Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5WM8NREdFILC8MmGHfTeHRekNKI.roa
File: 5WM8NREdFILC8MmGHfTeHRekNKI.roa (raw, json)
Hash identifier: 8vNIR+7J+P3UGyo4hN+l/V8OQ0e4fuyK+97wFaZG4eM=
Subject key identifier: E5:63:3C:35:11:1D:14:82:C2:F0:C9:86:1D:F4:DE:1D:17:A4:34:A2
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 0185706726752FCDA836F2F2041C58B709D1
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5WM8NREdFILC8MmGHfTeHRekNKI.roa
Signing time: Mon 02 Jan 2023 02:54:46 +0000
ROA not before: Mon 02 Jan 2023 02:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 94.137.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:26:75:2f:cd:a8:36:f2:f2:04:1c:58:b7:09:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5633c35111d1482c2f0c9861df4de1d17a434a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c5:68:ee:4f:50:47:dd:98:d4:2b:1f:79:ed:
4c:f4:d7:05:06:e7:5f:d3:e2:6f:a6:7a:dd:e4:3e:
fc:43:f9:6b:28:69:45:1a:ae:ee:71:d4:cf:4f:64:
6e:9f:f7:4a:af:d3:ee:c9:d0:81:74:e5:d1:97:fd:
6b:11:08:65:6b:9c:db:5d:7c:60:cf:ae:de:1b:cf:
4b:28:94:dc:a5:85:49:6a:e2:1c:d0:35:fa:cc:cb:
ad:d8:64:fd:54:a3:cf:c2:1b:b3:69:a7:1f:6b:2b:
54:0e:3a:f9:f0:f8:f7:a7:34:06:65:42:5f:e0:18:
79:95:47:1b:43:fe:f2:51:f8:2d:e5:cc:07:0f:93:
06:bd:ac:bf:ef:c1:70:cb:38:66:b5:ce:75:fc:6c:
00:ad:0b:21:c5:65:7c:24:7a:59:b0:b8:21:f5:6f:
fb:39:ea:30:f1:d2:0f:5d:b9:eb:d5:ce:81:02:18:
73:54:06:d7:2f:27:5d:86:b5:14:55:ac:03:b8:92:
93:99:ce:6b:68:47:be:a7:65:9e:5d:ad:fd:3f:ec:
99:d1:fd:28:3c:c0:51:de:3b:ec:92:86:6b:80:9b:
2c:b9:15:d3:48:e3:be:c9:a8:a3:df:a6:26:1b:e4:
56:fe:35:9c:f3:28:55:03:35:3b:a3:32:12:f8:00:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:63:3C:35:11:1D:14:82:C2:F0:C9:86:1D:F4:DE:1D:17:A4:34:A2
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/5WM8NREdFILC8MmGHfTeHRekNKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.137.75.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b4:ad:f8:ab:e1:60:cd:67:94:4f:b7:87:2b:0e:4b:ed:ba:
12:bc:f2:35:fb:3e:52:b1:49:b8:91:6d:3c:72:f1:07:4c:78:
c7:12:be:2a:d7:08:4c:ce:08:47:42:96:30:32:b6:d8:97:12:
8c:cb:83:0a:2a:76:07:e4:76:5e:c6:8b:34:70:50:79:da:ec:
10:b7:8a:0f:89:1b:ba:c4:a6:5f:43:1e:ec:f9:65:fc:44:20:
3e:ce:1e:e6:a3:fe:68:f6:06:20:47:f4:1a:15:00:59:e1:1b:
c4:e9:d2:3f:5e:e4:78:40:ec:ff:cb:d2:95:89:57:f2:c4:7c:
54:e3:bd:60:2f:01:0c:fe:60:87:05:41:2e:b7:64:c1:3e:c4:
ab:33:b1:5e:d6:37:d2:25:75:e5:80:e9:d8:48:83:d0:f1:91:
26:83:b1:c8:95:67:e1:1f:71:d1:40:21:66:a7:f5:1c:bc:a9:
df:1a:c3:7a:f3:01:db:af:5a:1c:13:43:a3:10:21:ae:98:a8:
55:88:5f:53:31:a5:55:d4:8a:7e:2a:32:2d:bd:a3:1c:83:ed:
78:83:5c:8f:bc:71:bb:f1:57:c3:b9:29:40:14:02:35:5d:f2:
cc:e8:21:48:dd:74:db:e2:4a:dd:71:37:97:70:4a:15:d9:37:
d3:a3:5c:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZyZ1L82oNvLyBBxYtwnRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwMTAyMDI1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTYzM2MzNTExMWQxNDgyYzJmMGM5ODYxZGY0ZGUxZDE3YTQzNGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8Vo7k9QR92Y1Csfee1M9NcFBudf
0+Jvpnrd5D78Q/lrKGlFGq7ucdTPT2Run/dKr9PuydCBdOXRl/1rEQhla5zbXXxg
z67eG89LKJTcpYVJauIc0DX6zMut2GT9VKPPwhuzaacfaytUDjr58Pj3pzQGZUJf
4Bh5lUcbQ/7yUfgt5cwHD5MGvay/78Fwyzhmtc51/GwArQshxWV8JHpZsLgh9W/7
Oeow8dIPXbnr1c6BAhhzVAbXLyddhrUUVawDuJKTmc5raEe+p2WeXa39P+yZ0f0o
PMBR3jvskoZrgJssuRXTSOO+yaij36YmG+RW/jWc8yhVAzU7ozIS+ACQZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOVjPDURHRSCwvDJhh303h0XpDSiMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvNVdNOE5SRWRGSUxDOE1tR0hmVGVIUmVrTktJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXolLMA0G
CSqGSIb3DQEBCwUAA4IBAQBVtK34q+FgzWeUT7eHKw5L7boSvPI1+z5SsUm4kW08
cvEHTHjHEr4q1whMzghHQpYwMrbYlxKMy4MKKnYH5HZexos0cFB52uwQt4oPiRu6
xKZfQx7s+WX8RCA+zh7mo/5o9gYgR/QaFQBZ4RvE6dI/XuR4QOz/y9KViVfyxHxU
471gLwEM/mCHBUEut2TBPsSrM7Fe1jfSJXXlgOnYSIPQ8ZEmg7HIlWfhH3HRQCFm
p/UcvKnfGsN68wHbr1ocE0OjECGumKhViF9TMaVV1Ip+KjItvaMcg+14g1yPvHG7
8VfDuSlAFAI1XfLM6CFI3XTb4krdcTeXcEoV2TfTo1xl
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org