Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5veguG-MCwnAGknJCmSVGOFuYEM.roa
File: 5veguG-MCwnAGknJCmSVGOFuYEM.roa (raw, json)
Hash identifier: fWQ5TBid8OBc/8AjuFW8PEcxrCTn5FSuFPz3aRXhZrA=
Subject key identifier: E6:F7:A0:B8:6F:8C:0B:09:C0:1A:49:C9:0A:64:95:18:E1:6E:60:43
Certificate issuer: /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial: 0185729ED3F385DF4F15A23A4D119CBC6C35
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5veguG-MCwnAGknJCmSVGOFuYEM.roa
Signing time: Mon 02 Jan 2023 13:14:49 +0000
ROA not before: Mon 02 Jan 2023 13:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47894
IP address blocks: 94.103.36.0/24 maxlen: 24
94.103.38.0/24 maxlen: 24
94.103.37.0/24 maxlen: 24
94.103.39.0/24 maxlen: 24
94.103.41.0/24 maxlen: 24
94.103.43.0/24 maxlen: 24
94.103.42.0/24 maxlen: 24
185.35.20.0/24 maxlen: 24
185.35.22.0/24 maxlen: 24
185.35.23.0/24 maxlen: 24
2a00:7300:42::/48 maxlen: 48
2a00:7300:1::/48 maxlen: 48
2a00:7300::/32 maxlen: 32
2a00:7300:100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:d3:f3:85:df:4f:15:a2:3a:4d:11:9c:bc:6c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Validity
Not Before: Jan 2 13:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6f7a0b86f8c0b09c01a49c90a649518e16e6043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:ec:01:c7:04:cb:d2:79:2a:c1:b6:b8:bb:
a7:42:d1:49:75:eb:90:25:05:d6:a8:cb:a2:14:ac:
2e:e6:95:57:bf:25:9c:2d:27:a7:d4:e2:4b:61:bd:
c3:67:1f:af:09:e9:5a:80:c9:5f:ed:bd:88:df:7d:
49:03:20:08:20:a9:d7:40:cc:63:57:0c:cd:f2:0c:
56:37:4c:23:ea:7d:4e:65:70:20:69:8a:a9:76:c9:
cc:5a:9e:5a:3f:d9:e7:80:a2:2e:e0:ee:7a:4a:c4:
94:2e:fa:ef:37:ef:a1:f0:a0:cc:e4:62:5a:8e:22:
66:72:c7:48:65:14:66:8f:a6:88:ac:cb:b5:94:8d:
5d:6b:a7:4d:1f:29:e5:1d:30:b5:a3:3f:71:40:b2:
dd:75:9b:6b:cc:69:0c:0a:a0:0b:57:35:5b:b8:ff:
87:c0:fd:c3:7c:a3:d5:2e:92:79:20:08:fe:15:cc:
de:09:ce:a3:f0:3c:78:89:f1:cf:ce:92:7c:e2:f0:
06:fb:12:de:66:c0:5b:a4:e6:ae:60:de:c9:81:c3:
c0:63:f8:a5:e4:76:ed:86:3f:35:c0:f9:17:90:02:
13:c0:e2:91:45:4f:81:4e:bd:67:1a:3c:30:2f:c0:
3f:2c:46:8d:88:aa:f8:ed:9b:d6:e8:a4:73:3b:44:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:F7:A0:B8:6F:8C:0B:09:C0:1A:49:C9:0A:64:95:18:E1:6E:60:43
X509v3 Authority Key Identifier:
keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5veguG-MCwnAGknJCmSVGOFuYEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.36.0/22
94.103.41.0-94.103.43.255
185.35.20.0/24
185.35.22.0/23
IPv6:
2a00:7300::/32
Signature Algorithm: sha256WithRSAEncryption
