Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/2fv139P9n0OKMcg-6Ut4m7kHYcA.roa
File: 2fv139P9n0OKMcg-6Ut4m7kHYcA.roa (raw, json)
Hash identifier: HqlmeMMDPePqRTfjWJmHLpPYuOans3NooVMU+AXFuoU=
Subject key identifier: D9:FB:F5:DF:D3:FD:9F:43:8A:31:C8:3E:E9:4B:78:9B:B9:07:61:C0
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018AB986DA58F51578A83169E17BD9CA5DD6
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/2fv139P9n0OKMcg-6Ut4m7kHYcA.roa
Signing time: Thu 21 Sep 2023 20:55:37 +0000
ROA not before: Thu 21 Sep 2023 20:55:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 103.76.131.0/24 maxlen: 24
88.218.40.0/24 maxlen: 24
88.218.42.0/24 maxlen: 24
45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b9:86:da:58:f5:15:78:a8:31:69:e1:7b:d9:ca:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Sep 21 20:55:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9fbf5dfd3fd9f438a31c83ee94b789bb90761c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:16:75:e5:bf:9d:12:b0:88:e3:93:b9:f3:
71:e8:22:25:30:98:da:8d:4c:bb:54:41:7a:c5:d0:
d0:82:9d:f0:a2:a0:48:04:0a:f1:a0:bb:e4:97:73:
09:6b:4e:59:a7:ee:72:71:19:0e:95:e5:6c:63:cb:
2c:bd:7d:29:15:eb:80:c6:83:82:db:82:0d:17:4b:
b1:96:d7:82:8f:18:24:87:83:c6:a5:38:b4:7d:01:
b8:fb:65:4b:81:16:62:b3:6a:b5:59:f7:26:73:5f:
fa:f2:3d:1c:70:af:de:28:b0:f3:a1:0a:67:0c:fe:
c2:25:e3:e4:9a:ae:e6:47:99:31:03:2d:b1:72:50:
91:b8:08:7f:cd:d8:72:5f:02:a0:c0:b2:8a:7d:c7:
d5:d4:f8:37:4e:23:fb:36:a8:d8:d3:5e:57:d3:2d:
49:35:f4:00:fc:ab:2d:3c:c6:fe:06:9a:b1:f8:3b:
c8:bc:68:53:aa:c2:65:af:72:5b:a7:0f:16:af:72:
8e:3b:f6:f9:59:31:cd:b7:9c:e1:1e:41:96:d7:62:
72:9f:ee:0f:7e:91:26:26:5d:86:03:17:24:e5:d0:
7b:37:1f:b5:80:95:3f:42:86:eb:ed:68:91:24:88:
32:5c:83:99:b6:ff:5f:c5:3c:e0:8d:3c:d6:2f:bf:
23:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FB:F5:DF:D3:FD:9F:43:8A:31:C8:3E:E9:4B:78:9B:B9:07:61:C0
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/2fv139P9n0OKMcg-6Ut4m7kHYcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
88.218.40.0/24
88.218.42.0/24
103.76.131.0/24
Signature Algorithm: sha256WithRSAEncryption
66:cd:27:a4:7d:d2:17:74:7c:71:21:a1:ba:fd:59:40:6c:83:
48:fb:ce:bf:3b:a9:dd:c2:8f:d9:46:44:a7:81:23:f0:32:f3:
f2:e1:a3:ae:72:46:18:d4:88:bc:9f:76:91:7b:2c:31:11:db:
04:51:66:a9:cc:3b:e9:b5:46:aa:af:38:63:d8:be:06:90:b6:
4b:6b:84:31:8d:08:8d:eb:d8:7c:4d:b7:a4:a2:a4:e2:53:32:
55:87:38:0b:4f:d3:f0:a8:2a:6e:20:19:1d:a8:55:d9:e6:b0:
c7:b9:df:94:67:b9:b5:52:b0:ab:ff:25:f8:31:f9:dc:6d:f0:
28:9f:b1:aa:8a:93:0c:a7:c5:67:a9:d6:b5:09:e2:de:20:8c:
27:f7:01:3f:b0:b8:ba:84:8f:6e:f5:a3:35:5b:ae:e7:e1:11:
57:88:85:17:19:bb:6c:55:12:71:20:ef:49:0f:d3:a3:e0:f6:
11:4f:bc:67:c7:3b:b7:dc:77:0f:0d:ed:f7:11:76:13:37:21:
45:02:94:36:75:95:c4:73:ad:83:f7:61:de:9f:ab:a7:71:c6:
2c:36:aa:9d:8b:e3:6a:3a:4b:d0:39:07:91:32:09:01:27:fb:
47:64:25:be:be:db:58:25:d6:bd:2b:97:e4:e8:50:55:da:f8:
70:44:ac:42
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYq5htpY9RV4qDFp4XvZyl3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwOTIxMjA1NTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWZiZjVkZmQzZmQ5ZjQzOGEzMWM4M2VlOTRiNzg5YmI5MDc2MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd0WdeW/nRKwiOOTufNx6CIlMJja
jUy7VEF6xdDQgp3woqBIBArxoLvkl3MJa05Zp+5ycRkOleVsY8ssvX0pFeuAxoOC
24INF0uxlteCjxgkh4PGpTi0fQG4+2VLgRZis2q1Wfcmc1/68j0ccK/eKLDzoQpn
DP7CJePkmq7mR5kxAy2xclCRuAh/zdhyXwKgwLKKfcfV1Pg3TiP7NqjY015X0y1J
NfQA/KstPMb+Bpqx+DvIvGhTqsJlr3Jbpw8Wr3KOO/b5WTHNt5zhHkGW12Jyn+4P
fpEmJl2GAxck5dB7Nx+1gJU/Qobr7WiRJIgyXIOZtv9fxTzgjTzWL78jmQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNn79d/T/Z9DijHIPulLeJu5B2HAMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvMmZ2MTM5UDluME9LTWNnLTZVdDRtN2tIWWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALZdGAwQA
WNooAwQAWNoqAwQAZ0yDMA0GCSqGSIb3DQEBCwUAA4IBAQBmzSekfdIXdHxxIaG6
/VlAbINI+86/O6ndwo/ZRkSngSPwMvPy4aOuckYY1Ii8n3aReywxEdsEUWapzDvp
tUaqrzhj2L4GkLZLa4QxjQiN69h8TbekoqTiUzJVhzgLT9PwqCpuIBkdqFXZ5rDH
ud+UZ7m1UrCr/yX4MfncbfAon7GqipMMp8Vnqda1CeLeIIwn9wE/sLi6hI9u9aM1
W67n4RFXiIUXGbtsVRJxIO9JD9Oj4PYRT7xnxzu33HcPDe33EXYTNyFFApQ2dZXE
c62D92Hen6unccYsNqqdi+NqOkvQOQeRMgkBJ/tHZCW+vttYJda9K5fk6FBV2vhw
RKxC
-----END CERTIFICATE-----
Generated at Sat Sep 23 20:09:05 2023 by rpki-client on console-ams.rpki-client.org