Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eW-5qpcki3m_wPDKOZp2D2IHszg.roa
File: eW-5qpcki3m_wPDKOZp2D2IHszg.roa (raw, json)
Hash identifier: /nmmg3juHjTgMZ++NLg6izSGfEusUYFSBrCTtEnDw3o=
Subject key identifier: 79:6F:B9:AA:97:24:8B:79:BF:C0:F0:CA:39:9A:76:0F:62:07:B3:38
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0AEA0511DC9A6E76C9FE91890F26D
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eW-5qpcki3m_wPDKOZp2D2IHszg.roa
Signing time: Mon 02 Jan 2023 05:24:59 +0000
ROA not before: Mon 02 Jan 2023 05:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60468
IP address blocks: 81.15.206.0/23 maxlen: 23
88.220.144.0/22 maxlen: 22
81.15.248.0/22 maxlen: 22
194.183.44.0/22 maxlen: 22
88.220.86.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ae:a0:51:1d:c9:a6:e7:6c:9f:e9:18:90:f2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=796fb9aa97248b79bfc0f0ca399a760f6207b338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:dd:a6:67:b8:b6:92:e1:24:df:60:a9:2b:
fa:4f:ca:b5:a4:dd:64:3d:b3:08:0b:c2:51:60:7e:
0a:4c:c2:5f:5c:38:ed:a5:77:02:80:37:06:35:7a:
60:a7:b9:a8:b6:a2:8e:a6:83:82:a9:5d:ae:87:4c:
c9:ce:7b:d0:4b:db:86:2f:13:9f:3a:0e:56:c5:1b:
48:37:35:74:98:c2:ff:88:af:9e:8e:36:6a:3d:b3:
a2:c1:3c:b3:4f:5f:7a:d6:71:46:52:fa:73:39:77:
da:5f:cb:3b:eb:61:81:5a:9d:1c:8f:ed:c0:ea:95:
83:dd:39:0d:6b:58:7b:44:32:1f:63:41:a2:00:46:
9c:24:cc:31:2f:6a:bf:fd:ba:4f:65:5f:f4:22:83:
85:a7:db:40:c2:23:ff:58:9c:47:b4:1e:65:0a:6d:
4b:6e:21:db:8f:20:04:d7:14:78:04:91:c8:53:19:
b4:44:bc:1d:f5:d6:ef:fd:36:cd:1c:06:6a:4c:25:
c6:ed:b5:6b:56:b5:d5:05:75:8d:d2:aa:20:7f:2b:
6b:95:52:cc:85:7e:d1:11:85:e6:a6:06:2b:37:02:
bd:91:8e:11:01:31:db:67:0c:1a:c6:a9:3b:a6:ae:
a6:07:25:34:7e:dd:48:7a:d2:bf:27:a2:ee:80:4e:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6F:B9:AA:97:24:8B:79:BF:C0:F0:CA:39:9A:76:0F:62:07:B3:38
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/eW-5qpcki3m_wPDKOZp2D2IHszg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.206.0/23
81.15.248.0/22
88.220.86.0/23
88.220.144.0/22
194.183.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:52:63:ac:fc:17:2c:87:d4:a6:6b:f4:ce:07:d6:6f:70:eb:
3e:22:2b:4e:71:4e:67:34:0a:a6:48:d5:5b:57:c1:a0:86:94:
e9:62:14:f2:aa:c0:ba:56:7b:88:79:43:67:c0:df:e8:4c:3a:
3a:5b:a2:e3:df:b4:16:56:f2:31:e2:84:e5:dd:00:a8:ca:09:
09:aa:bb:9e:46:a2:cc:ae:bd:88:fa:03:a8:38:11:5b:b5:a2:
bf:3a:0b:42:f3:74:96:ee:1e:ab:b5:ee:ec:46:bd:85:b8:4b:
7b:ac:5e:58:f6:bd:77:82:00:52:f1:a3:96:cf:4d:40:09:a8:
b4:7c:fc:f6:b3:ec:dc:1d:79:55:33:48:fa:97:1e:48:c1:31:
99:66:55:b8:19:7c:3f:dc:4d:a1:7a:cf:a5:0c:09:33:a8:01:
5f:6d:18:32:01:6c:8f:0c:82:6a:4c:0d:f9:2e:85:3a:db:37:
8b:dc:1a:96:82:5d:8d:35:db:e9:cd:bf:17:0c:5a:c2:80:6c:
4c:a6:22:63:4b:2f:d9:2a:3a:1d:d1:28:e9:08:67:29:ca:b7:
74:51:b4:f2:4a:fe:be:2d:81:0c:d1:61:31:97:a0:58:cb:a4:
92:df:3c:08:bc:79:35:e8:9b:e0:4e:df:df:7d:ee:aa:84:8c:
86:2f:20:12
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVw8K6gUR3Jpudsn+kYkPJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjMwMTAyMDUyNDU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTZmYjlhYTk3MjQ4Yjc5YmZjMGYwY2EzOTlhNzYwZjYyMDdiMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnizdpme4tpLhJN9gqSv6T8q1pN1k
PbMIC8JRYH4KTMJfXDjtpXcCgDcGNXpgp7motqKOpoOCqV2uh0zJznvQS9uGLxOf
Og5WxRtINzV0mML/iK+ejjZqPbOiwTyzT1961nFGUvpzOXfaX8s762GBWp0cj+3A
6pWD3TkNa1h7RDIfY0GiAEacJMwxL2q//bpPZV/0IoOFp9tAwiP/WJxHtB5lCm1L
biHbjyAE1xR4BJHIUxm0RLwd9dbv/TbNHAZqTCXG7bVrVrXVBXWN0qogfytrlVLM
hX7REYXmpgYrNwK9kY4RATHbZwwaxqk7pq6mByU0ft1IetK/J6LugE622QIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHlvuaqXJIt5v8Dwyjmadg9iB7M4MB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvZVctNXFwY2tpM21fd1BES09acDJEMklIc3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUQ/OAwQC
UQ/4AwQBWNxWAwQCWNyQAwQCwrcsMA0GCSqGSIb3DQEBCwUAA4IBAQAqUmOs/Bcs
h9Sma/TOB9ZvcOs+IitOcU5nNAqmSNVbV8GghpTpYhTyqsC6VnuIeUNnwN/oTDo6
W6Lj37QWVvIx4oTl3QCoygkJqrueRqLMrr2I+gOoOBFbtaK/OgtC83SW7h6rte7s
Rr2FuEt7rF5Y9r13ggBS8aOWz01ACai0fPz2s+zcHXlVM0j6lx5IwTGZZlW4GXw/
3E2hes+lDAkzqAFfbRgyAWyPDIJqTA35LoU62zeL3BqWgl2NNdvpzb8XDFrCgGxM
piJjSy/ZKjod0SjpCGcpyrd0UbTySv6+LYEM0WExl6BYy6SS3zwIvHk16JvgTt/f
fe6qhIyGLyAS
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:37 2024 by rpki-client on console-fra.rpki-client.org