 maxlen: 24
5.188.208.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:5f:2a:4a:60:a9:07:f1:d6:5e:27:fb:60:4e:e4:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Oct 3 07:09:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10209e014d618362df3c62886f690d14ed26c39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1b:31:ed:74:b9:57:ba:04:cb:57:7a:81:7e:
7d:5a:21:30:86:1e:ca:11:26:2e:5f:90:3e:41:14:
d2:7c:0b:95:e6:89:ad:a6:ed:c0:1e:82:92:42:86:
ac:b8:07:f3:f5:f8:a4:9f:88:80:27:89:af:f4:bf:
49:4c:65:cd:10:c6:f0:68:bf:82:df:19:67:ac:7a:
ee:16:b9:89:08:41:73:c7:cb:c5:7f:98:e7:b5:32:
a0:35:03:f4:2a:40:53:4b:fe:1f:dc:24:cd:96:e2:
6d:1a:60:83:3d:e2:2f:e3:34:e9:70:7f:e1:6d:3c:
67:e3:31:bd:3e:37:45:12:16:93:e9:74:d4:62:21:
3a:94:a1:26:8c:94:f0:ab:07:59:01:e9:ae:cd:fb:
a8:55:1f:04:33:37:9d:f4:74:b0:17:98:30:8c:00:
c0:8b:a6:a1:f5:ce:dc:d8:cf:ac:8a:04:03:fe:78:
2e:bc:ea:14:22:cb:9b:2f:69:4f:a4:bc:8c:e2:69:
d1:77:9d:9c:a8:48:1a:ff:52:f2:db:5b:08:05:b2:
00:f6:b8:e0:08:27:0c:03:a4:3e:b0:f3:67:2b:af:
5c:4f:aa:6e:8d:9a:12:bd:c9:6b:11:04:c0:a6:55:
92:86:bc:1b:a0:2f:5b:1f:f6:14:a7:95:21:17:2d:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:20:9E:01:4D:61:83:62:DF:3C:62:88:6F:69:0D:14:ED:26:C3:9B
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/ECCeAU1hg2LfPGKIb2kNFO0mw5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.19.0/24
5.8.56.0/23
5.188.208.0/23
5.188.222.0/24
31.184.238.0/23
37.139.48.0/23
46.161.12.0/23
46.161.20.0/22
91.243.62.0/23
146.185.244.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:86:ce:1b:67:a3:bf:14:ff:96:63:bc:19:d3:5e:ea:5f:5e:
43:71:24:f4:65:a0:b7:e9:09:8b:6c:97:d2:1f:22:0a:ca:72:
fa:77:2d:39:bf:e4:4d:f5:bf:47:f0:78:08:39:4e:95:a3:48:
76:08:33:b0:e6:bf:8c:25:8e:e6:bc:61:b9:50:bc:e1:4e:0d:
50:31:a2:86:e1:62:61:43:76:5a:35:5c:5b:bc:e7:b2:c5:33:
83:bc:13:fb:18:42:40:e2:54:07:89:5d:2d:d2:e9:e1:30:fe:
36:ed:97:cd:1f:63:98:da:d5:60:ea:36:a5:07:42:74:7d:c0:
4f:ca:3a:5c:10:79:92:bf:ca:07:4a:aa:a4:38:13:2e:09:9c:
45:09:2c:87:82:ee:b6:63:06:b0:80:69:94:34:ff:1a:9b:80:
5d:2d:1c:e1:b6:c7:73:1a:4f:1d:31:90:25:5e:4f:7c:52:5a:
1c:7c:16:c2:b8:cb:04:cc:0e:7c:76:28:9c:56:2a:03:30:61:
9a:9b:66:b5:ad:bd:d8:78:99:9b:1c:0d:8e:4f:5f:92:79:d8:
f8:2f:4e:7b:6c:ea:d8:81:b8:43:9f:4d:1f:81:2d:a4:88:00:
69:de:5c:ea:b5:04:b4:9a:db:89:ad:f1:75:ca:1b:c2:51:fe:
01:e1:0b:b1
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYr0XypKYKkH8dZeJ/tgTuTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjMxMDAzMDcwOTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDIwOWUwMTRkNjE4MzYyZGYzYzYyODg2ZjY5MGQxNGVkMjZjMzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohsx7XS5V7oEy1d6gX59WiEwhh7K
ESYuX5A+QRTSfAuV5omtpu3AHoKSQoasuAfz9fikn4iAJ4mv9L9JTGXNEMbwaL+C
3xlnrHruFrmJCEFzx8vFf5jntTKgNQP0KkBTS/4f3CTNluJtGmCDPeIv4zTpcH/h
bTxn4zG9PjdFEhaT6XTUYiE6lKEmjJTwqwdZAemuzfuoVR8EMzed9HSwF5gwjADA
i6ah9c7c2M+sigQD/nguvOoUIsubL2lPpLyM4mnRd52cqEga/1Ly21sIBbIA9rjg
CCcMA6Q+sPNnK69cT6pujZoSvclrEQTAplWShrwboC9bH/YUp5UhFy1TZQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFBAgngFNYYNi3zxiiG9pDRTtJsObMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvRUNDZUFVMWhnMkxmUEdLSWIya05GTzBtdzVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQABQgTAwQB
BQg4AwQBBbzQAwQABbzeAwQBH7juAwQBJYswAwQBLqEMAwQCLqEUAwQBW/M+AwQB
krn0MA0GCSqGSIb3DQEBCwUAA4IBAQAqhs4bZ6O/FP+WY7wZ017qX15DcST0ZaC3
6QmLbJfSHyIKynL6dy05v+RN9b9H8HgIOU6Vo0h2CDOw5r+MJY7mvGG5ULzhTg1Q
MaKG4WJhQ3ZaNVxbvOeyxTODvBP7GEJA4lQHiV0t0unhMP427ZfNH2OY2tVg6jal
B0J0fcBPyjpcEHmSv8oHSqqkOBMuCZxFCSyHgu62YwawgGmUNP8am4BdLRzhtsdz
Gk8dMZAlXk98UlocfBbCuMsEzA58diicVioDMGGam2a1rb3YeJmbHA2OT1+Sedj4
L057bOrYgbhDn00fgS2kiABp3lzqtQS0mtuJrfF1yhvCUf4B4Qux
-----END CERTIFICATE-----
Generated at Tue Oct 3 08:22:29 2023 by rpki-client on console-ams.rpki-client.org