Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/PxL33P4WbhlhTiZCl4Y7_Q5mNAI.roa
File: PxL33P4WbhlhTiZCl4Y7_Q5mNAI.roa (raw, json)
Hash identifier: 2hFLCMYO3mmK0YokoR4c07sewIleZ74VAgPkU6DBrzE=
Subject key identifier: 3F:12:F7:DC:FE:16:6E:19:61:4E:26:42:97:86:3B:FD:0E:66:34:02
Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Certificate serial: 018570B0893D5194AB3BB123907C215C7FC5
Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/PxL33P4WbhlhTiZCl4Y7_Q5mNAI.roa
Signing time: Mon 02 Jan 2023 04:14:55 +0000
ROA not before: Mon 02 Jan 2023 04:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208938
IP address blocks: 82.193.86.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:89:3d:51:94:ab:3b:b1:23:90:7c:21:5c:7f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2
Validity
Not Before: Jan 2 04:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f12f7dcfe166e19614e264297863bfd0e663402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:54:6c:ac:cf:aa:5c:b5:41:81:5b:94:0e:
ab:15:98:97:8f:68:c6:26:1a:6e:d1:a1:9e:13:ec:
fb:f6:7f:60:bd:a8:6d:d2:e5:e9:58:41:ca:f7:6a:
b9:f1:cf:cd:8b:46:2c:f6:b9:84:59:0c:ea:e1:39:
2d:b0:3a:2e:ee:d8:90:e8:b3:60:82:ef:bc:0d:e7:
f1:b0:91:ca:b5:68:d5:8e:62:cd:be:18:48:0a:db:
a9:72:40:5d:f8:ab:5a:5f:d5:cf:7b:bb:10:85:5a:
92:13:f9:48:b3:66:26:b0:1d:32:54:72:c1:95:ff:
de:da:fe:54:d7:a6:5b:00:f3:e7:ff:ac:1e:8b:3b:
79:57:1e:53:7a:7c:54:fd:4f:84:c2:a9:47:82:19:
ed:86:28:e9:0a:71:5b:65:fe:0c:70:9c:fa:31:53:
86:dc:d6:99:fa:78:07:16:05:91:53:c5:08:f7:64:
c4:d5:ab:34:43:27:f6:fe:ab:ed:29:a0:4b:78:11:
d2:c4:8d:a4:2b:07:91:5d:9d:68:9e:d6:85:ae:6d:
22:53:a5:c5:64:88:a3:e5:b5:f5:65:dc:9e:b6:42:
ad:70:16:f4:c3:6b:df:ce:72:3b:8e:da:c3:28:32:
55:53:a7:3f:19:29:a0:bc:a5:5d:ff:63:5b:c7:e6:
2c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:12:F7:DC:FE:16:6E:19:61:4E:26:42:97:86:3B:FD:0E:66:34:02
X509v3 Authority Key Identifier:
keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/PxL33P4WbhlhTiZCl4Y7_Q5mNAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.193.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:52:e2:2a:82:57:7d:42:a4:eb:c9:7c:70:6e:30:9e:5d:2d:
9c:76:39:13:99:02:54:3b:ef:7a:e6:78:cb:c4:68:a9:22:11:
e3:e1:2f:89:86:fa:bc:d8:f5:e6:b6:95:b0:c4:71:4a:f6:96:
3b:aa:91:27:72:14:a1:56:75:b1:2a:63:8e:3d:75:34:2f:5e:
6b:d9:a0:46:db:01:55:57:89:af:f7:fb:34:12:78:36:ff:7c:
1c:2d:1c:0b:80:0e:90:a7:87:81:30:cf:56:e1:4d:b5:46:63:
e4:be:ad:81:38:a4:5a:d0:27:98:7f:48:7b:fb:86:cb:f9:38:
bc:61:7c:f2:9d:e9:ff:85:04:00:ce:60:02:25:aa:2d:46:8a:
a2:43:f0:8d:d1:07:47:86:cd:42:d8:90:43:5b:a3:e6:90:50:
e6:a0:38:d9:69:e0:89:8f:c9:52:c5:b3:3a:ad:4c:db:0a:24:
ef:dd:9f:05:4d:e4:c7:6b:dc:3f:89:a0:7c:e7:31:46:32:31:
da:aa:d1:f9:67:72:38:58:a2:38:5f:2c:85:43:41:3c:9a:02:
51:94:cf:6f:05:6d:75:b9:1c:17:bc:2c:17:f2:96:5f:b6:8b:
a7:aa:1b:ab:05:db:69:b9:57:88:5b:eb:29:9f:6c:66:17:fb:
af:5d:ca:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwsIk9UZSrO7EjkHwhXH/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz
NzQ5ZTIwHhcNMjMwMTAyMDQxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjEyZjdkY2ZlMTY2ZTE5NjE0ZTI2NDI5Nzg2M2JmZDBlNjYzNDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNxUbKzPqly1QYFblA6rFZiXj2jG
Jhpu0aGeE+z79n9gvaht0uXpWEHK92q58c/Ni0Ys9rmEWQzq4TktsDou7tiQ6LNg
gu+8DefxsJHKtWjVjmLNvhhICtupckBd+KtaX9XPe7sQhVqSE/lIs2YmsB0yVHLB
lf/e2v5U16ZbAPPn/6weizt5Vx5TenxU/U+EwqlHghnthijpCnFbZf4McJz6MVOG
3NaZ+ngHFgWRU8UI92TE1as0Qyf2/qvtKaBLeBHSxI2kKweRXZ1ontaFrm0iU6XF
ZIij5bX1ZdyetkKtcBb0w2vfznI7jtrDKDJVU6c/GSmgvKVd/2Nbx+Ys/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD8S99z+Fm4ZYU4mQpeGO/0OZjQCMB8GA1UdIwQY
MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvUHhMMzNQNFdiaGxoVGlaQ2w0WTdfUTVtTkFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsFWMA0G
CSqGSIb3DQEBCwUAA4IBAQA/UuIqgld9QqTryXxwbjCeXS2cdjkTmQJUO+965njL
xGipIhHj4S+Jhvq82PXmtpWwxHFK9pY7qpEnchShVnWxKmOOPXU0L15r2aBG2wFV
V4mv9/s0Eng2/3wcLRwLgA6Qp4eBMM9W4U21RmPkvq2BOKRa0CeYf0h7+4bL+Ti8
YXzynen/hQQAzmACJaotRoqiQ/CN0QdHhs1C2JBDW6PmkFDmoDjZaeCJj8lSxbM6
rUzbCiTv3Z8FTeTHa9w/iaB85zFGMjHaqtH5Z3I4WKI4XyyFQ0E8mgJRlM9vBW11
uRwXvCwX8pZftounqhurBdtpuVeIW+spn2xmF/uvXco4
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:06 2024 by rpki-client on console-ams.rpki-client.org