Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/4kiklxms6NDfSRhQ50M2sM_K9cw.roa
File: 4kiklxms6NDfSRhQ50M2sM_K9cw.roa (raw, json)
Hash identifier: vd6eGxz3gBd6DJWol+NVSRvRp7fyEQNsmXa5oTXaAaU=
Subject key identifier: E2:48:A4:97:19:AC:E8:D0:DF:49:18:50:E7:43:36:B0:CF:CA:F5:CC
Certificate issuer: /CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Certificate serial: 0186B60AB6E0572B3BB16BC435373B37E7AA
Authority key identifier: 25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/4kiklxms6NDfSRhQ50M2sM_K9cw.roa
Signing time: Mon 06 Mar 2023 08:30:00 +0000
ROA not before: Mon 06 Mar 2023 08:30:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202371
IP address blocks: 94.185.120.0/24 maxlen: 24
94.185.122.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b6:0a:b6:e0:57:2b:3b:b1:6b:c4:35:37:3b:37:e7:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2588b1b560f998eccd3a6eff40543b59204d67b8
Validity
Not Before: Mar 6 08:30:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e248a49719ace8d0df491850e74336b0cfcaf5cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c2:82:93:13:ae:4c:13:0e:3f:c0:b4:6f:a3:
39:ed:41:d6:38:4d:15:ca:54:f0:13:b2:3c:1a:fd:
8d:25:fd:d1:e2:33:46:4b:c6:d1:71:2d:be:6c:28:
b4:88:96:af:4f:9a:5d:a2:d1:cb:b2:6c:31:bb:81:
30:f3:9f:af:3b:24:b9:04:27:f4:26:06:a4:60:5e:
eb:0a:43:f3:94:b0:7f:eb:6f:15:5e:5e:b4:56:8f:
61:c8:c4:78:21:fb:af:26:d1:ed:0d:6f:d2:b2:4c:
c0:c7:3d:28:ea:02:ce:cb:ac:c2:84:1b:1c:10:e7:
82:a7:72:47:41:d5:47:29:d6:5c:59:01:89:be:1b:
07:69:c1:5b:6d:58:06:56:08:4e:ea:05:3d:77:0d:
72:c9:a9:e4:88:ce:c3:64:0c:48:7f:9d:ad:aa:b1:
91:c2:1b:96:0f:e1:ea:0a:8f:40:3c:d5:39:52:58:
d7:24:02:a8:a1:a6:1f:ce:ec:bd:35:0a:a9:d8:e6:
8e:a0:de:14:1e:e7:1e:2a:16:3f:d6:0e:2f:1d:ec:
c4:6b:c0:ff:de:ef:64:62:54:08:96:b2:f2:d8:94:
fc:8d:ed:4f:dc:f9:56:68:bf:55:de:56:25:3d:eb:
68:d3:86:c7:27:cf:13:5a:92:52:26:ad:9c:cd:46:
3d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:48:A4:97:19:AC:E8:D0:DF:49:18:50:E7:43:36:B0:CF:CA:F5:CC
X509v3 Authority Key Identifier:
keyid:25:88:B1:B5:60:F9:98:EC:CD:3A:6E:FF:40:54:3B:59:20:4D:67:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/4kiklxms6NDfSRhQ50M2sM_K9cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/18d6d5-6c86-42c1-84f1-99a0189888b5/1/JYixtWD5mOzNOm7_QFQ7WSBNZ7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.185.120.0/24
94.185.122.0/24
Signature Algorithm: sha256WithRSAEncryption
