Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/E-zQOu9Fn44P-ODfv5iwzzGKYLo.roa
File: E-zQOu9Fn44P-ODfv5iwzzGKYLo.roa (raw, json)
Hash identifier: MLYWbjRKDsAkGGdeFPAP8o/W6udfw/AyMYhZBLDI46I=
Subject key identifier: 13:EC:D0:3A:EF:45:9F:8E:0F:F8:E0:DF:BF:98:B0:CF:31:8A:60:BA
Certificate issuer: /CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Certificate serial: 01856BC1264F234D6C4557266B59B01151BA
Authority key identifier: 1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/E-zQOu9Fn44P-ODfv5iwzzGKYLo.roa
Signing time: Sun 01 Jan 2023 05:14:58 +0000
ROA not before: Sun 01 Jan 2023 05:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50300
IP address blocks: 185.48.164.0/22 maxlen: 24
185.32.72.0/22 maxlen: 24
5.102.168.0/21 maxlen: 24
109.74.240.0/20 maxlen: 24
176.12.104.0/21 maxlen: 24
2a00:1c10::/32 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:26:4f:23:4d:6c:45:57:26:6b:59:b0:11:51:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1dad7b9f1c49f8d13e1a67abcf2fba35b0a66d18
Validity
Not Before: Jan 1 05:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=13ecd03aef459f8e0ff8e0dfbf98b0cf318a60ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:a0:f6:b5:e4:26:43:77:bb:c1:7b:2c:45:
3c:de:43:ba:4a:59:d0:a3:02:52:bd:32:7d:9c:18:
43:c3:72:f9:09:aa:27:a7:db:cc:f2:c1:ac:79:d2:
f1:0f:b7:94:e1:35:06:c9:84:e1:32:06:aa:27:37:
c0:a6:8c:c2:26:50:76:6e:d0:bf:58:a3:14:3f:b3:
a7:64:b7:e2:27:40:84:b9:8c:b3:35:86:7a:e0:a1:
f7:90:36:aa:3b:22:75:35:ad:c3:52:9f:41:24:1e:
77:eb:56:ca:0c:fc:dc:a9:d8:d7:5e:34:45:cd:37:
1d:f3:9d:dd:1e:c4:c3:97:9e:c3:b9:d8:26:f4:84:
b1:5a:e2:36:12:8e:9e:08:6c:28:46:25:04:e5:70:
54:85:97:f0:87:8b:dd:c6:49:ff:9c:f0:26:a4:7a:
77:95:0f:02:b3:3d:f0:c0:e3:e9:f3:c0:75:0c:d2:
d4:f5:cc:a6:5e:a9:ce:b1:af:4e:0b:40:d5:bf:08:
c5:d3:71:2b:17:89:cd:1a:dc:ea:c0:95:f6:5e:4b:
71:ee:b8:e1:2e:11:b4:f4:7a:20:c2:af:a1:cb:96:
06:98:9c:9d:bb:fd:f9:9f:26:3e:6a:6a:27:ba:2c:
ac:41:bb:63:28:b1:fd:4d:9a:2f:4b:fc:f9:eb:cb:
ba:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EC:D0:3A:EF:45:9F:8E:0F:F8:E0:DF:BF:98:B0:CF:31:8A:60:BA
X509v3 Authority Key Identifier:
keyid:1D:AD:7B:9F:1C:49:F8:D1:3E:1A:67:AB:CF:2F:BA:35:B0:A6:6D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/E-zQOu9Fn44P-ODfv5iwzzGKYLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3c39f0-7e97-4ef7-8944-5ebd8eaee2c6/1/Ha17nxxJ-NE-Gmerzy-6NbCmbRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.168.0/21
109.74.240.0/20
176.12.104.0/21
185.32.72.0/22
185.48.164.0/22
IPv6:
