Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/5Cn6mLv5RZjvUVAcBu0Rt4_n88U.roa
File: 5Cn6mLv5RZjvUVAcBu0Rt4_n88U.roa (raw, json)
Hash identifier: 1yyJAag0o0XONG1vDgNGQgnFqDQYJ9O11o2lTVfNpxI=
Subject key identifier: E4:29:FA:98:BB:F9:45:98:EF:51:50:1C:06:ED:11:B7:8F:E7:F3:C5
Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Certificate serial: 018673D88E958DD509C036D9A08F10D4707A
Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/5Cn6mLv5RZjvUVAcBu0Rt4_n88U.roa
Signing time: Tue 21 Feb 2023 12:00:17 +0000
ROA not before: Tue 21 Feb 2023 12:00:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205449
IP address blocks: 185.218.88.0/22 maxlen: 22
2a0c:f400:53::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 23 Feb 2023 19:57:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:d8:8e:95:8d:d5:09:c0:36:d9:a0:8f:10:d4:70:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98
Validity
Not Before: Feb 21 12:00:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e429fa98bbf94598ef51501c06ed11b78fe7f3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:39:aa:72:8c:51:30:c5:76:29:77:3a:75:e5:
25:be:06:b2:a0:40:01:37:4c:e5:d2:4d:95:f2:78:
10:41:42:1d:d0:f1:5d:91:2b:4b:15:18:b1:77:47:
03:df:a4:35:a2:59:5f:a5:a3:fe:b7:b7:a1:5e:cf:
71:fa:1e:f6:c9:d3:34:67:69:54:03:3a:3b:97:80:
37:77:3b:e4:82:7c:36:f2:f5:db:0a:4c:87:9a:91:
99:68:0d:f7:16:db:bd:a8:37:10:73:e7:80:5a:1c:
58:b5:5e:6e:8e:8d:72:74:8e:b7:86:6f:68:b5:e4:
32:4b:ba:ac:3b:61:bf:26:c9:80:f0:6a:77:66:16:
b4:01:7f:8b:bf:5c:70:85:77:df:1b:c9:6a:ee:d6:
2c:d3:50:37:99:c6:8e:2b:93:8f:67:f6:aa:4b:6a:
48:04:a9:d0:e8:e1:9b:71:a8:3d:d1:36:c6:50:f9:
ac:c8:6c:68:b0:30:eb:bb:26:4b:f0:f5:12:15:c8:
a3:06:46:46:d1:4c:7a:45:1b:2e:02:2e:df:cc:9e:
10:22:ae:ea:92:df:c7:59:08:f3:9c:34:90:42:72:
d7:31:f9:b9:86:e7:b4:bf:64:77:01:19:f3:ac:c3:
76:71:d4:ba:79:43:46:d3:25:ec:47:5d:30:ad:5a:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:29:FA:98:BB:F9:45:98:EF:51:50:1C:06:ED:11:B7:8F:E7:F3:C5
X509v3 Authority Key Identifier:
keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/5Cn6mLv5RZjvUVAcBu0Rt4_n88U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.88.0/22
IPv6:
2a0c:f400:53::/48
Signature Algorithm: sha256WithRSAEncryption
60:a5:cc:e3:13:41:0e:64:b9:b7:19:83:47:38:a2:94:3e:d1:
d3:5c:5f:24:71:23:8b:b1:90:43:2f:f5:c0:f6:ae:4e:0e:fb:
3f:f4:d2:4a:42:b0:24:51:e7:37:36:43:c3:6c:72:c4:7a:53:
9d:d6:2b:e2:39:e7:9c:24:9c:c9:db:bf:34:45:6b:49:40:2a:
4f:25:31:50:da:2a:6c:c1:9d:f5:ab:c5:15:6f:17:74:73:43:
61:56:4f:da:54:02:fd:64:91:2c:ee:1e:2b:fa:a8:54:a6:51:
a0:52:76:05:d0:65:66:5b:00:b7:30:07:69:e7:ff:e9:b3:b7:
f5:c8:44:13:af:df:ab:15:ba:0a:a8:bf:2c:a3:be:64:72:78:
7d:4e:6b:8d:8a:a6:a6:78:64:9f:ee:24:f7:c7:9f:a8:77:60:
34:be:77:5f:ab:17:3c:9b:69:8a:5e:db:36:06:02:ed:e9:cd:
40:a5:ae:39:99:39:60:c1:4e:03:19:5e:ca:a2:d7:ed:8c:d1:
c5:64:9f:ff:cb:d9:08:36:1b:5b:9f:80:6a:15:3a:31:ab:52:
10:80:c5:9e:57:9a:ec:18:8c:44:81:e4:0b:d3:c3:16:3e:e4:
6f:fe:66:2e:33:40:9f:ce:eb:00:af:06:9a:86:70:80:eb:d8:
17:ef:ec:86
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYZz2I6VjdUJwDbZoI8Q1HB6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0
NjVkOTgwHhcNMjMwMjIxMTIwMDE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNDI5ZmE5OGJiZjk0NTk4ZWY1MTUwMWMwNmVkMTFiNzhmZTdmM2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDmqcoxRMMV2KXc6deUlvgayoEAB
N0zl0k2V8ngQQUId0PFdkStLFRixd0cD36Q1ollfpaP+t7ehXs9x+h72ydM0Z2lU
Azo7l4A3dzvkgnw28vXbCkyHmpGZaA33Ftu9qDcQc+eAWhxYtV5ujo1ydI63hm9o
teQyS7qsO2G/JsmA8Gp3Zha0AX+Lv1xwhXffG8lq7tYs01A3mcaOK5OPZ/aqS2pI
BKnQ6OGbcag90TbGUPmsyGxosDDruyZL8PUSFcijBkZG0Ux6RRsuAi7fzJ4QIq7q
kt/HWQjznDSQQnLXMfm5hue0v2R3ARnzrMN2cdS6eUNG0yXsR10wrVpEZwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFOQp+pi7+UWY71FQHAbtEbeP5/PFMB8GA1UdIwQY
MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt
MWRlMDBiZDg5MTJjLzEvNUNuNm1MdjVSWmp2VVZBY0J1MFJ0NF9uODhVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj
LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCudpYMA8E
AgACMAkDBwAqDPQAAFMwDQYJKoZIhvcNAQELBQADggEBAGClzOMTQQ5kubcZg0c4
opQ+0dNcXyRxI4uxkEMv9cD2rk4O+z/00kpCsCRR5zc2Q8NscsR6U53WK+I555wk
nMnbvzRFa0lAKk8lMVDaKmzBnfWrxRVvF3RzQ2FWT9pUAv1kkSzuHiv6qFSmUaBS
dgXQZWZbALcwB2nn/+mzt/XIRBOv36sVugqovyyjvmRyeH1Oa42KpqZ4ZJ/uJPfH
n6h3YDS+d1+rFzybaYpe2zYGAu3pzUClrjmZOWDBTgMZXsqi1+2M0cVkn//L2Qg2
G1ufgGoVOjGrUhCAxZ5XmuwYjESB5AvTwxY+5G/+Zi4zQJ/O6wCvBpqGcIDr2Bfv
7IY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:07 2024 by rpki-client on console-ams.rpki-client.org