01:d2:af:92:c3:bc:00:f7:1b:4b:7c:a2:27:9e:7f:29:56:08:
88:94:b5:e2:25:dd:8b:64:1e:95:bf:a7:5b:8d:5a:26:43:71:
00:b9:42:10:67:2a:f8:13:be:2d:c3:77:bf:09:f9:45:74:9a:
d9:0f:b8:8b:2d:0b:01:f0:ad:e5:e9:48:13:ec:2d:cc:d1:8c:
ec:c5:0a:ae:76:07:8f:a5:51:ff:92:80:f1:24:f7:a9:17:9c:
de:9f:19:f3:9e:e4:01:76:e8:8d:d8:55:f2:3f:79:f1:4c:b9:
c0:39:30:b7:36:57:3c:e2:7d:a9:8f:5c:ca:4e:64:f4:d4:b4:
ef:66:25:8c:d2:76:0f:31:11:86:c8:00:14:ae:ec:48:07:43:
4e:70:6a:e1:64:dc:83:cf:dc:76:1e:7b:4f:9a:26:0c:b3:63:
1c:6c:df:c2:69:73:f4:15:c3:01:d7:3e:5d:9c:03:69:04:da:
ec:65:56:59:56:b5:44:ee:ce:f8:60:db:99:fa:e3:80:46:a8:
35:76:b2:f5:80:d8:10:7d:5f:78:84:ac:95:c9:83:d8:e8:2e:
69:29:d0:fe:ae:3c:5b:3a:ed:00:57:b4:ec:2b:10:22:31:d9:
a7:ab:4c:8f:8c:9f:83:55:ae:23:5e:70:fa:e9:01:5a:5e:44:
b8:25:60:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYa2CrbgVys7sWvENTc7N+eqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1ODhiMWI1NjBmOTk4ZWNjZDNhNmVmZjQwNTQzYjU5MjA0
ZDY3YjgwHhcNMjMwMzA2MDgzMDAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjQ4YTQ5NzE5YWNlOGQwZGY0OTE4NTBlNzQzMzZiMGNmY2FmNWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcKCkxOuTBMOP8C0b6M57UHWOE0V
ylTwE7I8Gv2NJf3R4jNGS8bRcS2+bCi0iJavT5pdotHLsmwxu4Ew85+vOyS5BCf0
JgakYF7rCkPzlLB/628VXl60Vo9hyMR4IfuvJtHtDW/SskzAxz0o6gLOy6zChBsc
EOeCp3JHQdVHKdZcWQGJvhsHacFbbVgGVghO6gU9dw1yyankiM7DZAxIf52tqrGR
whuWD+HqCo9APNU5UljXJAKooaYfzuy9NQqp2OaOoN4UHuceKhY/1g4vHezEa8D/
3u9kYlQIlrLy2JT8je1P3PlWaL9V3lYlPeto04bHJ88TWpJSJq2czUY9TQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOJIpJcZrOjQ30kYUOdDNrDPyvXMMB8GA1UdIwQY
MBaAFCWIsbVg+ZjszTpu/0BUO1kgTWe4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEt
OTlhMDE4OTg4OGI1LzEvNGtpa2x4bXM2TkRmU1JoUTUwTTJzTV9LOWN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8xOGQ2ZDUtNmM4Ni00MmMxLTg0ZjEtOTlhMDE4OTg4OGI1
LzEvSllpeHRXRDVtT3pOT203X1FGUTdXU0JOWjdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrl4AwQA
Xrl6MA0GCSqGSIb3DQEBCwUAA4IBAQAB0q+Sw7wA9xtLfKInnn8pVgiIlLXiJd2L
ZB6Vv6dbjVomQ3EAuUIQZyr4E74tw3e/CflFdJrZD7iLLQsB8K3l6UgT7C3M0Yzs
xQqudgePpVH/koDxJPepF5zenxnznuQBduiN2FXyP3nxTLnAOTC3Nlc84n2pj1zK
TmT01LTvZiWM0nYPMRGGyAAUruxIB0NOcGrhZNyDz9x2HntPmiYMs2McbN/CaXP0
FcMB1z5dnANpBNrsZVZZVrVE7s74YNuZ+uOARqg1drL1gNgQfV94hKyVyYPY6C5p
KdD+rjxbOu0AV7TsKxAiMdmnq0yPjJ+DVa4jXnD66QFaXkS4JWCb
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:48 2023 by rpki-client on console-ams.rpki-client.org