Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/5gWaXWNj9QKnhu-pmSuVOD8lhZs.roa
File: 5gWaXWNj9QKnhu-pmSuVOD8lhZs.roa (raw, json)
Hash identifier: wuh7R/rl6/PmH0N5TsqPowyxcih75cIj057jKZa1XdY=
Subject key identifier: E6:05:9A:5D:63:63:F5:02:A7:86:EF:A9:99:2B:95:38:3F:25:85:9B
Certificate issuer: /CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Certificate serial: 0187134ED7A5EFC29FA6ABCD79C8CF7A0DEE
Authority key identifier: E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/5gWaXWNj9QKnhu-pmSuVOD8lhZs.roa
Signing time: Fri 24 Mar 2023 11:09:06 +0000
ROA not before: Fri 24 Mar 2023 11:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17098
IP address blocks: 45.141.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:13:4e:d7:a5:ef:c2:9f:a6:ab:cd:79:c8:cf:7a:0d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c2b834fbc91af0ec6b1d34fd64054d2269a1fd
Validity
Not Before: Mar 24 11:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6059a5d6363f502a786efa9992b95383f25859b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d6:71:f4:b1:85:be:09:dc:2a:2b:13:ad:df:
25:ed:27:d0:35:02:fb:aa:e2:03:a0:d2:f7:99:d6:
51:62:f1:03:42:63:6b:a7:0c:fd:11:1b:c0:cf:9e:
70:31:1d:84:ec:10:11:dd:2d:4e:79:a1:8d:f3:bc:
61:b1:6a:d3:88:6c:5e:f8:91:f6:63:9b:c0:f5:53:
b4:2c:da:dc:91:d1:9e:cc:f9:ac:2f:19:4c:fe:df:
3e:d6:98:7b:5d:58:7c:2e:c7:a7:ca:af:29:47:21:
8d:7c:69:2c:9a:b7:ba:71:50:e8:fa:66:5d:6a:1c:
08:05:c0:69:74:dc:f8:51:72:7a:cf:02:75:74:94:
08:b5:54:fc:52:37:18:20:2e:f5:b0:d2:aa:3c:e0:
25:a8:a3:fb:a3:6d:d8:93:13:1c:91:03:56:d4:b2:
e1:ed:c3:76:9b:d4:ea:af:05:5b:a1:c0:e7:e2:d8:
c8:35:e6:78:24:9a:19:23:94:fa:02:33:b3:4b:de:
5c:3f:57:9c:02:aa:ec:26:f1:56:cb:61:2d:96:4b:
c0:cf:66:3a:1f:6c:7e:e1:d2:6e:b0:35:67:4f:a7:
c5:dc:5e:45:01:e9:30:ec:7e:15:a2:a6:c8:a8:e6:
fb:99:07:d7:4e:49:7a:30:78:69:99:5a:ca:77:27:
1c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:05:9A:5D:63:63:F5:02:A7:86:EF:A9:99:2B:95:38:3F:25:85:9B
X509v3 Authority Key Identifier:
keyid:E2:C2:B8:34:FB:C9:1A:F0:EC:6B:1D:34:FD:64:05:4D:22:69:A1:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sK4NPvJGvDsax00_WQFTSJpof0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/5gWaXWNj9QKnhu-pmSuVOD8lhZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/3f249b-e836-41b4-9a3a-994806f081f0/1/4sK4NPvJGvDsax00_WQFTSJpof0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.129.0/24
Signature Algorithm: sha256WithRSAEncryption