2a00:1c10::/32
Signature Algorithm: sha256WithRSAEncryption
7b:67:5b:05:9c:d4:55:d9:44:52:ad:66:f5:f7:a8:a0:7a:84:
da:c1:a8:40:ea:05:d9:bf:3b:0f:9f:2c:5f:f3:29:53:43:85:
e4:15:89:00:fb:72:d6:39:2b:7d:39:31:7c:51:87:af:6b:01:
ee:5b:c7:98:d1:88:8b:a3:64:5e:24:4e:77:9c:a1:18:f9:b5:
99:c2:bc:93:32:e8:45:3e:d5:3b:c3:a7:91:6d:28:25:fc:3d:
16:ce:a1:cc:59:68:41:ec:a7:73:fd:09:f8:88:42:1b:5e:42:
60:c8:ec:3d:00:9b:00:53:7a:04:c5:ed:0b:be:d8:61:4e:f3:
e7:d2:92:36:5c:32:56:4c:42:de:3d:87:a0:37:2d:5b:5c:96:
cf:21:67:ca:f3:6c:e2:2b:0c:7f:bd:10:35:37:f6:79:40:a9:
7a:66:9a:40:cb:9f:04:c3:6e:9e:f2:4e:2d:aa:ff:68:6b:4b:
3f:01:eb:92:76:93:05:fd:ef:d2:bf:5a:27:3a:4d:b3:ec:cb:
f2:b5:bc:2e:f5:07:71:0b:12:0e:81:db:81:61:84:4d:3e:98:
1a:6b:d7:cd:78:b6:d5:cc:54:5e:0b:44:d3:37:02:0a:bb:ed:
f9:46:7a:5c:4d:1e:51:69:23:6e:b1:79:43:96:ee:21:3a:a3:
05:b9:96:be
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYVrwSZPI01sRVcma1mwEVG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkYWQ3YjlmMWM0OWY4ZDEzZTFhNjdhYmNmMmZiYTM1YjBh
NjZkMTgwHhcNMjMwMTAxMDUxNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2VjZDAzYWVmNDU5ZjhlMGZmOGUwZGZiZjk4YjBjZjMxOGE2MGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgyg9rXkJkN3u8F7LEU83kO6SlnQ
owJSvTJ9nBhDw3L5Caonp9vM8sGsedLxD7eU4TUGyYThMgaqJzfApozCJlB2btC/
WKMUP7OnZLfiJ0CEuYyzNYZ64KH3kDaqOyJ1Na3DUp9BJB5361bKDPzcqdjXXjRF
zTcd853dHsTDl57Dudgm9ISxWuI2Eo6eCGwoRiUE5XBUhZfwh4vdxkn/nPAmpHp3
lQ8Csz3wwOPp88B1DNLU9cymXqnOsa9OC0DVvwjF03ErF4nNGtzqwJX2Xktx7rjh
LhG09Hogwq+hy5YGmJydu/35nyY+amonuiysQbtjKLH9TZovS/z568u6TQIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFBPs0DrvRZ+OD/jg37+YsM8ximC6MB8GA1UdIwQY
MBaAFB2te58cSfjRPhpnq88vujWwpm0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQt
NWViZDhlYWVlMmM2LzEvRS16UU91OUZuNDRQLU9EZnY1aXd6ekdLWUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS8zYzM5ZjAtN2U5Ny00ZWY3LTg5NDQtNWViZDhlYWVlMmM2
LzEvSGExN254eEotTkUtR21lcnp5LTZOYkNtYlJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBWaoAwQE
bUrwAwQDsAxoAwQCuSBIAwQCuTCkMA0EAgACMAcDBQAqABwQMA0GCSqGSIb3DQEB
CwUAA4IBAQB7Z1sFnNRV2URSrWb196igeoTawahA6gXZvzsPnyxf8ylTQ4XkFYkA
+3LWOSt9OTF8UYevawHuW8eY0YiLo2ReJE53nKEY+bWZwryTMuhFPtU7w6eRbSgl
/D0WzqHMWWhB7Kdz/Qn4iEIbXkJgyOw9AJsAU3oExe0LvthhTvPn0pI2XDJWTELe
PYegNy1bXJbPIWfK82ziKwx/vRA1N/Z5QKl6ZppAy58Ew26e8k4tqv9oa0s/AeuS
dpMF/e/Sv1onOk2z7Mvytbwu9QdxCxIOgduBYYRNPpgaa9fNeLbVzFReC0TTNwIK
u+35RnpcTR5RaSNusXlDlu4hOqMFuZa+
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:04 2024 by rpki-client on console-ams.rpki-client.org