Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Ln5c5F6JSOhKRxnBAdEXsBH0-aY.roa
File: Ln5c5F6JSOhKRxnBAdEXsBH0-aY.roa (raw, json)
Hash identifier: ItLtpmjeFinVHIpYHSU1tsN50v7AHSq8e9PD4QIYuvo=
Subject key identifier: 2E:7E:5C:E4:5E:89:48:E8:4A:47:19:C1:01:D1:17:B0:11:F4:F9:A6
Certificate issuer: /CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Certificate serial: 01856E01C223B0D0E2FD91D0CFAD21647B4E
Authority key identifier: 29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Ln5c5F6JSOhKRxnBAdEXsBH0-aY.roa
Signing time: Sun 01 Jan 2023 15:44:47 +0000
ROA not before: Sun 01 Jan 2023 15:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57433
IP address blocks: 185.14.92.0/24 maxlen: 24
185.14.93.0/24 maxlen: 24
94.154.51.0/24 maxlen: 24
94.154.49.0/24 maxlen: 24
94.154.50.0/24 maxlen: 24
94.154.48.0/24 maxlen: 24
94.154.48.0/21 maxlen: 24
94.154.52.0/24 maxlen: 24
94.154.53.0/24 maxlen: 24
94.154.54.0/24 maxlen: 24
94.154.55.0/24 maxlen: 24
37.114.32.0/19 maxlen: 24
37.114.37.0/24 maxlen: 24
37.114.32.0/24 maxlen: 24
37.114.58.0/24 maxlen: 24
43.251.161.0/24 maxlen: 24
43.251.162.0/24 maxlen: 24
43.251.160.0/24 maxlen: 24
43.251.163.0/24 maxlen: 24
176.100.32.0/21 maxlen: 21
176.100.32.0/24 maxlen: 24
176.100.39.0/24 maxlen: 24
2a00:ccc1::/48 maxlen: 48
2a00:ccc0::/32 maxlen: 32
2a00:ccc1:4::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:01:c2:23:b0:d0:e2:fd:91:d0:cf:ad:21:64:7b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296593b747e76a56492511bb3612e4d5e4cbe7ec
Validity
Not Before: Jan 1 15:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2e7e5ce45e8948e84a4719c101d117b011f4f9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:81:5e:1c:73:3a:31:02:f4:dc:ac:2e:9c:7c:
30:90:fb:3c:c6:9e:ee:15:8e:38:70:af:78:21:09:
3a:f7:e5:8e:c7:5e:7c:77:6b:18:43:d6:45:0b:fd:
5c:99:25:b4:e8:78:6d:03:88:2e:51:bf:40:e4:d7:
0a:ee:40:5d:b1:19:4b:1b:ed:e6:c4:f4:74:2b:28:
65:f6:df:8c:9c:0c:79:07:af:40:68:6b:42:5d:e6:
4b:ed:60:37:d1:5e:6e:4f:29:9f:13:af:6b:0a:fb:
e2:c0:80:6f:f9:37:0b:ad:b5:16:eb:8f:c4:a2:46:
31:f5:09:20:d1:85:d7:c5:9b:92:e2:68:32:ed:26:
ac:cb:b4:07:55:71:d2:93:83:2a:30:fa:46:63:1b:
1a:a1:ad:f9:0a:d2:88:99:49:d9:31:64:ee:a6:21:
5a:ae:44:5d:38:8e:af:f2:f9:05:0c:e4:30:74:66:
8f:cf:2b:1b:dc:e4:aa:24:2f:66:e7:03:63:17:79:
f3:c3:69:27:47:74:3f:68:da:e2:d0:4a:59:c2:ea:
62:e4:20:c2:99:7e:6c:2d:be:be:5c:28:cd:19:98:
67:aa:72:9a:df:07:c8:b8:b9:43:d4:1f:1d:66:9a:
f9:83:ae:59:05:21:64:ff:18:b2:70:fa:f3:80:c5:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7E:5C:E4:5E:89:48:E8:4A:47:19:C1:01:D1:17:B0:11:F4:F9:A6
X509v3 Authority Key Identifier:
keyid:29:65:93:B7:47:E7:6A:56:49:25:11:BB:36:12:E4:D5:E4:CB:E7:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWWTt0fnalZJJRG7NhLk1eTL5-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/Ln5c5F6JSOhKRxnBAdEXsBH0-aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c58bdc-14e7-499c-9d9c-1b7cbb08d73f/1/KWWTt0fnalZJJRG7NhLk1eTL5-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.114.32.0/19