b9:19:fa:28:6a:be:e8:5a:b9:fa:23:81:81:df:1e:66:a5:b7:
ba:b6:56:1b:7b:57:8b:aa:e2:99:6a:89:ab:e0:be:81:82:ad:
cf:50:e1:c7:4c:ad:22:ea:3a:f5:c5:e6:21:95:c2:2f:c7:d0:
0d:df:78:b9:80:20:ce:7d:02:60:6c:08:9b:26:6d:cc:f1:cf:
ad:03:5f:19:d1:64:27:fc:ac:8d:b7:61:ae:f8:7f:f7:80:88:
3f:dd:be:7f:10:75:d5:59:00:7f:30:c7:5f:6f:50:b8:d9:a3:
7b:5e:46:29:84:77:0d:b4:f5:ed:64:ba:db:6e:18:5b:d9:1f:
05:e6:b5:21:82:a4:df:7e:84:2d:2d:ea:3e:e3:58:60:70:13:
f2:86:bb:0d:1d:61:94:08:9b:49:d2:81:b0:0f:bf:3c:3d:ee:
19:2a:d9:cb:de:6c:78:d8:a6:df:9a:e6:d7:64:e1:5c:21:d1:
ce:31:6d:c5:d9:b5:39:73:a7:88:51:b8:13:0f:0a:ac:61:93:
55:61:d0:ef:e9:81:5f:48:80:df:29:9c:b5:a7:3c:cb:de:6f:
e3:a9:d9:bd:93:c2:1c:d0:6e:50:57:60:1d:91:50:ff:55:88:
44:c5:78:3c:b3:08:c5:c0:00:ae:97:6f:68:7c:eb:4b:e9:15:
6e:fd:d5:77
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAYVyntPzhd9PFaI6TRGcvGw1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1MDE4MTVjNmY5OGYzYTJiNjE4NGFmZWJmMThlYTM0MWJl
ODgyZWEwHhcNMjMwMTAyMTMxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNmY3YTBiODZmOGMwYjA5YzAxYTQ5YzkwYTY0OTUxOGUxNmU2MDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0DsAccEy9J5KsG2uLunQtFJdeuQ
JQXWqMuiFKwu5pVXvyWcLSen1OJLYb3DZx+vCelagMlf7b2I331JAyAIIKnXQMxj
VwzN8gxWN0wj6n1OZXAgaYqpdsnMWp5aP9nngKIu4O56SsSULvrvN++h8KDM5GJa
jiJmcsdIZRRmj6aIrMu1lI1da6dNHynlHTC1oz9xQLLddZtrzGkMCqALVzVbuP+H
wP3DfKPVLpJ5IAj+FczeCc6j8Dx4ifHPzpJ84vAG+xLeZsBbpOauYN7JgcPAY/il
5Hbthj81wPkXkAITwOKRRU+BTr1nGjwwL8A/LEaNiKr47ZvW6KRzO0QSowIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFOb3oLhvjAsJwBpJyQpklRjhbmBDMB8GA1UdIwQY
MBaAFOUBgVxvmPOithhK/r8Y6jQb6ILqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWIt
MDA1OWY3MzdlZjA1LzEvNXZlZ3VHLU1Dd25BR2tuSkNtU1ZHT0Z1WUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy81YjAyMjItZWQ2NC00ZjU1LWI0NWItMDA1OWY3MzdlZjA1
LzEvNVFHQlhHLVk4NksyR0VyLXZ4anFOQnZvZ3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCXmckMAwD
BABeZykDBAJeZygDBAC5IxQDBAG5IxYwDQQCAAIwBwMFACoAcwAwDQYJKoZIhvcN
AQELBQADggEBALkZ+ihqvuhaufojgYHfHmalt7q2Vht7V4uq4plqiavgvoGCrc9Q
4cdMrSLqOvXF5iGVwi/H0A3feLmAIM59AmBsCJsmbczxz60DXxnRZCf8rI23Ya74
f/eAiD/dvn8QddVZAH8wx19vULjZo3teRimEdw209e1kuttuGFvZHwXmtSGCpN9+
hC0t6j7jWGBwE/KGuw0dYZQIm0nSgbAPvzw97hkq2cvebHjYpt+a5tdk4Vwh0c4x
bcXZtTlzp4hRuBMPCqxhk1Vh0O/pgV9IgN8pnLWnPMveb+Op2b2TwhzQblBXYB2R
UP9ViETFeDyzCMXAAK6Xb2h860vpFW791Xc=
-----END CERTIFICATE-----
Generated at Tue Sep 26 22:56:22 2023 by rpki-client on console-ams.rpki-client.org