50:88:56:d4:24:b9:74:2a:7f:60:b6:8d:1c:62:e5:6a:f6:17:
9b:f4:7b:2d:1b:94:09:ed:cd:a7:f5:f5:06:90:46:18:40:0e:
29:56:4c:b0:9c:62:26:97:ec:94:02:8e:bd:45:65:98:46:26:
04:4e:71:bc:bb:a3:5d:58:57:9c:b0:d8:89:54:9f:b7:0b:7e:
d2:c0:ee:76:19:80:29:e9:36:e4:94:1f:30:09:4c:d5:4d:51:
28:91:da:1a:f3:5b:fd:8d:dc:70:d6:04:e5:73:31:90:5e:e8:
23:ea:99:4d:33:5b:d7:6b:4b:0a:59:da:eb:00:c1:23:c7:04:
e8:7e:59:95:3f:2e:c8:a1:4f:ab:46:5b:58:22:de:92:80:f9:
d2:b3:f3:18:1a:43:a8:ae:28:a0:fb:c3:95:81:4a:fe:da:4b:
49:5a:6f:b9:c2:d7:fe:06:d2:33:04:dd:22:70:b2:43:66:cc:
a1:1f:68:b3:e9:81:9f:a5:25:bd:79:d1:de:e8:72:8b:9b:96:
bd:c6:31:df:32:67:8b:89:a7:96:30:12:0e:52:e0:89:20:5f:
8c:91:ca:92:ea:1e:ad:7e:3b:08:6c:da:03:e1:13:b9:16:bf:
55:4a:80:3a:ec:58:c1:f1:6a:ab:6a:e2:c7:2c:31:d5:6f:51:
7c:75:02:c3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcTTtel78KfpqvNecjPeg3uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzJiODM0ZmJjOTFhZjBlYzZiMWQzNGZkNjQwNTRkMjI2
OWExZmQwHhcNMjMwMzI0MTEwOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjA1OWE1ZDYzNjNmNTAyYTc4NmVmYTk5OTJiOTUzODNmMjU4NTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNZx9LGFvgncKisTrd8l7SfQNQL7
quIDoNL3mdZRYvEDQmNrpwz9ERvAz55wMR2E7BAR3S1OeaGN87xhsWrTiGxe+JH2
Y5vA9VO0LNrckdGezPmsLxlM/t8+1ph7XVh8Lsenyq8pRyGNfGksmre6cVDo+mZd
ahwIBcBpdNz4UXJ6zwJ1dJQItVT8UjcYIC71sNKqPOAlqKP7o23YkxMckQNW1LLh
7cN2m9TqrwVbocDn4tjINeZ4JJoZI5T6AjOzS95cP1ecAqrsJvFWy2EtlkvAz2Y6
H2x+4dJusDVnT6fF3F5FAekw7H4VoqbIqOb7mQfXTkl6MHhpmVrKdyccOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYFml1jY/UCp4bvqZkrlTg/JYWbMB8GA1UdIwQY
MBaAFOLCuDT7yRrw7GsdNP1kBU0iaaH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2Et
OTk0ODA2ZjA4MWYwLzEvNWdXYVhXTmo5UUtuaHUtcG1TdVZPRDhsaFpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8zZjI0OWItZTgzNi00MWI0LTlhM2EtOTk0ODA2ZjA4MWYw
LzEvNHNLNE5QdkpHdkRzYXgwMF9XUUZUU0pwb2YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALY2BMA0G
CSqGSIb3DQEBCwUAA4IBAQBQiFbUJLl0Kn9gto0cYuVq9heb9HstG5QJ7c2n9fUG
kEYYQA4pVkywnGIml+yUAo69RWWYRiYETnG8u6NdWFecsNiJVJ+3C37SwO52GYAp
6TbklB8wCUzVTVEokdoa81v9jdxw1gTlczGQXugj6plNM1vXa0sKWdrrAMEjxwTo
flmVPy7IoU+rRltYIt6SgPnSs/MYGkOoriig+8OVgUr+2ktJWm+5wtf+BtIzBN0i
cLJDZsyhH2iz6YGfpSW9edHe6HKLm5a9xjHfMmeLiaeWMBIOUuCJIF+MkcqS6h6t
fjsIbNoD4RO5Fr9VSoA67FjB8WqrauLHLDHVb1F8dQLD
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:39 2024 by rpki-client on console-ams.rpki-client.org