43.251.160.0/22
94.154.48.0/21
176.100.32.0/21
185.14.92.0/23
IPv6:
2a00:ccc0::-2a00:ccc1:0:ffff:ffff:ffff:ffff:ffff
2a00:ccc1:4::/48
Signature Algorithm: sha256WithRSAEncryption
b3:6f:9a:8a:e0:17:a9:f2:01:15:cd:a2:a7:8d:7f:26:c6:d9:
b9:b1:2b:d5:83:d3:d6:c7:78:dc:fb:7a:c1:c0:74:bb:d4:4c:
87:12:62:7a:f8:9d:c4:53:1d:c3:72:ad:8e:60:6a:4f:41:39:
a6:40:2a:4f:da:a3:c4:69:04:8f:46:7d:c1:dd:9e:60:50:48:
df:4d:6a:f0:08:5d:de:c8:f1:10:40:23:80:e9:df:36:00:42:
9a:8c:2c:8d:d4:d7:bc:74:5f:b1:67:6e:71:f3:d0:e7:ea:34:
07:95:e8:cb:40:29:65:e8:fa:0b:85:63:e4:b7:54:d7:65:01:
0b:93:87:d0:36:c2:8d:73:0f:c4:c8:9d:83:0f:6d:06:a0:6e:
79:0e:af:c7:4b:3f:78:1d:70:96:e8:79:d3:e8:96:42:69:7e:
e9:02:0f:a1:50:9f:92:de:d6:1c:b4:ee:5e:26:f5:d1:5b:8b:
f3:4c:02:9d:e8:f2:23:19:28:61:7f:a2:21:f1:1e:cc:0e:aa:
aa:de:30:7e:2b:ee:38:c3:36:3f:8c:fb:02:76:3a:d2:dc:19:
19:1a:be:2a:f1:e9:75:a8:bf:08:51:e9:5c:28:99:7b:3c:54:
7c:a8:78:06:72:f3:e3:d8:76:44:82:07:97:ae:de:78:2a:1e:
b0:0e:9d:11
-----BEGIN CERTIFICATE-----
MIIFODCCBCCgAwIBAgISAYVuAcIjsNDi/ZHQz60hZHtOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NjU5M2I3NDdlNzZhNTY0OTI1MTFiYjM2MTJlNGQ1ZTRj
YmU3ZWMwHhcNMjMwMTAxMTU0NDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTdlNWNlNDVlODk0OGU4NGE0NzE5YzEwMWQxMTdiMDExZjRmOWE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84FeHHM6MQL03KwunHwwkPs8xp7u
FY44cK94IQk69+WOx158d2sYQ9ZFC/1cmSW06HhtA4guUb9A5NcK7kBdsRlLG+3m
xPR0Kyhl9t+MnAx5B69AaGtCXeZL7WA30V5uTymfE69rCvviwIBv+TcLrbUW64/E
okYx9Qkg0YXXxZuS4mgy7Sasy7QHVXHSk4MqMPpGYxsaoa35CtKImUnZMWTupiFa
rkRdOI6v8vkFDOQwdGaPzysb3OSqJC9m5wNjF3nzw2knR3Q/aNri0EpZwupi5CDC
mX5sLb6+XCjNGZhnqnKa3wfIuLlD1B8dZpr5g65ZBSFk/xiycPrzgMXcKwIDAQAB
o4ICRDCCAkAwHQYDVR0OBBYEFC5+XOReiUjoSkcZwQHRF7AR9PmmMB8GA1UdIwQY
MBaAFCllk7dH52pWSSURuzYS5NXky+fsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMt
MWI3Y2JiMDhkNzNmLzEvTG41YzVGNkpTT2hLUnhuQkFkRVhzQkgwLWFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNThiZGMtMTRlNy00OTljLTlkOWMtMWI3Y2JiMDhkNzNm
LzEvS1dXVHQwZm5hbFpKSlJHN05oTGsxZVRMNS13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFoGCCsGAQUFBwEHAQH/BEswSTAkBAIAATAeAwQFJXIgAwQC
K/ugAwQDXpowAwQDsGQgAwQBuQ5cMCEEAgACMBswEAMFBioAzMADBwAqAMzBAAAD
BwAqAMzBAAQwDQYJKoZIhvcNAQELBQADggEBALNvmorgF6nyARXNoqeNfybG2bmx
K9WD09bHeNz7esHAdLvUTIcSYnr4ncRTHcNyrY5gak9BOaZAKk/ao8RpBI9GfcHd
nmBQSN9NavAIXd7I8RBAI4Dp3zYAQpqMLI3U17x0X7FnbnHz0OfqNAeV6MtAKWXo
+guFY+S3VNdlAQuTh9A2wo1zD8TInYMPbQagbnkOr8dLP3gdcJboedPolkJpfukC
D6FQn5Le1hy07l4m9dFbi/NMAp3o8iMZKGF/oiHxHswOqqreMH4r7jjDNj+M+wJ2
OtLcGRkavirx6XWovwhR6VwomXs8VHyoeAZy8+PYdkSCB5eu3ngqHrAOnRE=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:45 2023 by rpki-client on console-ams.rpki-client.org