Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/7P5rQNa6-RDeq-WqRUSdZEFsruk.roa
File: 7P5rQNa6-RDeq-WqRUSdZEFsruk.roa (raw, json)
Hash identifier: 0uT7tfbxnhpCWGVVmFa+K2ks90cHKrJX/EEFnBdTb/0=
Subject key identifier: EC:FE:6B:40:D6:BA:F9:10:DE:AB:E5:AA:45:44:9D:64:41:6C:AE:E9
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 01895049A660CD8759B9FABD89D97071F6A7
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/7P5rQNa6-RDeq-WqRUSdZEFsruk.roa
Signing time: Thu 13 Jul 2023 17:25:51 +0000
ROA not before: Thu 13 Jul 2023 17:25:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212165
IP address blocks: 5.42.90.0/24 maxlen: 24
5.42.91.0/24 maxlen: 24
5.42.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:50:49:a6:60:cd:87:59:b9:fa:bd:89:d9:70:71:f6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jul 13 17:25:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ecfe6b40d6baf910deabe5aa45449d64416caee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:96:29:6f:f8:2c:3f:73:7e:3c:e5:33:b0:1c:
ba:0c:8f:e0:37:62:93:59:25:f5:3a:1f:ed:d1:fa:
71:34:dd:26:df:6c:4c:14:e3:b5:95:19:a8:9b:36:
63:fc:43:7f:5b:d2:2c:90:49:6f:50:94:88:c3:30:
54:b6:6b:f5:24:2c:9d:4c:d9:46:e2:70:db:13:72:
dd:39:dd:6b:09:79:a8:94:de:50:6b:77:84:3b:9e:
90:72:0c:f3:e8:aa:d9:14:b6:04:81:0d:79:99:ee:
7e:50:c7:0f:45:6c:6e:5c:97:e9:0a:4c:da:75:a7:
8b:95:5f:5c:cc:06:bb:30:c2:28:6c:23:31:7f:f6:
34:af:ec:2f:33:ec:db:71:64:38:e6:89:10:08:02:
e4:12:8d:9f:71:68:17:31:35:65:41:e1:70:96:7f:
cd:2e:5b:c5:3a:da:1e:09:68:95:e5:39:a8:50:08:
51:24:97:fb:69:6e:d3:7a:ad:a5:44:a2:30:84:61:
94:c4:02:44:8f:68:dc:a5:63:c3:10:1f:40:a9:35:
83:48:81:2a:f0:da:6f:66:38:bf:f0:7a:00:f3:8f:
24:09:f6:74:84:0f:9d:86:02:38:92:fe:5d:47:ca:
b6:a9:1c:27:e2:97:eb:5e:9e:7b:05:2e:e5:93:fd:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:FE:6B:40:D6:BA:F9:10:DE:AB:E5:AA:45:44:9D:64:41:6C:AE:E9
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/7P5rQNa6-RDeq-WqRUSdZEFsruk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.90.0/23
5.42.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:f3:6a:4c:ff:08:c3:5d:23:87:bf:d4:b1:dc:c6:c3:d2:b4:
8c:cb:0b:3d:32:5a:5f:93:6a:bc:33:f6:14:bd:ca:2b:f0:ef:
16:4f:42:f5:ce:f8:45:eb:ed:8d:f6:7e:bc:36:f3:2b:10:5e:
06:4b:9c:08:a4:0b:9b:5e:5b:f1:78:ec:e9:59:98:a4:d4:4e:
2d:df:b7:88:81:0c:de:c8:34:ee:5b:26:c6:7c:2a:85:be:70:
3e:f3:a8:ab:0a:af:fb:e1:da:02:92:a4:9c:43:06:d1:9d:c0:
40:4e:1f:38:26:fa:fc:74:0c:d7:65:f3:1f:26:c2:e2:fe:aa:
9a:fb:b9:ec:fc:94:aa:8c:37:dd:a6:b4:34:e3:2c:49:04:c8:
3e:f4:ef:85:c9:c8:fb:8f:5f:5f:f2:68:89:20:e1:84:a3:6c:
33:d8:52:1b:26:3a:95:38:72:da:2d:9f:5e:43:30:45:0e:27:
a4:64:52:23:a5:1d:4e:52:e7:2a:90:c1:29:7d:ac:25:bb:08:
77:aa:68:ca:de:d3:0d:b8:f0:15:ac:ff:53:c5:d5:0b:15:0a:
26:15:c7:34:11:a6:cf:cd:95:9c:68:4a:49:e8:b6:5f:a1:93:
af:d7:3d:ea:58:1f:95:d9:f0:20:b7:16:d9:ed:28:79:ad:0d:
02:c0:4d:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlQSaZgzYdZufq9idlwcfanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MDYyZjVkZGIxOGY5NmQ3ODQ5MmIzNTM4ZDc3NDVjYzQ3
MTRhMjYwHhcNMjMwNzEzMTcyNTUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2ZlNmI0MGQ2YmFmOTEwZGVhYmU1YWE0NTQ0OWQ2NDQxNmNhZWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJYpb/gsP3N+POUzsBy6DI/gN2KT
WSX1Oh/t0fpxNN0m32xMFOO1lRmomzZj/EN/W9IskElvUJSIwzBUtmv1JCydTNlG
4nDbE3LdOd1rCXmolN5Qa3eEO56Qcgzz6KrZFLYEgQ15me5+UMcPRWxuXJfpCkza
daeLlV9czAa7MMIobCMxf/Y0r+wvM+zbcWQ45okQCALkEo2fcWgXMTVlQeFwln/N
LlvFOtoeCWiV5TmoUAhRJJf7aW7Teq2lRKIwhGGUxAJEj2jcpWPDEB9AqTWDSIEq
8NpvZji/8HoA848kCfZ0hA+dhgI4kv5dR8q2qRwn4pfrXp57BS7lk/28iwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOz+a0DWuvkQ3qvlqkVEnWRBbK7pMB8GA1UdIwQY
MBaAFJYGL13bGPlteEkrNTjXdFzEcUomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmIt
M2ZjYjVmM2YzYzU5LzEvN1A1clFOYTYtUkRlcS1XcVJVU2RaRUZzcnVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMDU5NzUtZGE4ZS00NjBiLTllYmItM2ZjYjVmM2YzYzU5
LzEvbGdZdlhkc1ktVzE0U1NzMU9OZDBYTVJ4U2lZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBBSpaAwQA
BSpdMA0GCSqGSIb3DQEBCwUAA4IBAQCy82pM/wjDXSOHv9Sx3MbD0rSMyws9Mlpf
k2q8M/YUvcor8O8WT0L1zvhF6+2N9n68NvMrEF4GS5wIpAubXlvxeOzpWZik1E4t
37eIgQzeyDTuWybGfCqFvnA+86irCq/74doCkqScQwbRncBATh84Jvr8dAzXZfMf
JsLi/qqa+7ns/JSqjDfdprQ04yxJBMg+9O+Fycj7j19f8miJIOGEo2wz2FIbJjqV
OHLaLZ9eQzBFDiekZFIjpR1OUucqkMEpfawluwh3qmjK3tMNuPAVrP9TxdULFQom
Fcc0EabPzZWcaEpJ6LZfoZOv1z3qWB+V2fAgtxbZ7Sh5rQ0CwE1w
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:22 2024 by rpki-client on console-ams.rpki-client.org