Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/7yvdV4nTTIIvmm_Nz02bTrwDkKw.roa
File: 7yvdV4nTTIIvmm_Nz02bTrwDkKw.roa (raw, json)
Hash identifier: u1OPXn2AJxvZs7aacndFPiS0VYsJuqQfMAJe1W5na/8=
Subject key identifier: EF:2B:DD:57:89:D3:4C:82:2F:9A:6F:CD:CF:4D:9B:4E:BC:03:90:AC
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 018570B088581E2E3C101D472407EB4414BE
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/7yvdV4nTTIIvmm_Nz02bTrwDkKw.roa
Signing time: Mon 02 Jan 2023 04:14:55 +0000
ROA not before: Mon 02 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62453
IP address blocks: 82.193.95.0/24 maxlen: 24
82.193.94.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Mar 2023 12:44:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:88:58:1e:2e:3c:10:1d:47:24:07:eb:44:14:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 2 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2bdd5789d34c822f9a6fcdcf4d9b4ebc0390ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:a2:47:34:f8:46:17:51:c7:2e:4b:56:54:
b4:5a:a2:44:94:f9:12:62:39:71:43:eb:0b:8f:1b:
46:6c:f3:f9:16:a0:a3:b1:a1:85:35:fc:c1:19:8e:
75:b6:28:a1:64:a3:26:9f:fc:cc:c3:58:93:83:d9:
00:57:79:87:49:c7:4d:2b:e4:97:88:fb:9c:9f:4b:
f6:50:1b:dc:e9:d1:fd:4e:ff:4b:13:8f:4b:b9:26:
3a:c3:be:b8:ee:3a:b6:b8:f9:28:9e:1e:2a:46:a1:
45:8a:a4:58:24:f3:48:25:71:f8:1f:52:a1:46:de:
30:cb:9d:b6:bc:38:d0:a7:3f:0c:e5:6d:8f:26:e3:
13:71:8e:c7:7d:5b:6a:c0:00:63:c3:fe:ce:d7:8f:
9e:61:b8:1e:01:e6:3e:a4:17:34:47:95:19:de:ec:
3e:48:25:e2:a7:36:fc:ee:62:cf:00:88:a4:6f:e0:
be:53:00:7f:bc:cf:a8:60:91:bd:d2:cc:62:c2:08:
5c:41:33:98:29:45:05:13:ff:a3:1b:5c:84:08:3d:
82:95:c0:35:73:70:79:2c:be:dc:3c:69:77:25:d9:
41:7a:bb:d9:de:3d:8a:17:fc:55:9a:7d:49:60:79:
97:b8:02:35:00:10:c6:0e:24:a9:1a:05:f7:d7:bf:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2B:DD:57:89:D3:4C:82:2F:9A:6F:CD:CF:4D:9B:4E:BC:03:90:AC
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/7yvdV4nTTIIvmm_Nz02bTrwDkKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:c2:02:d0:98:37:17:57:17:10:e2:48:dd:76:74:d9:c0:d5:
da:35:42:98:86:6f:0d:78:97:a3:83:91:9f:dd:40:83:e6:5c:
7b:f9:73:eb:90:b0:8e:c6:7f:aa:89:47:11:06:47:08:db:ca:
ab:02:e3:77:d6:70:37:5c:05:54:13:b2:24:88:e6:cb:d7:28:
a6:3d:b5:e2:b4:ac:84:bb:a0:bf:7f:a8:a5:23:6a:dd:07:a7:
c0:27:90:d0:76:33:90:bf:21:5a:99:d6:09:83:22:5b:39:ec:
4e:41:1c:ed:06:6b:59:52:d5:bf:3e:f5:f0:0a:eb:59:82:65:
26:5d:3e:4b:28:77:95:d4:e0:bf:a3:f3:f8:99:8d:12:1e:d0:
81:37:a9:62:5c:44:0f:ab:f4:e1:54:73:d0:24:07:6b:be:d2:
65:f2:00:8e:49:41:80:be:9f:e8:a6:6d:e2:df:5a:72:c6:45:
0c:36:bb:96:e8:10:9a:82:2b:40:ab:af:9a:c3:62:03:f5:a6:
dd:76:1d:b2:61:01:60:79:82:57:e0:58:5b:be:b5:ef:7a:81:
da:04:1d:ec:a9:dc:9a:85:83:42:aa:98:5e:d6:77:d7:0f:fe:
9d:bc:ce:dc:e3:1b:54:85:5d:cc:94:da:03:62:3f:f0:b1:32:
5e:8a:35:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsIhYHi48EB1HJAfrRBS+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz
NzQ5ZTIwHhcNMjMwMTAyMDQxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjJiZGQ1Nzg5ZDM0YzgyMmY5YTZmY2RjZjRkOWI0ZWJjMDM5MGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghOiRzT4RhdRxy5LVlS0WqJElPkS
YjlxQ+sLjxtGbPP5FqCjsaGFNfzBGY51tiihZKMmn/zMw1iTg9kAV3mHScdNK+SX
iPucn0v2UBvc6dH9Tv9LE49LuSY6w7647jq2uPkonh4qRqFFiqRYJPNIJXH4H1Kh
Rt4wy522vDjQpz8M5W2PJuMTcY7HfVtqwABjw/7O14+eYbgeAeY+pBc0R5UZ3uw+
SCXipzb87mLPAIikb+C+UwB/vM+oYJG90sxiwghcQTOYKUUFE/+jG1yECD2ClcA1
c3B5LL7cPGl3JdlBervZ3j2KF/xVmn1JYHmXuAI1ABDGDiSpGgX3178tVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO8r3VeJ00yCL5pvzc9Nm068A5CsMB8GA1UdIwQY
MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvN3l2ZFY0blRUSUl2bW1fTnowMmJUcndEa0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBUsFeMA0G
CSqGSIb3DQEBCwUAA4IBAQAewgLQmDcXVxcQ4kjddnTZwNXaNUKYhm8NeJejg5Gf
3UCD5lx7+XPrkLCOxn+qiUcRBkcI28qrAuN31nA3XAVUE7IkiObL1yimPbXitKyE
u6C/f6ilI2rdB6fAJ5DQdjOQvyFamdYJgyJbOexOQRztBmtZUtW/PvXwCutZgmUm
XT5LKHeV1OC/o/P4mY0SHtCBN6liXEQPq/ThVHPQJAdrvtJl8gCOSUGAvp/opm3i
31pyxkUMNruW6BCagitAq6+aw2ID9abddh2yYQFgeYJX4FhbvrXveoHaBB3sqdya
hYNCqphe1nfXD/6dvM7c4xtUhV3MlNoDYj/wsTJeijVa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:06 2024 by rpki-client on console-ams.rpki-client.org